./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2077499792 <...> 4 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./300/file1") = 0 [pid 6888] <... mount resumed>) = 0 [pid 6887] <... write resumed>) = 524288 [pid 5075] newfstatat(4, "", [pid 5074] <... ioctl resumed>) = 0 [pid 5073] getdents64(3, [pid 6888] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6888] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5073] close(3 [pid 6888] chdir("./file1" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 6888] <... chdir resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] rmdir("./300" [pid 5071] getdents64(3, [pid 6888] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6887] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6888] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6887] <... munmap resumed>) = 0 [ 235.617343][ T6888] loop1: detected capacity change from 0 to 1024 [pid 6888] truncate("./file1", 0 [pid 6887] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] close(4 [pid 5074] <... close resumed>) = 0 [pid 5071] close(3 [pid 6887] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6887] close(4 [pid 5073] mkdir("./301", 0777 [pid 5075] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 6887] <... close resumed>) = 0 [pid 5075] rmdir("./299/file1" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./300" [pid 5073] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6889 attached [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6889 [pid 6887] exit_group(0) = ? [pid 6889] set_robust_list(0x555583d53660, 24) = 0 [pid 6888] <... truncate resumed>) = 0 [pid 6887] +++ exited with 0 +++ [pid 6889] chdir("./301" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6887, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6889] <... chdir resumed>) = 0 [pid 6888] memfd_create("syzkaller", 0 [pid 6889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6888] <... memfd_create resumed>) = 4 [pid 6889] setpgid(0, 0) = 0 [pid 6888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./296", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6888] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./301", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(3 [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] rmdir("./299" [pid 5076] umount2("./296/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6889] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 6889] write(3, "1000", 4 [pid 5076] newfstatat(AT_FDCWD, "./296/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6889] <... write resumed>) = 4 [pid 5076] unlink("./296/binderfs" [pid 6889] close(3) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] mkdir("./300", 0777 [pid 6889] symlink("/dev/binderfs", "./binderfs" [pid 6888] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./296/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 6889] <... symlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6889] memfd_create("syzkaller", 0 [pid 6888] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 6889] <... memfd_create resumed>) = 3 [pid 6888] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./296/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5073] <... ioctl resumed>) = 0 [pid 6888] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6889] <... mmap resumed>) = 0x7f943d000000 [pid 6889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(AT_FDCWD, "./296/file1", [pid 5073] close(3 [pid 6888] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6888] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] umount2("./296/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./296/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6888] <... close resumed>) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6890 [pid 5076] close(4) = 0 [pid 5076] rmdir("./296/file1") = 0 ./strace-static-x86_64: Process 6890 attached [pid 5076] getdents64(3, [pid 6890] set_robust_list(0x555583d53660, 24 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6890] <... set_robust_list resumed>) = 0 [pid 5076] close(3 [pid 6890] chdir("./301" [pid 6889] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 5071] close(3 [pid 6888] exit_group(0 [pid 5075] <... ioctl resumed>) = 0 [pid 6888] <... exit_group resumed>) = ? [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6890] <... chdir resumed>) = 0 [pid 5076] rmdir("./296") = 0 [pid 6890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] mkdir("./297", 0777 [pid 6890] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6891 attached [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6891 [pid 6891] set_robust_list(0x555583d53660, 24) = 0 [pid 6891] chdir("./301") = 0 [pid 6888] +++ exited with 0 +++ [pid 6890] setpgid(0, 0 [pid 6891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6891] setpgid(0, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6891] <... setpgid resumed>) = 0 [pid 6891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6890] <... setpgid resumed>) = 0 [pid 6891] <... openat resumed>) = 3 [pid 6890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6888, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6891] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6891] <... write resumed>) = 4 [pid 6890] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6891] close(3 [pid 6890] write(3, "1000", 4 [pid 5076] <... openat resumed>) = 3 [pid 6890] <... write resumed>) = 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6892 attached [pid 6891] <... close resumed>) = 0 [pid 6890] close(3 [pid 5072] <... openat resumed>) = 3 [pid 6892] set_robust_list(0x555583d53660, 24 [pid 6891] symlink("/dev/binderfs", "./binderfs" [pid 6892] <... set_robust_list resumed>) = 0 [pid 6891] <... symlink resumed>) = 0 [pid 6892] chdir("./300") = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6892 [pid 5072] newfstatat(3, "", [pid 6892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6891] memfd_create("syzkaller", 0 [pid 6892] <... prctl resumed>) = 0 [pid 6891] <... memfd_create resumed>) = 3 [pid 6892] setpgid(0, 0 [pid 6891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6892] <... setpgid resumed>) = 0 [pid 6891] <... mmap resumed>) = 0x7f943d000000 [pid 6892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6890] <... close resumed>) = 0 [pid 6889] munmap(0x7f943d000000, 138412032 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6890] symlink("/dev/binderfs", "./binderfs" [pid 5072] getdents64(3, [pid 6892] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6890] <... symlink resumed>) = 0 [pid 5072] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6892] write(3, "1000", 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6890] memfd_create("syzkaller", 0 [pid 5072] newfstatat(AT_FDCWD, "./299/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6889] <... munmap resumed>) = 0 [pid 6892] <... write resumed>) = 4 [pid 6890] <... memfd_create resumed>) = 3 [pid 6889] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] unlink("./299/binderfs" [pid 6892] close(3 [pid 6890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6889] <... openat resumed>) = 4 [pid 6892] <... close resumed>) = 0 [pid 6890] <... mmap resumed>) = 0x7f943d000000 [pid 6889] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... unlink resumed>) = 0 [pid 6892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6892] memfd_create("syzkaller", 0) = 3 [pid 6892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6891] <... write resumed>) = 524288 [pid 6891] munmap(0x7f943d000000, 138412032 [pid 6890] <... write resumed>) = 524288 [pid 6891] <... munmap resumed>) = 0 [pid 6891] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6891] ioctl(4, LOOP_SET_FD, 3 [pid 6889] <... ioctl resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6892] <... write resumed>) = 524288 [pid 6890] munmap(0x7f943d000000, 138412032 [pid 6889] close(3) = 0 [pid 6892] munmap(0x7f943d000000, 138412032) = 0 [pid 6889] close(4) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6892] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 235.820286][ T6889] loop3: detected capacity change from 0 to 1024 [ 235.849577][ T6891] loop0: detected capacity change from 0 to 1024 [pid 6892] ioctl(4, LOOP_SET_FD, 3 [pid 6890] <... munmap resumed>) = 0 [pid 6889] mkdir("./file1", 0777 [pid 5076] close(3 [pid 5072] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6890] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5076] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6890] ioctl(4, LOOP_SET_FD, 3 [pid 6889] <... mkdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] newfstatat(AT_FDCWD, "./299/file1", [pid 6891] <... ioctl resumed>) = 0 [pid 6891] close(3) = 0 [pid 6891] close(4) = 0 [pid 6891] mkdir("./file1", 0777) = 0 [pid 6891] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6893 attached [pid 6889] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6893 [pid 5072] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6893] set_robust_list(0x555583d53660, 24) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6893] chdir("./297" [pid 5072] openat(AT_FDCWD, "./299/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6893] <... chdir resumed>) = 0 [pid 6891] <... mount resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 6893] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6892] <... ioctl resumed>) = 0 [pid 6891] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] newfstatat(4, "", [pid 6893] <... prctl resumed>) = 0 [pid 6892] close(3 [pid 6891] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6893] setpgid(0, 0 [pid 6892] <... close resumed>) = 0 [pid 6891] chdir("./file1" [pid 5072] getdents64(4, [pid 6893] <... setpgid resumed>) = 0 [pid 6892] close(4 [pid 6891] <... chdir resumed>) = 0 [pid 6890] <... ioctl resumed>) = 0 [pid 6889] <... mount resumed>) = 0 [pid 6893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6892] <... close resumed>) = 0 [pid 6891] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 235.868057][ T6892] loop4: detected capacity change from 0 to 1024 [ 235.879822][ T6890] loop2: detected capacity change from 0 to 1024 [pid 6890] close(3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6893] <... openat resumed>) = 3 [pid 6892] mkdir("./file1", 0777 [pid 6891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6890] <... close resumed>) = 0 [pid 6889] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] getdents64(4, [pid 6893] write(3, "1000", 4 [pid 6892] <... mkdir resumed>) = 0 [pid 6891] truncate("./file1", 0 [pid 6890] close(4 [pid 6889] <... openat resumed>) = 3 [pid 6893] <... write resumed>) = 4 [pid 6892] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6893] close(3 [pid 6890] <... close resumed>) = 0 [pid 6889] chdir("./file1" [pid 5072] close(4 [pid 6893] <... close resumed>) = 0 [pid 6890] mkdir("./file1", 0777 [pid 6889] <... chdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6893] symlink("/dev/binderfs", "./binderfs" [pid 5072] rmdir("./299/file1" [pid 6893] <... symlink resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6893] memfd_create("syzkaller", 0 [pid 6889] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] getdents64(3, [pid 6893] <... memfd_create resumed>) = 3 [pid 6891] <... truncate resumed>) = 0 [pid 6890] <... mkdir resumed>) = 0 [pid 6889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6891] memfd_create("syzkaller", 0 [pid 6890] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6889] truncate("./file1", 0 [pid 5072] close(3 [pid 6893] <... mmap resumed>) = 0x7f943d000000 [pid 6891] <... memfd_create resumed>) = 4 [pid 6893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... close resumed>) = 0 [pid 6891] <... mmap resumed>) = 0x7f943d000000 [pid 5072] rmdir("./299" [pid 6891] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./300", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6892] <... mount resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6892] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6889] <... truncate resumed>) = 0 [pid 6892] chdir("./file1" [pid 6891] <... write resumed>) = 524288 [pid 6890] <... mount resumed>) = 0 [pid 6889] memfd_create("syzkaller", 0 [pid 6891] munmap(0x7f943d000000, 138412032 [pid 6893] <... write resumed>) = 524288 [pid 6892] <... chdir resumed>) = 0 [pid 6890] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6889] <... memfd_create resumed>) = 4 [pid 6893] munmap(0x7f943d000000, 138412032 [pid 6892] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6891] <... munmap resumed>) = 0 [pid 6890] <... openat resumed>) = 3 [pid 6889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6891] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6891] close(4 [pid 6893] <... munmap resumed>) = 0 [pid 6892] truncate("./file1", 0 [pid 6890] chdir("./file1" [pid 6889] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6890] <... chdir resumed>) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6890] truncate("./file1", 0 [pid 6893] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6893] ioctl(4, LOOP_SET_FD, 3 [pid 6890] <... truncate resumed>) = 0 [pid 6892] <... truncate resumed>) = 0 [pid 6891] <... close resumed>) = 0 [pid 6890] memfd_create("syzkaller", 0) = 4 [pid 6889] <... write resumed>) = 524288 [pid 6891] exit_group(0) = ? [pid 6890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6892] memfd_create("syzkaller", 0 [pid 6889] munmap(0x7f943d000000, 138412032 [pid 6893] <... ioctl resumed>) = 0 [pid 6892] <... memfd_create resumed>) = 4 [pid 6891] +++ exited with 0 +++ [pid 6890] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... ioctl resumed>) = 0 [pid 6893] close(3 [pid 6892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6889] <... munmap resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6891, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6893] <... close resumed>) = 0 [pid 6892] <... mmap resumed>) = 0x7f943d000000 [pid 5072] close(3 [pid 6893] close(4 [pid 5072] <... close resumed>) = 0 [pid 6893] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6893] mkdir("./file1", 0777 [pid 5071] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6893] <... mkdir resumed>) = 0 [pid 6890] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6889] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6892] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6893] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6889] close(4 [pid 5071] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6890] <... write resumed>) = 524288 [pid 6889] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6894 attached [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6894 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6894] set_robust_list(0x555583d53660, 24 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./301/binderfs", [pid 6894] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6894] chdir("./300" [pid 5071] unlink("./301/binderfs" [pid 6894] <... chdir resumed>) = 0 [pid 6890] munmap(0x7f943d000000, 138412032 [pid 6892] <... write resumed>) = 524288 [pid 5071] <... unlink resumed>) = 0 [pid 6894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6892] munmap(0x7f943d000000, 138412032 [pid 6890] <... munmap resumed>) = 0 [ 236.026107][ T6893] loop5: detected capacity change from 0 to 1024 [pid 5071] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6894] <... prctl resumed>) = 0 [pid 6893] <... mount resumed>) = 0 [pid 6894] setpgid(0, 0 [pid 6893] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6892] <... munmap resumed>) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6894] <... setpgid resumed>) = 0 [pid 6892] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6889] exit_group(0 [pid 6894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6893] <... openat resumed>) = 3 [pid 6892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6890] close(4 [pid 6889] <... exit_group resumed>) = ? [pid 6894] <... openat resumed>) = 3 [pid 6893] chdir("./file1" [pid 6892] close(4 [pid 6889] +++ exited with 0 +++ [pid 6894] write(3, "1000", 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6889, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6893] <... chdir resumed>) = 0 [pid 6894] <... write resumed>) = 4 [pid 6893] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6894] close(3 [pid 6893] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6894] <... close resumed>) = 0 [pid 6893] truncate("./file1", 0 [pid 5074] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 6894] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6890] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6894] <... symlink resumed>) = 0 [pid 6890] exit_group(0 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6893] <... truncate resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5071] newfstatat(AT_FDCWD, "./301/file1", [pid 6894] memfd_create("syzkaller", 0 [pid 6893] memfd_create("syzkaller", 0 [pid 6892] <... close resumed>) = 0 [pid 6890] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 6893] <... memfd_create resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6894] <... memfd_create resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6893] <... mmap resumed>) = 0x7f943d000000 [pid 6892] exit_group(0 [pid 5074] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6894] <... mmap resumed>) = 0x7f943d000000 [pid 6890] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 4 [pid 6892] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./301/binderfs", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6890, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] newfstatat(4, "", [pid 5073] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] unlink("./301/binderfs" [pid 5073] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 6893] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(3, "", [pid 5071] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5071] close(4 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... close resumed>) = 0 [pid 6892] +++ exited with 0 +++ [pid 5071] rmdir("./301/file1" [pid 6894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6893] <... write resumed>) = 524288 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6892, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5075] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 6894] <... write resumed>) = 524288 [pid 6893] munmap(0x7f943d000000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 6894] munmap(0x7f943d000000, 138412032 [pid 5075] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./301/binderfs", [pid 6894] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6894] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6893] <... munmap resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] newfstatat(AT_FDCWD, "./301/file1", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] close(3 [pid 6894] <... openat resumed>) = 4 [pid 6893] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./301/binderfs" [pid 5071] <... close resumed>) = 0 [pid 6894] ioctl(4, LOOP_SET_FD, 3 [pid 6893] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 5074] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./301" [pid 5073] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6893] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 6893] <... close resumed>) = 0 [pid 5075] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5071] mkdir("./302", 0777) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6894] <... ioctl resumed>) = 0 [pid 6893] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(4, "", [pid 5071] <... openat resumed>) = 3 [pid 6894] close(3 [pid 6893] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./300/binderfs", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6894] <... close resumed>) = 0 [pid 6893] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6894] close(4 [pid 5075] unlink("./300/binderfs" [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6893, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./301/file1", [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6894] <... close resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6894] mkdir("./file1", 0777 [pid 5074] getdents64(4, [pid 5073] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6894] <... mkdir resumed>) = 0 [pid 5076] umount2("./297", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5074] close(4 [pid 5073] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./301/file1" [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6894] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 5073] getdents64(4, [pid 5076] newfstatat(3, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(AT_FDCWD, "./300/file1", [pid 5074] close(3 [pid 5073] getdents64(4, [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] rmdir("./301" [pid 5073] close(4 [pid 5076] umount2("./297/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./300/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./297/binderfs", [pid 5074] mkdir("./302", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] rmdir("./301/file1" [pid 5076] unlink("./297/binderfs" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5073] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./300/file1" [pid 5073] close(3) = 0 [pid 5075] <... rmdir resumed>) = 0 [ 236.161855][ T6894] loop1: detected capacity change from 0 to 1024 [pid 5073] rmdir("./301") = 0 [pid 6894] <... mount resumed>) = 0 [pid 5076] umount2("./297/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 6894] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] mkdir("./302", 0777 [pid 6894] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 6894] chdir("./file1" [pid 5075] <... close resumed>) = 0 [pid 6894] <... chdir resumed>) = 0 [pid 5075] rmdir("./300" [pid 6894] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] mkdir("./301", 0777) = 0 [pid 6894] truncate("./file1", 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6894] <... truncate resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6894] memfd_create("syzkaller", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6894] <... memfd_create resumed>) = 4 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] close(3 [pid 5076] umount2("./297/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] newfstatat(AT_FDCWD, "./297/file1", [pid 6894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6895 attached [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6895 [pid 6895] set_robust_list(0x555583d53660, 24 [pid 5076] umount2("./297/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6895] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6894] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "./297/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6895] chdir("./302") = 0 [pid 6894] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [pid 5074] close(3 [pid 6895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6895] <... prctl resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 6895] setpgid(0, 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6895] <... setpgid resumed>) = 0 [pid 6895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6895] <... openat resumed>) = 3 [pid 5076] close(4) = 0 [pid 5076] rmdir("./297/file1" [pid 6895] write(3, "1000", 4./strace-static-x86_64: Process 6896 attached [pid 6894] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 6896] set_robust_list(0x555583d53660, 24) = 0 [pid 6896] chdir("./302" [pid 5075] <... ioctl resumed>) = 0 [pid 6896] <... chdir resumed>) = 0 [pid 6894] munmap(0x7f943d000000, 138412032 [pid 6896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6895] <... write resumed>) = 4 [pid 6894] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6896 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6896] <... prctl resumed>) = 0 [pid 6895] close(3 [pid 6894] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 6895] <... close resumed>) = 0 [pid 5075] close(3 [pid 6896] setpgid(0, 0 [pid 6895] symlink("/dev/binderfs", "./binderfs" [pid 6894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] close(3 [pid 6896] <... setpgid resumed>) = 0 [pid 6895] <... symlink resumed>) = 0 [pid 6894] close(4 [pid 5073] <... close resumed>) = 0 [pid 6896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] rmdir("./297" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6894] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6896] <... openat resumed>) = 3 [pid 6896] write(3, "1000", 4) = 4 [pid 6896] close(3) = 0 [pid 6896] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6897 [pid 6896] memfd_create("syzkaller", 0) = 3 [pid 6896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 6897 attached [pid 6897] set_robust_list(0x555583d53660, 24 [pid 6896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6895] memfd_create("syzkaller", 0 [pid 5076] mkdir("./298", 0777 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6898 [pid 6897] <... set_robust_list resumed>) = 0 [pid 6897] chdir("./302" [pid 5076] <... mkdir resumed>) = 0 [pid 6897] <... chdir resumed>) = 0 [pid 6897] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6898 attached ) = 0 [pid 6898] set_robust_list(0x555583d53660, 24 [pid 6897] setpgid(0, 0 [pid 6895] <... memfd_create resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6898] <... set_robust_list resumed>) = 0 [pid 6897] <... setpgid resumed>) = 0 [pid 6894] exit_group(0 [pid 5076] <... openat resumed>) = 3 [pid 6898] chdir("./301" [pid 6897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6894] <... exit_group resumed>) = ? [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6897] <... openat resumed>) = 3 [pid 6895] <... mmap resumed>) = 0x7f943d000000 [pid 6894] +++ exited with 0 +++ [pid 6898] <... chdir resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6894, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- [pid 6898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6897] write(3, "1000", 4 [pid 6896] <... write resumed>) = 524288 [pid 6895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6898] <... prctl resumed>) = 0 [pid 6897] <... write resumed>) = 4 [pid 6897] close(3 [pid 6898] setpgid(0, 0 [pid 6897] <... close resumed>) = 0 [pid 5072] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6898] <... setpgid resumed>) = 0 [pid 6897] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6897] <... symlink resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6897] memfd_create("syzkaller", 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 6898] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6898] write(3, "1000", 4 [pid 6897] <... memfd_create resumed>) = 3 [pid 6898] <... write resumed>) = 4 [pid 6897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6896] munmap(0x7f943d000000, 138412032 [pid 5072] getdents64(3, [pid 6898] close(3 [pid 6897] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6898] <... close resumed>) = 0 [pid 6897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6898] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6898] <... symlink resumed>) = 0 [pid 6896] <... munmap resumed>) = 0 [pid 6895] <... write resumed>) = 524288 [pid 6898] memfd_create("syzkaller", 0 [pid 6896] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] newfstatat(AT_FDCWD, "./300/binderfs", [pid 6896] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6898] <... memfd_create resumed>) = 3 [pid 6896] ioctl(4, LOOP_SET_FD, 3 [pid 5072] unlink("./300/binderfs" [pid 6898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... unlink resumed>) = 0 [pid 6898] <... mmap resumed>) = 0x7f943d000000 [pid 5072] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6897] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 6898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6895] munmap(0x7f943d000000, 138412032) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6895] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./300/file1", [pid 6895] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6895] ioctl(4, LOOP_SET_FD, 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6899 attached [pid 6896] <... ioctl resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./300/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6898] <... write resumed>) = 524288 [pid 6897] munmap(0x7f943d000000, 138412032 [pid 6896] close(3 [pid 5072] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6899 [pid 6899] set_robust_list(0x555583d53660, 24 [pid 6896] <... close resumed>) = 0 [pid 6896] close(4 [pid 6897] <... munmap resumed>) = 0 [pid 6896] <... close resumed>) = 0 [pid 6899] <... set_robust_list resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 6896] mkdir("./file1", 0777) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6899] chdir("./298" [pid 6898] munmap(0x7f943d000000, 138412032 [pid 6897] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] getdents64(4, [pid 6899] <... chdir resumed>) = 0 [pid 6898] <... munmap resumed>) = 0 [pid 6897] <... openat resumed>) = 4 [pid 6896] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6899] prctl(PR_SET_PDEATHSIG, SIGKILL [ 236.362848][ T6896] loop3: detected capacity change from 0 to 1024 [ 236.390636][ T6895] loop0: detected capacity change from 0 to 1024 [pid 6897] ioctl(4, LOOP_SET_FD, 3 [pid 6899] <... prctl resumed>) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6899] setpgid(0, 0) = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6895] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6898] <... openat resumed>) = 4 [pid 6895] close(3 [pid 5072] rmdir("./300/file1" [pid 6899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6898] ioctl(4, LOOP_SET_FD, 3 [pid 6895] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6899] <... openat resumed>) = 3 [pid 6895] close(4 [pid 6896] <... mount resumed>) = 0 [pid 6895] <... close resumed>) = 0 [pid 6896] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6895] mkdir("./file1", 0777 [pid 6896] <... openat resumed>) = 3 [pid 6895] <... mkdir resumed>) = 0 [pid 6896] chdir("./file1" [pid 6895] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6899] write(3, "1000", 4 [pid 6896] <... chdir resumed>) = 0 [pid 6895] <... mount resumed>) = 0 [pid 5072] getdents64(3, [pid 6896] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6895] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6895] <... openat resumed>) = 3 [pid 6896] truncate("./file1", 0 [pid 6895] chdir("./file1") = 0 [pid 6895] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6899] <... write resumed>) = 4 [pid 6895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(3 [pid 6899] close(3 [pid 6897] <... ioctl resumed>) = 0 [pid 6895] truncate("./file1", 0 [pid 6899] <... close resumed>) = 0 [pid 6897] close(3 [pid 6896] <... truncate resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6899] symlink("/dev/binderfs", "./binderfs" [pid 6898] <... ioctl resumed>) = 0 [pid 6897] <... close resumed>) = 0 [pid 6896] memfd_create("syzkaller", 0 [pid 5072] rmdir("./300" [pid 6899] <... symlink resumed>) = 0 [pid 6898] close(3 [pid 6897] close(4 [pid 6896] <... memfd_create resumed>) = 4 [pid 6898] <... close resumed>) = 0 [pid 6897] <... close resumed>) = 0 [pid 6896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6898] close(4 [pid 6897] mkdir("./file1", 0777 [pid 6896] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... rmdir resumed>) = 0 [pid 6899] memfd_create("syzkaller", 0 [pid 6898] <... close resumed>) = 0 [pid 6897] <... mkdir resumed>) = 0 [pid 6896] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6895] <... truncate resumed>) = 0 [pid 6898] mkdir("./file1", 0777 [pid 6897] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6899] <... memfd_create resumed>) = 3 [pid 6895] memfd_create("syzkaller", 0 [pid 6899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] mkdir("./301", 0777 [pid 6899] <... mmap resumed>) = 0x7f943d000000 [pid 6898] <... mkdir resumed>) = 0 [pid 6895] <... memfd_create resumed>) = 4 [pid 5072] <... mkdir resumed>) = 0 [pid 6895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [ 236.410771][ T6897] loop2: detected capacity change from 0 to 1024 [ 236.421675][ T6898] loop4: detected capacity change from 0 to 1024 [pid 6898] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6896] <... write resumed>) = 524288 [pid 6895] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6897] <... mount resumed>) = 0 [pid 6897] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6897] chdir("./file1" [pid 6899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6897] <... chdir resumed>) = 0 [pid 6897] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6897] truncate("./file1", 0) = 0 [pid 6897] memfd_create("syzkaller", 0) = 4 [pid 6898] <... mount resumed>) = 0 [pid 6897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6898] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6897] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6899] <... write resumed>) = 524288 [pid 6898] <... openat resumed>) = 3 [pid 6895] <... write resumed>) = 524288 [pid 6898] chdir("./file1") = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6898] truncate("./file1", 0) = 0 [pid 6896] munmap(0x7f943d000000, 138412032 [pid 6898] memfd_create("syzkaller", 0 [pid 6896] <... munmap resumed>) = 0 [pid 6898] <... memfd_create resumed>) = 4 [pid 6896] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6898] <... mmap resumed>) = 0x7f943d000000 [pid 6896] close(4 [pid 6899] munmap(0x7f943d000000, 138412032 [pid 6898] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6897] <... write resumed>) = 524288 [pid 6896] <... close resumed>) = 0 [pid 6895] munmap(0x7f943d000000, 138412032) = 0 [pid 6895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6895] close(4 [pid 6899] <... munmap resumed>) = 0 [pid 6895] <... close resumed>) = 0 [pid 6899] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... ioctl resumed>) = 0 [pid 6899] <... openat resumed>) = 4 [pid 6899] ioctl(4, LOOP_SET_FD, 3 [pid 5072] close(3) = 0 [pid 6898] <... write resumed>) = 524288 [pid 6897] munmap(0x7f943d000000, 138412032) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6897] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6896] exit_group(0 [pid 6895] exit_group(0 [pid 6897] close(4 [pid 6896] <... exit_group resumed>) = ? [pid 6895] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6900 attached [pid 6899] <... ioctl resumed>) = 0 [pid 6898] munmap(0x7f943d000000, 138412032 [pid 6897] <... close resumed>) = 0 [pid 6896] +++ exited with 0 +++ [pid 6895] +++ exited with 0 +++ [pid 6900] set_robust_list(0x555583d53660, 24 [pid 6899] close(3 [pid 6898] <... munmap resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6896, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6900 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6895, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6900] <... set_robust_list resumed>) = 0 [pid 6899] <... close resumed>) = 0 [pid 6900] chdir("./301" [pid 6899] close(4 [pid 6900] <... chdir resumed>) = 0 [pid 6899] <... close resumed>) = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6899] mkdir("./file1", 0777 [pid 6898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6897] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... prctl resumed>) = 0 [pid 6899] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6900] setpgid(0, 0 [pid 6898] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 6900] <... setpgid resumed>) = 0 [pid 6899] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] newfstatat(3, "", [pid 5071] newfstatat(3, "", [pid 6900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6900] <... openat resumed>) = 3 [pid 6897] <... exit_group resumed>) = ? [pid 5074] getdents64(3, [pid 5071] getdents64(3, [pid 6900] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6900] <... write resumed>) = 4 [pid 6897] +++ exited with 0 +++ [pid 5074] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [ 236.523104][ T6899] loop5: detected capacity change from 0 to 1024 [pid 6900] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... close resumed>) = 0 [pid 6899] <... mount resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./302/binderfs", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6897, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] newfstatat(AT_FDCWD, "./302/binderfs", [pid 6900] symlink("/dev/binderfs", "./binderfs" [pid 6899] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6898] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6900] <... symlink resumed>) = 0 [pid 6899] <... openat resumed>) = 3 [pid 5074] unlink("./302/binderfs" [pid 5073] <... restart_syscall resumed>) = 0 [pid 5071] unlink("./302/binderfs" [pid 6900] memfd_create("syzkaller", 0 [pid 6899] chdir("./file1" [pid 6898] exit_group(0 [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6900] <... memfd_create resumed>) = 3 [pid 6899] <... chdir resumed>) = 0 [pid 6898] <... exit_group resumed>) = ? [pid 5074] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6899] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6898] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... mmap resumed>) = 0x7f943d000000 [pid 6899] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6898, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6899] truncate("./file1", 0) = 0 [pid 5075] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6899] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6899] <... memfd_create resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5075] <... openat resumed>) = 3 [pid 6899] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] newfstatat(3, "", [pid 5075] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./301/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] unlink("./301/binderfs" [pid 5071] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5074] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./302/file1", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./302/file1", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./302/binderfs", [pid 5074] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6899] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./302/binderfs" [pid 5071] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6900] <... write resumed>) = 524288 [pid 5074] <... openat resumed>) = 4 [pid 5073] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 6900] munmap(0x7f943d000000, 138412032) = 0 [pid 5074] getdents64(4, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 6900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./301/file1", [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6900] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4 [pid 5071] close(4 [pid 6900] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./302/file1" [pid 5071] <... close resumed>) = 0 [pid 5075] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./302/file1" [pid 6899] munmap(0x7f943d000000, 138412032 [pid 5073] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6899] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./302/file1", [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6899] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6899] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 6899] close(4 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./302/file1") = 0 [pid 6899] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5075] <... openat resumed>) = 4 [pid 5074] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5073] close(3 [pid 6900] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(3 [pid 5073] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6900] close(3 [pid 5071] rmdir("./302" [pid 6900] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5073] rmdir("./302" [pid 6900] close(4 [pid 5074] rmdir("./302" [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... rmdir resumed>) = 0 [pid 6900] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] mkdir("./303", 0777 [pid 6900] mkdir("./file1", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6900] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] mkdir("./303", 0777 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] mkdir("./303", 0777 [pid 6900] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6899] exit_group(0 [pid 5075] close(4 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... mkdir resumed>) = 0 [pid 6899] <... exit_group resumed>) = ? [pid 5075] rmdir("./301/file1" [pid 5074] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6900] <... mount resumed>) = 0 [pid 5075] close(3 [pid 6900] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] <... close resumed>) = 0 [pid 6900] chdir("./file1") = 0 [pid 6899] +++ exited with 0 +++ [pid 5075] rmdir("./301" [pid 6900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6899, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 6900] truncate("./file1", 0 [pid 5075] mkdir("./302", 0777 [pid 5076] umount2("./298", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6900] <... truncate resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6900] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6900] <... memfd_create resumed>) = 4 [pid 5076] newfstatat(3, "", [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6900] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [ 236.661811][ T6900] loop1: detected capacity change from 0 to 1024 [pid 6900] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./298/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./298/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./298/binderfs") = 0 [pid 5076] umount2("./298/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 6900] <... write resumed>) = 524288 [pid 5076] umount2("./298/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6900] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... munmap resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./298/file1", [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./298/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./298/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6900] close(4 [pid 5076] newfstatat(4, "", [pid 6900] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5073] close(3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./298/file1") = 0 ./strace-static-x86_64: Process 6901 attached [pid 6901] set_robust_list(0x555583d53660, 24 [pid 5071] close(3 [pid 6901] <... set_robust_list resumed>) = 0 [pid 5076] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 6901] chdir("./303") = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6901 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3 [pid 6901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6900] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 6901] <... prctl resumed>) = 0 [pid 6901] setpgid(0, 0 [pid 5076] rmdir("./298" [pid 6901] <... setpgid resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6900] <... exit_group resumed>) = ? [pid 6900] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6900, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] mkdir("./299", 0777 [pid 6901] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 6901] write(3, "1000", 4) = 4 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6902 ./strace-static-x86_64: Process 6902 attached [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6901] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6901] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6902] set_robust_list(0x555583d53660, 24 [pid 6901] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6902] <... set_robust_list resumed>) = 0 [pid 5074] close(3 [pid 6901] <... symlink resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 6901] memfd_create("syzkaller", 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6901] <... memfd_create resumed>) = 3 [pid 5072] getdents64(3, [pid 6901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6901] <... mmap resumed>) = 0x7f943d000000 [pid 5072] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6902] chdir("./303" [pid 6901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6902] <... chdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] newfstatat(AT_FDCWD, "./301/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./301/binderfs"./strace-static-x86_64: Process 6903 attached [pid 6902] <... prctl resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 6903] set_robust_list(0x555583d53660, 24 [pid 6902] setpgid(0, 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6903 [pid 5072] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6903] <... set_robust_list resumed>) = 0 [pid 6902] <... setpgid resumed>) = 0 [pid 6902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6903] chdir("./303" [pid 6902] write(3, "1000", 4 [pid 6903] <... chdir resumed>) = 0 [pid 6902] <... write resumed>) = 4 [pid 6903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6902] close(3 [pid 6903] <... prctl resumed>) = 0 [pid 6902] <... close resumed>) = 0 [pid 6903] setpgid(0, 0 [pid 6902] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(3 [pid 6903] <... setpgid resumed>) = 0 [pid 6902] <... symlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6901] <... write resumed>) = 524288 [pid 5072] <... umount2 resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6902] memfd_create("syzkaller", 0) = 3 [pid 5072] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./301/file1", [pid 6903] <... openat resumed>) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6904 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6904 attached [pid 5072] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6904] set_robust_list(0x555583d53660, 24 [pid 6902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6903] write(3, "1000", 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6902] <... mmap resumed>) = 0x7f943d000000 [pid 6903] <... write resumed>) = 4 [pid 6903] close(3) = 0 [pid 6904] <... set_robust_list resumed>) = 0 [pid 6903] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... ioctl resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6904] chdir("./302") = 0 [pid 5072] <... openat resumed>) = 4 [pid 6904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] newfstatat(4, "", [pid 6904] setpgid(0, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6904] <... setpgid resumed>) = 0 [pid 5072] getdents64(4, [pid 6904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6904] <... openat resumed>) = 3 [pid 6903] <... symlink resumed>) = 0 [pid 6902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5072] getdents64(4, [pid 6904] write(3, "1000", 4 [pid 6901] munmap(0x7f943d000000, 138412032 [pid 5076] <... close resumed>) = 0 [pid 6904] <... write resumed>) = 4 [pid 6903] memfd_create("syzkaller", 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6904] close(3 [pid 6903] <... memfd_create resumed>) = 3 [pid 6901] <... munmap resumed>) = 0 [pid 5072] close(4 [pid 6904] <... close resumed>) = 0 [pid 6903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6904] symlink("/dev/binderfs", "./binderfs" [pid 6903] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... close resumed>) = 0 [pid 6904] <... symlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6905 [pid 6904] memfd_create("syzkaller", 0 [pid 5072] rmdir("./301/file1") = 0 [pid 6904] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6905 attached [pid 6904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6902] <... write resumed>) = 524288 [pid 6901] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] getdents64(3, [pid 6905] set_robust_list(0x555583d53660, 24 [pid 6904] <... mmap resumed>) = 0x7f943d000000 [pid 6902] munmap(0x7f943d000000, 138412032 [pid 6901] <... openat resumed>) = 4 [pid 6905] <... set_robust_list resumed>) = 0 [pid 6904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6901] ioctl(4, LOOP_SET_FD, 3 [pid 6905] chdir("./299") = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] close(3 [pid 6905] setpgid(0, 0 [pid 5072] <... close resumed>) = 0 [pid 6905] <... setpgid resumed>) = 0 [pid 6905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] rmdir("./301" [pid 6905] <... openat resumed>) = 3 [pid 6905] write(3, "1000", 4 [pid 5072] <... rmdir resumed>) = 0 [pid 6905] <... write resumed>) = 4 [pid 6905] close(3 [pid 5072] mkdir("./302", 0777 [pid 6905] <... close resumed>) = 0 [pid 6903] <... write resumed>) = 524288 [pid 6902] <... munmap resumed>) = 0 [pid 6901] <... ioctl resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6905] symlink("/dev/binderfs", "./binderfs" [pid 6903] munmap(0x7f943d000000, 138412032 [pid 6902] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6905] <... symlink resumed>) = 0 [pid 6903] <... munmap resumed>) = 0 [pid 6902] <... openat resumed>) = 4 [pid 6905] memfd_create("syzkaller", 0 [pid 6902] ioctl(4, LOOP_SET_FD, 3 [pid 6905] <... memfd_create resumed>) = 3 [pid 6905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6905] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 3 [pid 6905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6903] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6901] close(3 [pid 6904] <... write resumed>) = 524288 [pid 6903] <... openat resumed>) = 4 [pid 6901] <... close resumed>) = 0 [pid 6903] ioctl(4, LOOP_SET_FD, 3 [pid 6901] close(4) = 0 [pid 6904] munmap(0x7f943d000000, 138412032 [pid 6905] <... write resumed>) = 524288 [pid 6902] <... ioctl resumed>) = 0 [pid 6901] mkdir("./file1", 0777 [pid 6905] munmap(0x7f943d000000, 138412032 [pid 6904] <... munmap resumed>) = 0 [pid 6902] close(3 [pid 6905] <... munmap resumed>) = 0 [pid 6903] <... ioctl resumed>) = 0 [pid 6901] <... mkdir resumed>) = 0 [pid 6901] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6903] close(3 [pid 6902] <... close resumed>) = 0 [pid 6905] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6904] <... openat resumed>) = 4 [pid 6903] <... close resumed>) = 0 [pid 6902] close(4 [pid 6905] <... openat resumed>) = 4 [pid 6904] ioctl(4, LOOP_SET_FD, 3 [pid 6903] close(4 [pid 6902] <... close resumed>) = 0 [ 236.899995][ T6901] loop2: detected capacity change from 0 to 1024 [ 236.917402][ T6902] loop0: detected capacity change from 0 to 1024 [ 236.934398][ T6903] loop3: detected capacity change from 0 to 1024 [pid 6905] ioctl(4, LOOP_SET_FD, 3 [pid 6903] <... close resumed>) = 0 [pid 6902] mkdir("./file1", 0777 [pid 6904] <... ioctl resumed>) = 0 [pid 6903] mkdir("./file1", 0777 [pid 6902] <... mkdir resumed>) = 0 [pid 6901] <... mount resumed>) = 0 [pid 6903] <... mkdir resumed>) = 0 [pid 6901] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6903] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6901] chdir("./file1" [pid 5072] <... ioctl resumed>) = 0 [pid 6901] <... chdir resumed>) = 0 [pid 6901] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6902] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6903] <... mount resumed>) = 0 [pid 5072] close(3 [pid 6905] <... ioctl resumed>) = 0 [pid 6904] close(3 [pid 6903] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6901] truncate("./file1", 0 [pid 6905] close(3 [pid 6904] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6905] <... close resumed>) = 0 [pid 6904] close(4 [pid 6903] <... openat resumed>) = 3 [pid 6901] <... truncate resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6905] close(4 [pid 6904] <... close resumed>) = 0 [pid 6903] chdir("./file1" [pid 6901] memfd_create("syzkaller", 0 [pid 6905] <... close resumed>) = 0 [pid 6904] mkdir("./file1", 0777 [pid 6903] <... chdir resumed>) = 0 [pid 6902] <... mount resumed>) = 0 [pid 6901] <... memfd_create resumed>) = 4 [ 236.954694][ T6904] loop4: detected capacity change from 0 to 1024 [ 236.961414][ T6905] loop5: detected capacity change from 0 to 1024 [pid 6905] mkdir("./file1", 0777 [pid 6904] <... mkdir resumed>) = 0 [pid 6902] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6906 attached [pid 6905] <... mkdir resumed>) = 0 [pid 6903] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6903] truncate("./file1", 0 [pid 6901] <... mmap resumed>) = 0x7f943d000000 [pid 6906] set_robust_list(0x555583d53660, 24 [pid 6905] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6906] <... set_robust_list resumed>) = 0 [pid 6903] <... truncate resumed>) = 0 [pid 6902] <... openat resumed>) = 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6906 [pid 6906] chdir("./302" [pid 6904] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6902] chdir("./file1" [pid 6906] <... chdir resumed>) = 0 [pid 6902] <... chdir resumed>) = 0 [pid 6906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6902] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6906] setpgid(0, 0 [pid 6903] memfd_create("syzkaller", 0 [pid 6902] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6906] <... setpgid resumed>) = 0 [pid 6902] truncate("./file1", 0 [pid 6906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6903] <... memfd_create resumed>) = 4 [pid 6901] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6906] <... openat resumed>) = 3 [pid 6903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6906] write(3, "1000", 4 [pid 6903] <... mmap resumed>) = 0x7f943d000000 [pid 6902] <... truncate resumed>) = 0 [pid 6901] <... write resumed>) = 524288 [pid 6906] <... write resumed>) = 4 [pid 6902] memfd_create("syzkaller", 0 [pid 6906] close(3 [pid 6902] <... memfd_create resumed>) = 4 [pid 6906] <... close resumed>) = 0 [pid 6902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6906] symlink("/dev/binderfs", "./binderfs" [pid 6902] <... mmap resumed>) = 0x7f943d000000 [pid 6906] <... symlink resumed>) = 0 [pid 6906] memfd_create("syzkaller", 0 [pid 6903] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6902] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6906] <... memfd_create resumed>) = 3 [pid 6901] munmap(0x7f943d000000, 138412032 [pid 6906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6901] <... munmap resumed>) = 0 [pid 6906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6905] <... mount resumed>) = 0 [pid 6904] <... mount resumed>) = 0 [pid 6901] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6901] close(4 [pid 6905] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6904] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6905] <... openat resumed>) = 3 [pid 6904] <... openat resumed>) = 3 [pid 6905] chdir("./file1" [pid 6904] chdir("./file1" [pid 6905] <... chdir resumed>) = 0 [pid 6904] <... chdir resumed>) = 0 [pid 6903] <... write resumed>) = 524288 [pid 6902] <... write resumed>) = 524288 [pid 6901] <... close resumed>) = 0 [pid 6906] <... write resumed>) = 524288 [pid 6906] munmap(0x7f943d000000, 138412032 [pid 6905] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6903] munmap(0x7f943d000000, 138412032 [pid 6902] munmap(0x7f943d000000, 138412032 [pid 6901] exit_group(0 [pid 6906] <... munmap resumed>) = 0 [pid 6905] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6904] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6906] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6905] truncate("./file1", 0 [pid 6904] truncate("./file1", 0 [pid 6901] <... exit_group resumed>) = ? [pid 6903] <... munmap resumed>) = 0 [pid 6906] <... openat resumed>) = 4 [pid 6902] <... munmap resumed>) = 0 [pid 6906] ioctl(4, LOOP_SET_FD, 3 [pid 6904] <... truncate resumed>) = 0 [pid 6903] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6902] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6904] memfd_create("syzkaller", 0 [pid 6901] +++ exited with 0 +++ [pid 6905] <... truncate resumed>) = 0 [pid 6904] <... memfd_create resumed>) = 4 [pid 6903] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6902] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6905] memfd_create("syzkaller", 0 [pid 6904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6903] close(4 [pid 6902] close(4 [pid 6905] <... memfd_create resumed>) = 4 [pid 6904] <... mmap resumed>) = 0x7f943d000000 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6901, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6904] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6905] <... mmap resumed>) = 0x7f943d000000 [pid 6902] <... close resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6905] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6903] <... close resumed>) = 0 [pid 6902] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6902] <... exit_group resumed>) = ? [pid 5073] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 6903] exit_group(0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./303/binderfs", [pid 6905] <... write resumed>) = 524288 [pid 6903] <... exit_group resumed>) = ? [pid 6902] +++ exited with 0 +++ [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6906] <... ioctl resumed>) = 0 [pid 6906] close(3 [pid 5073] unlink("./303/binderfs" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6902, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6906] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6906] close(4 [pid 5073] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] <... close resumed>) = 0 [pid 6906] mkdir("./file1", 0777 [pid 5071] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 6904] <... write resumed>) = 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6903] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6903, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6904] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6906] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6904] <... munmap resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5074] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 237.112123][ T6906] loop1: detected capacity change from 0 to 1024 [pid 6904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] unlink("./303/binderfs" [pid 6904] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6905] munmap(0x7f943d000000, 138412032 [pid 6904] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5071] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6905] <... munmap resumed>) = 0 [pid 6904] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6905] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6905] close(4 [pid 5074] getdents64(3, [pid 6905] <... close resumed>) = 0 [pid 6904] exit_group(0) = ? [pid 6906] <... mount resumed>) = 0 [pid 6905] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 5074] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6906] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6905] <... exit_group resumed>) = ? [pid 6904] +++ exited with 0 +++ [pid 5074] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./303/file1", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6906] <... openat resumed>) = 3 [pid 6905] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6905, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6904, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6906] chdir("./file1" [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./303/file1", [pid 6906] <... chdir resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] truncate("./file1", 0 [pid 5076] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] unlink("./303/binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 5071] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(3, "", [pid 5075] newfstatat(3, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5071] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 6906] <... truncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] newfstatat(4, "", [pid 6906] memfd_create("syzkaller", 0 [pid 5075] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 6906] <... memfd_create resumed>) = 4 [pid 5076] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./302/binderfs", [pid 6906] <... mmap resumed>) = 0x7f943d000000 [pid 5076] newfstatat(AT_FDCWD, "./299/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] close(4 [pid 5071] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./302/binderfs" [pid 5076] unlink("./299/binderfs" [pid 5075] <... unlink resumed>) = 0 [pid 6906] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./303/file1" [pid 5075] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 5074] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./303/file1", [pid 5073] close(3 [pid 5071] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./303" [pid 5076] <... umount2 resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5071] rmdir("./303/file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5073] mkdir("./304", 0777 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./299/file1", [pid 5074] newfstatat(4, "", [pid 5073] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./299/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] rmdir("./303" [pid 5076] newfstatat(4, "", [pid 5074] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] close(4 [pid 5071] mkdir("./304", 0777 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] rmdir("./303/file1" [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./302/file1", [pid 5076] close(4 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6906] <... write resumed>) = 524288 [pid 5076] rmdir("./299/file1" [pid 5075] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 6906] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6906] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] <... openat resumed>) = 4 [pid 5074] close(3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] newfstatat(4, "", [pid 5074] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] rmdir("./303" [pid 5076] rmdir("./299" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5074] mkdir("./304", 0777 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./302/file1" [pid 5076] mkdir("./300", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./302") = 0 [pid 5075] mkdir("./303", 0777 [pid 6906] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 6906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 6906] close(4 [pid 5071] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6906] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... ioctl resumed>) = 0 [pid 5071] close(3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] <... close resumed>) = 0 [pid 5073] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 6906] exit_group(0) = ? [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6909 attached [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6909 [pid 6909] set_robust_list(0x555583d53660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6910 [pid 6909] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6910 attached [pid 6909] chdir("./304" [pid 6910] set_robust_list(0x555583d53660, 24 [pid 6909] <... chdir resumed>) = 0 [pid 6910] <... set_robust_list resumed>) = 0 [pid 6909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6909] setpgid(0, 0) = 0 [pid 6910] chdir("./304") = 0 [pid 6910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6910] setpgid(0, 0) = 0 [pid 6910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6910] <... openat resumed>) = 3 [pid 6910] write(3, "1000", 4) = 4 [pid 6910] close(3) = 0 [pid 6910] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6906] +++ exited with 0 +++ [pid 6910] memfd_create("syzkaller", 0) = 3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6906, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6909] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6909] write(3, "1000", 4 [pid 5076] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6909] <... write resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(3 [pid 5072] newfstatat(3, "", [pid 6909] close(3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3 [pid 6909] <... close resumed>) = 0 [pid 6910] <... write resumed>) = 524288 [pid 6909] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6909] <... symlink resumed>) = 0 [pid 5072] getdents64(3, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6909] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 5072] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6911 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./302/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./302/binderfs") = 0 ./strace-static-x86_64: Process 6911 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6912 [pid 5072] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6913 attached [pid 6911] set_robust_list(0x555583d53660, 24 [pid 6909] <... memfd_create resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6913 [pid 6909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] set_robust_list(0x555583d53660, 24 [pid 6911] <... set_robust_list resumed>) = 0 [pid 6909] <... mmap resumed>) = 0x7f943d000000 ./strace-static-x86_64: Process 6912 attached [pid 6911] chdir("./300" [pid 6912] set_robust_list(0x555583d53660, 24) = 0 [pid 6912] chdir("./303") = 0 [pid 6912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6912] setpgid(0, 0 [pid 6909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6911] <... chdir resumed>) = 0 [pid 6913] <... set_robust_list resumed>) = 0 [pid 6912] <... setpgid resumed>) = 0 [pid 6911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6910] munmap(0x7f943d000000, 138412032 [pid 6911] <... prctl resumed>) = 0 [pid 6912] <... openat resumed>) = 3 [pid 6910] <... munmap resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6913] chdir("./304" [pid 6912] write(3, "1000", 4 [pid 6913] <... chdir resumed>) = 0 [pid 6912] <... write resumed>) = 4 [pid 6911] setpgid(0, 0 [pid 6910] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6912] close(3 [pid 6909] <... write resumed>) = 524288 [pid 6913] <... prctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6912] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./302/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6912] symlink("/dev/binderfs", "./binderfs" [pid 6911] <... setpgid resumed>) = 0 [pid 6913] setpgid(0, 0 [pid 6911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6913] <... setpgid resumed>) = 0 [pid 6913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6912] <... symlink resumed>) = 0 [pid 5072] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6913] <... openat resumed>) = 3 [pid 6913] write(3, "1000", 4) = 4 [pid 6913] close(3) = 0 [pid 6912] memfd_create("syzkaller", 0 [pid 6911] <... openat resumed>) = 3 [pid 6910] <... openat resumed>) = 4 [pid 6909] munmap(0x7f943d000000, 138412032 [pid 5072] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6913] symlink("/dev/binderfs", "./binderfs" [pid 6911] write(3, "1000", 4 [pid 6913] <... symlink resumed>) = 0 [pid 6912] <... memfd_create resumed>) = 3 [pid 6911] <... write resumed>) = 4 [pid 6910] ioctl(4, LOOP_SET_FD, 3 [pid 6909] <... munmap resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 6913] memfd_create("syzkaller", 0 [pid 6912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6911] close(3) = 0 [pid 6913] <... memfd_create resumed>) = 3 [pid 6911] symlink("/dev/binderfs", "./binderfs" [pid 6912] <... mmap resumed>) = 0x7f943d000000 [pid 6911] <... symlink resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 6913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6911] memfd_create("syzkaller", 0 [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6911] <... memfd_create resumed>) = 3 [pid 6911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] <... mmap resumed>) = 0x7f943d000000 [pid 6912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6911] <... mmap resumed>) = 0x7f943d000000 [pid 6909] <... openat resumed>) = 4 [pid 5072] getdents64(4, [pid 6913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6912] <... write resumed>) = 524288 [pid 6911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6910] <... ioctl resumed>) = 0 [pid 6909] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./302/file1") = 0 [ 237.462428][ T6910] loop2: detected capacity change from 0 to 1024 [pid 6912] munmap(0x7f943d000000, 138412032 [pid 6911] <... write resumed>) = 524288 [pid 6910] close(3 [pid 6909] <... ioctl resumed>) = 0 [pid 5072] getdents64(3, [pid 6910] <... close resumed>) = 0 [pid 6910] close(4) = 0 [pid 6912] <... munmap resumed>) = 0 [pid 6910] mkdir("./file1", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6910] <... mkdir resumed>) = 0 [pid 6910] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6909] close(3 [pid 6913] <... write resumed>) = 524288 [pid 6912] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6911] munmap(0x7f943d000000, 138412032 [pid 6910] <... mount resumed>) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./302" [pid 6912] <... openat resumed>) = 4 [pid 6909] <... close resumed>) = 0 [pid 6909] close(4) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6912] ioctl(4, LOOP_SET_FD, 3 [pid 5072] mkdir("./303", 0777 [pid 6910] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6909] mkdir("./file1", 0777 [pid 6910] chdir("./file1" [pid 6909] <... mkdir resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6911] <... munmap resumed>) = 0 [pid 6910] <... chdir resumed>) = 0 [pid 6910] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6911] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6910] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6909] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6911] <... openat resumed>) = 4 [pid 6910] truncate("./file1", 0 [pid 6911] ioctl(4, LOOP_SET_FD, 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6911] <... ioctl resumed>) = 0 [pid 6911] close(3) = 0 [pid 6910] <... truncate resumed>) = 0 [pid 6911] close(4 [pid 6910] memfd_create("syzkaller", 0 [pid 6911] <... close resumed>) = 0 [pid 6910] <... memfd_create resumed>) = 4 [pid 6911] mkdir("./file1", 0777 [pid 6910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] munmap(0x7f943d000000, 138412032 [pid 6912] <... ioctl resumed>) = 0 [pid 6911] <... mkdir resumed>) = 0 [pid 6910] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 3 [pid 6913] <... munmap resumed>) = 0 [pid 6912] close(3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6913] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6912] <... close resumed>) = 0 [pid 6911] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6909] <... mount resumed>) = 0 [pid 6913] <... openat resumed>) = 4 [ 237.504427][ T6909] loop0: detected capacity change from 0 to 1024 [ 237.537740][ T6912] loop4: detected capacity change from 0 to 1024 [ 237.543749][ T6911] loop5: detected capacity change from 0 to 1024 [pid 6912] close(4 [pid 6913] ioctl(4, LOOP_SET_FD, 3 [pid 6912] <... close resumed>) = 0 [pid 6909] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6912] mkdir("./file1", 0777 [pid 6909] <... openat resumed>) = 3 [pid 6910] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6909] chdir("./file1") = 0 [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6911] <... mount resumed>) = 0 [pid 6909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6911] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6909] truncate("./file1", 0 [pid 6912] <... mkdir resumed>) = 0 [pid 6911] <... openat resumed>) = 3 [pid 6912] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6910] <... write resumed>) = 524288 [pid 6911] chdir("./file1") = 0 [pid 6911] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6913] <... ioctl resumed>) = 0 [pid 6911] truncate("./file1", 0 [pid 6909] <... truncate resumed>) = 0 [pid 6913] close(3 [pid 6909] memfd_create("syzkaller", 0 [pid 6913] <... close resumed>) = 0 [pid 6909] <... memfd_create resumed>) = 4 [pid 6913] close(4 [pid 6912] <... mount resumed>) = 0 [pid 6911] <... truncate resumed>) = 0 [pid 6909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6911] memfd_create("syzkaller", 0 [pid 6909] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6911] <... memfd_create resumed>) = 4 [pid 6911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] <... close resumed>) = 0 [pid 6911] <... mmap resumed>) = 0x7f943d000000 [pid 6910] munmap(0x7f943d000000, 138412032 [pid 6912] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... ioctl resumed>) = 0 [pid 6913] mkdir("./file1", 0777 [pid 6911] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6910] <... munmap resumed>) = 0 [pid 6910] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6909] <... write resumed>) = 524288 [pid 6913] <... mkdir resumed>) = 0 [pid 6912] <... openat resumed>) = 3 [ 237.572284][ T6913] loop3: detected capacity change from 0 to 1024 [pid 6910] close(4 [pid 6913] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6912] chdir("./file1" [pid 6910] <... close resumed>) = 0 [pid 5072] close(3 [pid 6913] <... mount resumed>) = 0 [pid 6912] <... chdir resumed>) = 0 [pid 6911] <... write resumed>) = 524288 [pid 5072] <... close resumed>) = 0 [pid 6913] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6912] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6912] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6915 attached [pid 6913] <... openat resumed>) = 3 [pid 6912] truncate("./file1", 0 [pid 6910] exit_group(0 [pid 6909] munmap(0x7f943d000000, 138412032) = 0 [pid 6911] munmap(0x7f943d000000, 138412032 [pid 6910] <... exit_group resumed>) = ? [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6915 [pid 6913] chdir("./file1" [pid 6909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6909] close(4 [pid 6915] set_robust_list(0x555583d53660, 24 [pid 6913] <... chdir resumed>) = 0 [pid 6912] <... truncate resumed>) = 0 [pid 6910] +++ exited with 0 +++ [pid 6913] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6912] memfd_create("syzkaller", 0 [pid 6915] <... set_robust_list resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6910, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6915] chdir("./303" [pid 6913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6912] <... memfd_create resumed>) = 4 [pid 6911] <... munmap resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6913] truncate("./file1", 0 [pid 6912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6909] <... close resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6915] <... chdir resumed>) = 0 [pid 6912] <... mmap resumed>) = 0x7f943d000000 [pid 6915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6915] setpgid(0, 0 [pid 6909] exit_group(0) = ? [pid 6915] <... setpgid resumed>) = 0 [pid 6909] +++ exited with 0 +++ [pid 6912] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6909, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6911] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6911] close(4 [pid 6915] <... openat resumed>) = 3 [pid 5071] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6915] write(3, "1000", 4 [pid 5073] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6915] <... write resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 6915] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 6915] <... close resumed>) = 0 [pid 6911] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 6915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6911] exit_group(0 [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6915] memfd_create("syzkaller", 0 [pid 6913] <... truncate resumed>) = 0 [pid 6912] <... write resumed>) = 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6915] <... memfd_create resumed>) = 3 [pid 6913] memfd_create("syzkaller", 0 [pid 6915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] <... memfd_create resumed>) = 4 [pid 6911] <... exit_group resumed>) = ? [pid 5073] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6915] <... mmap resumed>) = 0x7f943d000000 [pid 6913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6911] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./304/binderfs", [pid 6913] <... mmap resumed>) = 0x7f943d000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6911, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6912] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6912] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./304/binderfs", [pid 5071] unlink("./304/binderfs" [pid 5076] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6913] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6912] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] newfstatat(3, "", [pid 6912] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6912] close(4 [pid 5076] getdents64(3, [pid 5073] unlink("./304/binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... unlink resumed>) = 0 [pid 5076] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./300/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6912] <... close resumed>) = 0 [pid 5076] unlink("./300/binderfs") = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5071] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./304/file1", [pid 6915] <... write resumed>) = 524288 [pid 6913] <... write resumed>) = 524288 [pid 6912] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6912] <... exit_group resumed>) = ? [pid 5071] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6912] +++ exited with 0 +++ [pid 5073] newfstatat(AT_FDCWD, "./304/file1", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6912, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6913] munmap(0x7f943d000000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6915] munmap(0x7f943d000000, 138412032 [pid 6913] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 4 [pid 6915] <... munmap resumed>) = 0 [pid 5075] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6913] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5071] getdents64(4, [pid 6915] <... openat resumed>) = 4 [pid 5075] newfstatat(3, "", [pid 6915] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6915] <... ioctl resumed>) = 0 [pid 6913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6913] close(4 [pid 5075] getdents64(3, [pid 5071] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 5076] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./300/file1", [pid 6913] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(4 [pid 5075] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./303/binderfs" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] rmdir("./304/file1" [pid 5076] openat(AT_FDCWD, "./300/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] getdents64(4, [pid 5075] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5073] close(4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] close(3 [pid 5076] close(4) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] rmdir("./300/file1") = 0 [pid 5076] getdents64(3, [pid 6915] close(3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6915] <... close resumed>) = 0 [pid 5076] close(3 [pid 6915] close(4 [pid 5076] <... close resumed>) = 0 [pid 6915] <... close resumed>) = 0 [pid 5076] rmdir("./300" [pid 6915] mkdir("./file1", 0777 [pid 5071] rmdir("./304" [pid 6915] <... mkdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] rmdir("./304/file1" [pid 5076] mkdir("./301", 0777) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] mkdir("./305", 0777 [pid 5073] getdents64(3, [pid 6915] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6913] exit_group(0 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6913] <... exit_group resumed>) = ? [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 6915] <... mount resumed>) = 0 [pid 6913] +++ exited with 0 +++ [pid 5075] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./304" [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6915] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6913, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... rmdir resumed>) = 0 [pid 6915] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./303/file1", [pid 5073] mkdir("./305", 0777 [pid 6915] chdir("./file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6915] <... chdir resumed>) = 0 [pid 5074] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [ 237.775450][ T6915] loop1: detected capacity change from 0 to 1024 [pid 6915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 6915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6915] truncate("./file1", 0 [pid 5074] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5075] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5074] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5074] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6915] <... truncate resumed>) = 0 [pid 6915] memfd_create("syzkaller", 0) = 4 [pid 6915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] newfstatat(AT_FDCWD, "./304/binderfs", [pid 5071] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6916 attached [pid 6915] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] rmdir("./303/file1" [pid 5074] unlink("./304/binderfs" [pid 6916] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6916 [pid 5071] close(3 [pid 6916] <... set_robust_list resumed>) = 0 [pid 6915] <... write resumed>) = 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6916] chdir("./301" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6916] <... chdir resumed>) = 0 [pid 6916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6917 ./strace-static-x86_64: Process 6917 attached [pid 6917] set_robust_list(0x555583d53660, 24 [pid 6916] setpgid(0, 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6917] <... set_robust_list resumed>) = 0 [pid 6917] chdir("./305") = 0 [pid 6917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6917] setpgid(0, 0) = 0 [pid 6917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6916] <... setpgid resumed>) = 0 [pid 6915] munmap(0x7f943d000000, 138412032 [pid 5075] getdents64(3, [pid 5074] <... umount2 resumed>) = 0 [pid 6917] write(3, "1000", 4 [pid 6916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6915] <... munmap resumed>) = 0 [pid 6917] <... write resumed>) = 4 [pid 6916] <... openat resumed>) = 3 [pid 5073] close(3 [pid 6917] close(3 [pid 6916] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6917] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6916] <... write resumed>) = 4 [pid 5075] close(3) = 0 [pid 5074] newfstatat(AT_FDCWD, "./304/file1", [pid 6916] close(3 [pid 5075] rmdir("./303" [pid 6917] symlink("/dev/binderfs", "./binderfs" [pid 6916] <... close resumed>) = 0 [pid 6915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6917] <... symlink resumed>) = 0 [pid 6916] symlink("/dev/binderfs", "./binderfs" [pid 6915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6918 attached [pid 6917] memfd_create("syzkaller", 0 [pid 6916] <... symlink resumed>) = 0 [pid 6915] close(4 [pid 5075] mkdir("./304", 0777 [pid 5074] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6918 [pid 6918] set_robust_list(0x555583d53660, 24 [pid 6916] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6918] <... set_robust_list resumed>) = 0 [pid 6916] <... memfd_create resumed>) = 3 [pid 6915] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6918] chdir("./305") = 0 [pid 6917] <... memfd_create resumed>) = 3 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 4 [pid 6917] <... mmap resumed>) = 0x7f943d000000 [pid 6916] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(4, "", [pid 6918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6918] <... prctl resumed>) = 0 [pid 6918] setpgid(0, 0) = 0 [pid 6918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] getdents64(4, [pid 6918] <... openat resumed>) = 3 [pid 6918] write(3, "1000", 4) = 4 [pid 6918] close(3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6918] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] getdents64(4, [pid 6918] symlink("/dev/binderfs", "./binderfs" [pid 6915] exit_group(0 [pid 6918] <... symlink resumed>) = 0 [pid 6915] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6918] memfd_create("syzkaller", 0 [pid 6916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... openat resumed>) = 3 [pid 5074] close(4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 6918] <... memfd_create resumed>) = 3 [pid 6917] <... write resumed>) = 524288 [pid 6916] <... write resumed>) = 524288 [pid 6915] +++ exited with 0 +++ [pid 5074] rmdir("./304/file1" [pid 6918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6915, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 6918] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./304") = 0 [pid 5074] mkdir("./305", 0777 [pid 5072] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6917] munmap(0x7f943d000000, 138412032 [pid 5072] <... openat resumed>) = 3 [pid 6916] munmap(0x7f943d000000, 138412032 [pid 6918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6917] <... munmap resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 6917] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6917] <... openat resumed>) = 4 [pid 6917] ioctl(4, LOOP_SET_FD, 3 [pid 5072] getdents64(3, [pid 6918] <... write resumed>) = 524288 [pid 6916] <... munmap resumed>) = 0 [pid 6918] munmap(0x7f943d000000, 138412032 [pid 6917] <... ioctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6917] close(3 [pid 6916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6917] <... close resumed>) = 0 [pid 6916] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] close(4 [pid 6916] ioctl(4, LOOP_SET_FD, 3 [pid 5072] newfstatat(AT_FDCWD, "./303/binderfs", [pid 6918] <... munmap resumed>) = 0 [pid 6917] <... close resumed>) = 0 [pid 6916] <... ioctl resumed>) = 0 [pid 6918] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6917] mkdir("./file1", 0777 [pid 6918] ioctl(4, LOOP_SET_FD, 3 [pid 6916] close(3 [pid 6917] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5074] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6916] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6918] <... ioctl resumed>) = 0 [pid 6917] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6916] close(4 [pid 5072] unlink("./303/binderfs" [pid 6916] <... close resumed>) = 0 [pid 6916] mkdir("./file1", 0777 [pid 5072] <... unlink resumed>) = 0 [pid 6916] <... mkdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6919 ./strace-static-x86_64: Process 6919 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6920 ./strace-static-x86_64: Process 6920 attached [pid 6919] set_robust_list(0x555583d53660, 24 [pid 6916] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6920] set_robust_list(0x555583d53660, 24 [pid 6919] <... set_robust_list resumed>) = 0 [pid 6920] <... set_robust_list resumed>) = 0 [pid 6919] chdir("./305" [pid 6920] chdir("./304" [pid 6919] <... chdir resumed>) = 0 [pid 6920] <... chdir resumed>) = 0 [pid 6919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6919] <... prctl resumed>) = 0 [pid 6916] <... mount resumed>) = 0 [pid 6920] <... prctl resumed>) = 0 [pid 6919] setpgid(0, 0 [pid 6916] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6920] setpgid(0, 0 [pid 6919] <... setpgid resumed>) = 0 [pid 6918] close(3 [pid 6916] <... openat resumed>) = 3 [pid 5072] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6920] <... setpgid resumed>) = 0 [pid 6918] <... close resumed>) = 0 [pid 6920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6918] close(4 [pid 6916] chdir("./file1" [pid 6920] <... openat resumed>) = 3 [pid 6919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6916] <... chdir resumed>) = 0 [pid 6920] write(3, "1000", 4 [pid 6919] <... openat resumed>) = 3 [pid 6918] <... close resumed>) = 0 [pid 6916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6920] <... write resumed>) = 4 [pid 6918] mkdir("./file1", 0777 [pid 6916] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6920] close(3 [pid 6919] write(3, "1000", 4 [pid 6916] truncate("./file1", 0 [pid 6920] <... close resumed>) = 0 [pid 6919] <... write resumed>) = 4 [pid 6920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6919] close(3) = 0 [pid 6919] symlink("/dev/binderfs", "./binderfs" [pid 6918] <... mkdir resumed>) = 0 [pid 6920] memfd_create("syzkaller", 0 [pid 6918] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6919] <... symlink resumed>) = 0 [pid 6920] <... memfd_create resumed>) = 3 [pid 5072] <... umount2 resumed>) = 0 [pid 6920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6919] memfd_create("syzkaller", 0 [pid 6920] <... mmap resumed>) = 0x7f943d000000 [pid 6916] <... truncate resumed>) = 0 [pid 6916] memfd_create("syzkaller", 0 [pid 6919] <... memfd_create resumed>) = 3 [pid 6917] <... mount resumed>) = 0 [pid 6917] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6916] <... memfd_create resumed>) = 4 [pid 6919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6917] <... openat resumed>) = 3 [pid 6916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6919] <... mmap resumed>) = 0x7f943d000000 [ 237.986449][ T6917] loop0: detected capacity change from 0 to 1024 [ 237.995826][ T6916] loop5: detected capacity change from 0 to 1024 [ 238.010851][ T6918] loop2: detected capacity change from 0 to 1024 [pid 6916] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6916] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] newfstatat(AT_FDCWD, "./303/file1", [pid 6920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6918] <... mount resumed>) = 0 [pid 6917] chdir("./file1" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6918] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6917] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... openat resumed>) = 4 [pid 6918] <... openat resumed>) = 3 [pid 6919] <... write resumed>) = 524288 [pid 6917] truncate("./file1", 0 [pid 6916] <... write resumed>) = 524288 [pid 5072] newfstatat(4, "", [pid 6920] <... write resumed>) = 524288 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 6920] munmap(0x7f943d000000, 138412032 [pid 6918] chdir("./file1" [pid 6920] <... munmap resumed>) = 0 [pid 6918] <... chdir resumed>) = 0 [pid 6917] <... truncate resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6918] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] getdents64(4, [pid 6918] truncate("./file1", 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6917] memfd_create("syzkaller", 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./303/file1" [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6917] <... memfd_create resumed>) = 4 [pid 5072] <... rmdir resumed>) = 0 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6920] <... openat resumed>) = 4 [pid 5072] getdents64(3, [pid 6920] ioctl(4, LOOP_SET_FD, 3 [pid 6919] munmap(0x7f943d000000, 138412032 [pid 6916] munmap(0x7f943d000000, 138412032 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6919] <... munmap resumed>) = 0 [pid 6917] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6918] <... truncate resumed>) = 0 [pid 6918] memfd_create("syzkaller", 0) = 4 [pid 6919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6916] <... munmap resumed>) = 0 [pid 5072] close(3 [pid 6919] <... openat resumed>) = 4 [pid 6918] <... mmap resumed>) = 0x7f943d000000 [pid 6916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 6916] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6916] close(4 [pid 5072] rmdir("./303" [pid 6919] ioctl(4, LOOP_SET_FD, 3 [pid 6918] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6916] <... close resumed>) = 0 [pid 6917] <... write resumed>) = 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./304", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6920] <... ioctl resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6920] close(3) = 0 [pid 6917] munmap(0x7f943d000000, 138412032 [pid 6920] close(4) = 0 [pid 6920] mkdir("./file1", 0777 [pid 6917] <... munmap resumed>) = 0 [pid 6920] <... mkdir resumed>) = 0 [pid 6920] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 238.102009][ T6920] loop4: detected capacity change from 0 to 1024 [ 238.120716][ T6919] loop3: detected capacity change from 0 to 1024 [pid 6916] exit_group(0 [pid 6919] <... ioctl resumed>) = 0 [pid 6918] <... write resumed>) = 524288 [pid 6917] close(4 [pid 6916] <... exit_group resumed>) = ? [pid 6919] close(3) = 0 [pid 6919] close(4) = 0 [pid 6919] mkdir("./file1", 0777 [pid 6918] munmap(0x7f943d000000, 138412032 [pid 6917] <... close resumed>) = 0 [pid 6916] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6916, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6919] <... mkdir resumed>) = 0 [pid 6918] <... munmap resumed>) = 0 [pid 6917] exit_group(0 [pid 5072] <... ioctl resumed>) = 0 [pid 6919] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6917] <... exit_group resumed>) = ? [pid 5076] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6918] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] getdents64(3, [pid 6918] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] close(3 [pid 5076] newfstatat(AT_FDCWD, "./301/binderfs", [pid 5072] <... close resumed>) = 0 [pid 6918] close(4 [pid 6917] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6920] <... mount resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] unlink("./301/binderfs") = 0 [pid 5076] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6917, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6920] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6918] <... close resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 6920] <... openat resumed>) = 3 [pid 5071] <... restart_syscall resumed>) = 0 [pid 6920] chdir("./file1"./strace-static-x86_64: Process 6921 attached ) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6921] set_robust_list(0x555583d53660, 24 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6921 [pid 6921] <... set_robust_list resumed>) = 0 [pid 6921] chdir("./304" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6921] <... chdir resumed>) = 0 [pid 6920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6921] setpgid(0, 0) = 0 [pid 6921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6920] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6919] <... mount resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6921] <... openat resumed>) = 3 [pid 6920] <... truncate resumed>) = 0 [pid 6919] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] newfstatat(3, "", [pid 6921] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6921] <... write resumed>) = 4 [pid 6919] <... openat resumed>) = 3 [pid 6921] close(3) = 0 [pid 6921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6921] memfd_create("syzkaller", 0 [pid 6920] memfd_create("syzkaller", 0 [pid 6919] chdir("./file1" [pid 6918] exit_group(0 [pid 5076] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 6920] <... memfd_create resumed>) = 4 [pid 6919] <... chdir resumed>) = 0 [pid 6918] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./301/file1", [pid 5071] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./305/binderfs", [pid 6921] <... memfd_create resumed>) = 3 [pid 6918] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6920] <... mmap resumed>) = 0x7f943d000000 [pid 6919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6918, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] unlink("./305/binderfs" [pid 5076] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5071] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6919] truncate("./file1", 0 [pid 5076] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6921] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 6921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(3, "", [pid 5076] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 6919] <... truncate resumed>) = 0 [pid 5076] rmdir("./301/file1" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6920] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6919] memfd_create("syzkaller", 0 [pid 5073] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6919] <... memfd_create resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./305/binderfs", [pid 6919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6919] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] unlink("./305/binderfs" [pid 6919] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... unlink resumed>) = 0 [pid 5073] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./301") = 0 [pid 6921] <... write resumed>) = 524288 [pid 6920] <... write resumed>) = 524288 [pid 5071] <... umount2 resumed>) = 0 [pid 5076] mkdir("./302", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./305/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5073] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6921] munmap(0x7f943d000000, 138412032 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6919] <... write resumed>) = 524288 [pid 5071] getdents64(4, [pid 6921] <... munmap resumed>) = 0 [pid 6920] munmap(0x7f943d000000, 138412032 [pid 6919] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(AT_FDCWD, "./305/file1", [pid 5071] getdents64(4, [pid 6921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6921] <... openat resumed>) = 4 [pid 5073] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(4) = 0 [pid 6921] ioctl(4, LOOP_SET_FD, 3 [pid 5071] rmdir("./305/file1" [pid 6920] <... munmap resumed>) = 0 [pid 6919] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] close(3 [pid 6920] close(4 [pid 6919] close(4 [pid 5073] getdents64(4, [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./305") = 0 [pid 5071] mkdir("./306", 0777) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6920] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6921] <... ioctl resumed>) = 0 [pid 6920] exit_group(0 [pid 6919] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 6921] close(3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6921] <... close resumed>) = 0 [pid 6920] <... exit_group resumed>) = ? [pid 6919] exit_group(0 [pid 5073] close(4 [pid 6921] close(4 [pid 6920] +++ exited with 0 +++ [pid 6919] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 6921] <... close resumed>) = 0 [pid 6919] +++ exited with 0 +++ [pid 5073] rmdir("./305/file1" [pid 6921] mkdir("./file1", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6920, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5073] <... rmdir resumed>) = 0 [pid 6921] <... mkdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6919, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] getdents64(3, [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./305" [pid 6921] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... rmdir resumed>) = 0 [pid 5076] close(3 [pid 5075] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] mkdir("./306", 0777 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... mkdir resumed>) = 0 [ 238.313594][ T6921] loop1: detected capacity change from 0 to 1024 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] newfstatat(3, "", [pid 5074] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./304/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./305/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./304/binderfs" [pid 5074] unlink("./305/binderfs" [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6922 [pid 5075] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6922 attached [pid 5073] <... openat resumed>) = 3 [pid 5071] close(3 [pid 6922] set_robust_list(0x555583d53660, 24 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6922] <... set_robust_list resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6922] chdir("./302" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6921] <... mount resumed>) = 0 [pid 6921] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6921] chdir("./file1") = 0 [pid 6921] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6923 attached [pid 6922] <... chdir resumed>) = 0 [pid 6923] set_robust_list(0x555583d53660, 24 [pid 6922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6923 [pid 6923] <... set_robust_list resumed>) = 0 [pid 6922] <... prctl resumed>) = 0 [pid 5075] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] chdir("./306" [pid 6922] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 6923] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./304/file1", [pid 6923] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6922] <... setpgid resumed>) = 0 [pid 6921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] <... prctl resumed>) = 0 [pid 6921] truncate("./file1", 0 [pid 5075] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] setpgid(0, 0 [pid 6922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6923] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... openat resumed>) = 4 [pid 6923] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(4, "", [pid 6923] write(3, "1000", 4 [pid 6922] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./305/file1", [pid 6923] <... write resumed>) = 4 [pid 5075] getdents64(4, [pid 6923] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6923] <... close resumed>) = 0 [pid 6921] <... truncate resumed>) = 0 [pid 5075] getdents64(4, [pid 6923] symlink("/dev/binderfs", "./binderfs" [pid 6921] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] <... symlink resumed>) = 0 [pid 6922] write(3, "1000", 4 [pid 6921] <... memfd_create resumed>) = 4 [pid 5075] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6922] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6923] memfd_create("syzkaller", 0 [pid 6921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 6922] close(3 [pid 5074] <... openat resumed>) = 4 [pid 6921] <... mmap resumed>) = 0x7f943d000000 [pid 5075] rmdir("./304/file1" [pid 6923] <... memfd_create resumed>) = 3 [pid 6922] <... close resumed>) = 0 [pid 6921] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] <... ioctl resumed>) = 0 [pid 6922] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6922] <... symlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5075] close(3) = 0 [pid 5075] rmdir("./304") = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 6922] memfd_create("syzkaller", 0 [pid 6921] <... write resumed>) = 524288 [pid 5075] mkdir("./305", 0777 [pid 6923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5074] close(4 [pid 6922] <... memfd_create resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] rmdir("./305/file1" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6921] munmap(0x7f943d000000, 138412032./strace-static-x86_64: Process 6925 attached [pid 6923] <... write resumed>) = 524288 [pid 6922] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6925 [pid 6921] <... munmap resumed>) = 0 [pid 6923] munmap(0x7f943d000000, 138412032 [pid 6925] set_robust_list(0x555583d53660, 24 [pid 6923] <... munmap resumed>) = 0 [pid 6922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(3 [pid 6923] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6925] <... set_robust_list resumed>) = 0 [pid 6923] <... openat resumed>) = 4 [pid 6921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6925] chdir("./306" [pid 5074] rmdir("./305" [pid 6925] <... chdir resumed>) = 0 [pid 6923] ioctl(4, LOOP_SET_FD, 3 [pid 6925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6922] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 6925] <... prctl resumed>) = 0 [pid 6921] close(4 [pid 6925] setpgid(0, 0 [pid 6921] <... close resumed>) = 0 [pid 5075] close(3 [pid 6925] <... setpgid resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] mkdir("./306", 0777 [pid 6925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6921] exit_group(0) = ? [pid 5074] <... mkdir resumed>) = 0 [pid 6925] <... openat resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6923] <... ioctl resumed>) = 0 [pid 6925] write(3, "1000", 4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6923] close(3./strace-static-x86_64: Process 6927 attached [pid 6925] <... write resumed>) = 4 [pid 6923] <... close resumed>) = 0 [pid 6922] munmap(0x7f943d000000, 138412032 [pid 6921] +++ exited with 0 +++ [pid 5074] <... openat resumed>) = 3 [pid 6925] close(3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6921, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6925] <... close resumed>) = 0 [pid 6922] <... munmap resumed>) = 0 [pid 6925] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6927 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6925] <... symlink resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 6925] memfd_create("syzkaller", 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6925] <... memfd_create resumed>) = 3 [pid 6922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] getdents64(3, [pid 6925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6922] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6925] <... mmap resumed>) = 0x7f943d000000 [pid 6922] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./304/binderfs", [pid 6927] set_robust_list(0x555583d53660, 24 [pid 6923] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6927] <... set_robust_list resumed>) = 0 [pid 6923] <... close resumed>) = 0 [pid 5072] unlink("./304/binderfs" [pid 6923] mkdir("./file1", 0777 [pid 5072] <... unlink resumed>) = 0 [pid 6923] <... mkdir resumed>) = 0 [pid 5072] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6927] chdir("./305") = 0 [pid 6923] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6927] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6923] <... mount resumed>) = 0 [pid 6922] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6927] <... prctl resumed>) = 0 [pid 6923] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6927] setpgid(0, 0 [pid 6923] <... openat resumed>) = 3 [pid 6922] close(3) = 0 [pid 6927] <... setpgid resumed>) = 0 [pid 6923] chdir("./file1" [pid 6922] close(4 [pid 6927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6923] <... chdir resumed>) = 0 [pid 6923] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6922] <... close resumed>) = 0 [pid 6927] <... openat resumed>) = 3 [pid 6923] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6922] mkdir("./file1", 0777 [pid 5072] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] truncate("./file1", 0 [pid 6927] write(3, "1000", 4 [pid 6922] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6927] <... write resumed>) = 4 [pid 6922] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] newfstatat(AT_FDCWD, "./304/file1", [pid 6927] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6927] <... close resumed>) = 0 [pid 5072] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6923] <... truncate resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6923] memfd_create("syzkaller", 0 [pid 5072] <... openat resumed>) = 4 [ 238.485654][ T6923] loop0: detected capacity change from 0 to 1024 [ 238.519391][ T6922] loop5: detected capacity change from 0 to 1024 [pid 6927] symlink("/dev/binderfs", "./binderfs" [pid 6923] <... memfd_create resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 6927] <... symlink resumed>) = 0 [pid 6923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6923] <... mmap resumed>) = 0x7f943d000000 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 6927] memfd_create("syzkaller", 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./304/file1" [pid 6927] <... memfd_create resumed>) = 3 [pid 6923] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 6927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] close(3 [pid 6925] <... write resumed>) = 524288 [pid 6922] <... mount resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6925] munmap(0x7f943d000000, 138412032 [pid 6922] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6925] <... munmap resumed>) = 0 [pid 6922] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5072] rmdir("./304" [pid 6925] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6922] chdir("./file1" [pid 5074] <... close resumed>) = 0 [pid 6925] <... openat resumed>) = 4 [pid 6922] <... chdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... rmdir resumed>) = 0 [pid 6922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] mkdir("./305", 0777 [pid 6922] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6922] truncate("./file1", 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 ./strace-static-x86_64: Process 6928 attached [pid 6925] ioctl(4, LOOP_SET_FD, 3 [pid 6922] <... truncate resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6922] memfd_create("syzkaller", 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6928 [pid 6928] set_robust_list(0x555583d53660, 24 [pid 6927] <... write resumed>) = 524288 [pid 6923] <... write resumed>) = 524288 [pid 6922] <... memfd_create resumed>) = 4 [pid 5072] <... ioctl resumed>) = 0 [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 6929 [pid 6923] munmap(0x7f943d000000, 138412032 [pid 6928] <... set_robust_list resumed>) = 0 [pid 6923] <... munmap resumed>) = 0 [pid 6922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 6929 attached [pid 6929] set_robust_list(0x555583d53660, 24) = 0 [pid 6929] chdir("./305") = 0 [pid 6929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6929] setpgid(0, 0) = 0 [pid 6929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6927] munmap(0x7f943d000000, 138412032 [pid 6923] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6929] <... openat resumed>) = 3 [pid 6928] chdir("./306" [pid 6927] <... munmap resumed>) = 0 [pid 6923] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6922] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6928] <... chdir resumed>) = 0 [pid 6928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6929] write(3, "1000", 4 [pid 6928] <... prctl resumed>) = 0 [pid 6929] <... write resumed>) = 4 [pid 6928] setpgid(0, 0 [pid 6923] close(4 [pid 6929] close(3 [pid 6927] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6923] <... close resumed>) = 0 [pid 6928] <... setpgid resumed>) = 0 [pid 6929] <... close resumed>) = 0 [pid 6927] <... openat resumed>) = 4 [pid 6929] symlink("/dev/binderfs", "./binderfs" [pid 6928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6927] ioctl(4, LOOP_SET_FD, 3 [pid 6925] <... ioctl resumed>) = 0 [pid 6929] <... symlink resumed>) = 0 [pid 6928] <... openat resumed>) = 3 [pid 6925] close(3 [pid 6922] <... write resumed>) = 524288 [pid 6925] <... close resumed>) = 0 [pid 6929] memfd_create("syzkaller", 0 [pid 6928] write(3, "1000", 4 [pid 6925] close(4 [pid 6922] munmap(0x7f943d000000, 138412032 [pid 6928] <... write resumed>) = 4 [pid 6925] <... close resumed>) = 0 [pid 6923] exit_group(0) = ? [pid 6928] close(3 [pid 6925] mkdir("./file1", 0777 [pid 6923] +++ exited with 0 +++ [pid 6922] <... munmap resumed>) = 0 [pid 6928] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6923, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 6928] symlink("/dev/binderfs", "./binderfs" [pid 6929] <... memfd_create resumed>) = 3 [pid 6929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6928] <... symlink resumed>) = 0 [pid 6925] <... mkdir resumed>) = 0 [pid 6922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6929] <... mmap resumed>) = 0x7f943d000000 [pid 6928] memfd_create("syzkaller", 0 [pid 6922] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 238.606933][ T6925] loop2: detected capacity change from 0 to 1024 [ 238.636379][ T6927] loop4: detected capacity change from 0 to 1024 [pid 6929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6922] close(4 [pid 6928] <... memfd_create resumed>) = 3 [pid 6927] <... ioctl resumed>) = 0 [pid 6927] close(3) = 0 [pid 6927] close(4) = 0 [pid 6927] mkdir("./file1", 0777) = 0 [pid 6927] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6925] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6922] <... close resumed>) = 0 [pid 6928] <... mmap resumed>) = 0x7f943d000000 [pid 5071] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6929] <... write resumed>) = 524288 [pid 5071] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6922] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./306/binderfs", [pid 6927] <... mount resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./306/binderfs" [pid 6927] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... unlink resumed>) = 0 [pid 6927] <... openat resumed>) = 3 [pid 6925] <... mount resumed>) = 0 [pid 6922] <... exit_group resumed>) = ? [pid 5071] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6929] munmap(0x7f943d000000, 138412032 [pid 6927] chdir("./file1" [pid 6929] <... munmap resumed>) = 0 [pid 6927] <... chdir resumed>) = 0 [pid 6927] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6922] +++ exited with 0 +++ [pid 6927] truncate("./file1", 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6922, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6929] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6927] <... truncate resumed>) = 0 [pid 6925] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 6929] <... openat resumed>) = 4 [pid 6927] memfd_create("syzkaller", 0 [pid 6925] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6929] ioctl(4, LOOP_SET_FD, 3 [pid 6927] <... memfd_create resumed>) = 4 [pid 6928] <... write resumed>) = 524288 [pid 6927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6925] chdir("./file1" [pid 5076] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6925] <... chdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6928] munmap(0x7f943d000000, 138412032 [pid 5071] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6925] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] newfstatat(3, "", [pid 6927] <... mmap resumed>) = 0x7f943d000000 [pid 6925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6928] <... munmap resumed>) = 0 [pid 6925] truncate("./file1", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6927] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./306/file1", [pid 6928] <... openat resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./302/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6927] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] ioctl(4, LOOP_SET_FD, 3 [pid 5076] unlink("./302/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6929] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... unlink resumed>) = 0 [pid 6929] close(3 [pid 5071] <... openat resumed>) = 4 [pid 6929] <... close resumed>) = 0 [pid 6929] close(4) = 0 [pid 6929] mkdir("./file1", 0777) = 0 [pid 5076] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 6929] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6925] <... truncate resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6925] memfd_create("syzkaller", 0 [pid 5071] getdents64(4, [pid 6925] <... memfd_create resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6928] <... ioctl resumed>) = 0 [pid 6927] munmap(0x7f943d000000, 138412032 [pid 6925] <... mmap resumed>) = 0x7f943d000000 [pid 5071] getdents64(4, [pid 6928] close(3 [pid 6927] <... munmap resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6928] <... close resumed>) = 0 [pid 6927] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6925] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 238.758733][ T6929] loop1: detected capacity change from 0 to 1024 [ 238.789783][ T6928] loop3: detected capacity change from 0 to 1024 [pid 5071] close(4 [pid 6928] close(4 [pid 6927] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./306/file1" [pid 6927] close(4 [pid 5071] <... rmdir resumed>) = 0 [pid 6928] <... close resumed>) = 0 [pid 6927] <... close resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 6929] <... mount resumed>) = 0 [pid 6928] mkdir("./file1", 0777 [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] rmdir("./306" [pid 6928] <... mkdir resumed>) = 0 [pid 6929] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./307", 0777 [pid 6929] <... openat resumed>) = 3 [pid 6928] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... mkdir resumed>) = 0 [pid 6927] exit_group(0) = ? [pid 6927] +++ exited with 0 +++ [pid 6925] <... write resumed>) = 524288 [pid 5076] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6929] chdir("./file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./302/file1", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6927, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6929] <... chdir resumed>) = 0 [pid 6928] <... mount resumed>) = 0 [pid 6925] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6929] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6929] truncate("./file1", 0 [pid 6925] <... munmap resumed>) = 0 [pid 6928] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6925] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6928] <... openat resumed>) = 3 [pid 5071] close(3 [pid 5076] <... openat resumed>) = 4 [pid 5075] newfstatat(3, "", [pid 5071] <... close resumed>) = 0 [pid 6928] chdir("./file1" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6929] <... truncate resumed>) = 0 [pid 6925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6929] memfd_create("syzkaller", 0 [pid 6925] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6929] <... memfd_create resumed>) = 4 [pid 6929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 6931 attached [pid 6925] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6931 [pid 6931] set_robust_list(0x555583d53660, 24) = 0 [pid 6931] chdir("./307") = 0 [pid 6931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6931] setpgid(0, 0 [pid 6928] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6931] <... setpgid resumed>) = 0 [pid 6928] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5075] newfstatat(AT_FDCWD, "./305/binderfs", [pid 6931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6929] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(4 [pid 5075] unlink("./305/binderfs" [pid 6931] <... openat resumed>) = 3 [pid 6929] <... write resumed>) = 524288 [pid 6928] truncate("./file1", 0 [pid 6925] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5076] rmdir("./302/file1" [pid 6931] write(3, "1000", 4 [pid 6928] <... truncate resumed>) = 0 [pid 6925] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] memfd_create("syzkaller", 0 [pid 6931] <... write resumed>) = 4 [pid 6931] close(3 [pid 6928] <... memfd_create resumed>) = 4 [pid 6925] +++ exited with 0 +++ [pid 6931] <... close resumed>) = 0 [pid 6931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6931] memfd_create("syzkaller", 0) = 3 [pid 6929] munmap(0x7f943d000000, 138412032) = 0 [pid 6931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6929] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6928] <... mmap resumed>) = 0x7f943d000000 [pid 6929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6925, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6929] close(4 [pid 6928] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./302" [pid 5073] getdents64(3, [pid 6931] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6929] <... close resumed>) = 0 [pid 5076] mkdir("./303", 0777 [pid 5073] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./305/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5075] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(4, "", [pid 5073] unlink("./306/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6929] exit_group(0 [pid 5075] getdents64(4, [pid 6929] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6929] +++ exited with 0 +++ [pid 6928] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6929, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] rmdir("./305/file1" [pid 5073] <... umount2 resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6931] munmap(0x7f943d000000, 138412032 [pid 6928] munmap(0x7f943d000000, 138412032 [pid 5072] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 6931] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6928] <... munmap resumed>) = 0 [pid 6931] <... openat resumed>) = 4 [pid 5073] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(3, "", [pid 6931] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6931] <... ioctl resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./306/file1", [pid 5072] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] close(3 [pid 5073] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./305/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./305/binderfs" [pid 5073] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... unlink resumed>) = 0 [pid 5075] rmdir("./305" [pid 5073] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5072] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6931] close(3 [pid 6928] close(4 [pid 5072] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./306/file1" [pid 5075] mkdir("./306", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 6928] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5072] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] rmdir("./306" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6931] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./305/file1", [pid 6931] close(4 [pid 6928] exit_group(0 [pid 6931] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] mkdir("./307", 0777 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6931] mkdir("./file1", 0777) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6931] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", [pid 6928] <... exit_group resumed>) = ? [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 6931] <... mount resumed>) = 0 [pid 6928] +++ exited with 0 +++ [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6928, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [ 239.015243][ T6931] loop0: detected capacity change from 0 to 1024 [pid 6931] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... ioctl resumed>) = 0 [pid 6931] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 6931] chdir("./file1" [pid 5076] close(3 [pid 6931] <... chdir resumed>) = 0 [pid 6931] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 6931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./305/file1" [pid 5076] <... close resumed>) = 0 [pid 5075] close(3 [pid 5072] <... rmdir resumed>) = 0 [pid 6931] truncate("./file1", 0 [pid 5074] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] newfstatat(3, "", [pid 6931] <... truncate resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./305") = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6933 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6932 [pid 5072] mkdir("./306", 0777) = 0 [pid 6931] memfd_create("syzkaller", 0 [pid 5074] getdents64(3, [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6933 attached ./strace-static-x86_64: Process 6932 attached ) = 3 [pid 6933] set_robust_list(0x555583d53660, 24 [pid 5073] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6931] <... memfd_create resumed>) = 4 [pid 5074] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6932] set_robust_list(0x555583d53660, 24 [pid 6933] <... set_robust_list resumed>) = 0 [pid 6931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6933] chdir("./303" [pid 6931] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5073] <... close resumed>) = 0 [pid 6932] <... set_robust_list resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6932] chdir("./306" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6932] <... chdir resumed>) = 0 [pid 6933] <... chdir resumed>) = 0 [pid 6932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6932] <... prctl resumed>) = 0 [pid 6933] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6934 attached [pid 6932] setpgid(0, 0 [pid 6933] setpgid(0, 0 [pid 5074] unlink("./306/binderfs" [pid 6932] <... setpgid resumed>) = 0 [pid 6934] set_robust_list(0x555583d53660, 24 [pid 6932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6933] <... setpgid resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6934 [pid 6934] <... set_robust_list resumed>) = 0 [pid 6932] <... openat resumed>) = 3 [pid 6931] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6934] chdir("./307") = 0 [pid 6932] write(3, "1000", 4 [pid 6933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6934] setpgid(0, 0 [pid 6933] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = 0 [pid 6933] write(3, "1000", 4 [pid 5074] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6933] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] <... write resumed>) = 4 [pid 6933] close(3 [pid 5074] newfstatat(AT_FDCWD, "./306/file1", [pid 6932] close(3 [pid 6933] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6933] symlink("/dev/binderfs", "./binderfs" [pid 6934] <... setpgid resumed>) = 0 [pid 6932] <... close resumed>) = 0 [pid 6933] <... symlink resumed>) = 0 [pid 5074] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6932] symlink("/dev/binderfs", "./binderfs" [pid 6933] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] <... symlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] <... write resumed>) = 524288 [pid 5074] <... openat resumed>) = 4 [pid 5072] <... ioctl resumed>) = 0 [pid 6934] <... openat resumed>) = 3 [pid 6932] memfd_create("syzkaller", 0 [pid 6933] <... memfd_create resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 6933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6932] <... memfd_create resumed>) = 3 [pid 6933] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(4, [pid 6933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(4, [pid 6932] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6934] write(3, "1000", 4 [pid 6931] munmap(0x7f943d000000, 138412032 [pid 5074] close(4 [pid 6932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./306/file1" [pid 6934] <... write resumed>) = 4 [pid 6934] close(3 [pid 6931] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] close(3 [pid 6934] <... close resumed>) = 0 [pid 6931] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5074] close(3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6934] symlink("/dev/binderfs", "./binderfs" [pid 6931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... close resumed>) = 0 [pid 6934] <... symlink resumed>) = 0 [pid 6931] close(4 [pid 5074] rmdir("./306" [pid 6934] memfd_create("syzkaller", 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./307", 0777 [pid 6934] <... memfd_create resumed>) = 3 [pid 6931] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6935 attached [pid 6934] <... mmap resumed>) = 0x7f943d000000 [pid 6935] set_robust_list(0x555583d53660, 24 [pid 6934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6933] <... write resumed>) = 524288 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6935 [pid 6935] <... set_robust_list resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6935] chdir("./306" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6935] <... chdir resumed>) = 0 [pid 6935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6935] setpgid(0, 0) = 0 [pid 6935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6934] <... write resumed>) = 524288 [pid 6931] exit_group(0 [pid 6935] write(3, "1000", 4 [pid 6933] munmap(0x7f943d000000, 138412032 [pid 6931] <... exit_group resumed>) = ? [pid 6935] <... write resumed>) = 4 [pid 6935] close(3 [pid 6933] <... munmap resumed>) = 0 [pid 6931] +++ exited with 0 +++ [pid 6935] <... close resumed>) = 0 [pid 6935] symlink("/dev/binderfs", "./binderfs" [pid 6933] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6931, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6935] <... symlink resumed>) = 0 [pid 6932] <... write resumed>) = 524288 [pid 6933] <... openat resumed>) = 4 [pid 6935] memfd_create("syzkaller", 0 [pid 6932] munmap(0x7f943d000000, 138412032 [pid 6933] ioctl(4, LOOP_SET_FD, 3 [pid 6934] munmap(0x7f943d000000, 138412032 [pid 6932] <... munmap resumed>) = 0 [pid 6934] <... munmap resumed>) = 0 [pid 6935] <... memfd_create resumed>) = 3 [pid 6935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6935] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 6935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6934] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6932] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6932] <... openat resumed>) = 4 [pid 5071] getdents64(3, [pid 6932] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6934] <... openat resumed>) = 4 [pid 6932] <... ioctl resumed>) = 0 [pid 6934] ioctl(4, LOOP_SET_FD, 3 [pid 5071] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6934] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./307/binderfs", [pid 6933] <... ioctl resumed>) = 0 [pid 6933] close(3) = 0 [pid 6933] close(4) = 0 [pid 6933] mkdir("./file1", 0777) = 0 [pid 6933] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6932] close(3 [pid 5074] close(3 [pid 6932] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6932] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6935] <... write resumed>) = 524288 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6932] <... close resumed>) = 0 [pid 6932] mkdir("./file1", 0777 [pid 5071] unlink("./307/binderfs" [pid 6933] <... mount resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6932] <... mkdir resumed>) = 0 [pid 6933] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6935] munmap(0x7f943d000000, 138412032 [pid 6933] <... openat resumed>) = 3 [pid 6935] <... munmap resumed>) = 0 [pid 6934] close(3 [pid 6932] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6933] chdir("./file1"./strace-static-x86_64: Process 6936 attached [pid 6934] <... close resumed>) = 0 [pid 6933] <... chdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6936 [pid 6936] set_robust_list(0x555583d53660, 24 [pid 6935] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6934] close(4 [pid 6933] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... umount2 resumed>) = 0 [pid 6936] <... set_robust_list resumed>) = 0 [ 239.229065][ T6933] loop5: detected capacity change from 0 to 1024 [ 239.245948][ T6932] loop4: detected capacity change from 0 to 1024 [ 239.255343][ T6934] loop2: detected capacity change from 0 to 1024 [pid 6935] <... openat resumed>) = 4 [pid 6934] <... close resumed>) = 0 [pid 6933] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6936] chdir("./307" [pid 6935] ioctl(4, LOOP_SET_FD, 3 [pid 6934] mkdir("./file1", 0777 [pid 6933] truncate("./file1", 0 [pid 6936] <... chdir resumed>) = 0 [pid 6934] <... mkdir resumed>) = 0 [pid 6936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6936] setpgid(0, 0) = 0 [pid 6936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6936] write(3, "1000", 4) = 4 [pid 6936] close(3 [pid 6935] <... ioctl resumed>) = 0 [pid 6936] <... close resumed>) = 0 [pid 6935] close(3 [pid 6936] symlink("/dev/binderfs", "./binderfs" [pid 6935] <... close resumed>) = 0 [pid 6934] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6932] <... mount resumed>) = 0 [pid 5071] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6936] <... symlink resumed>) = 0 [pid 6932] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6933] <... truncate resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6936] memfd_create("syzkaller", 0 [pid 6932] <... openat resumed>) = 3 [pid 6933] memfd_create("syzkaller", 0 [pid 6936] <... memfd_create resumed>) = 3 [pid 6932] chdir("./file1" [pid 6933] <... memfd_create resumed>) = 4 [pid 6936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6932] <... chdir resumed>) = 0 [pid 6933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6936] <... mmap resumed>) = 0x7f943d000000 [pid 6932] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6933] <... mmap resumed>) = 0x7f943d000000 [pid 6936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6935] close(4 [pid 6934] <... mount resumed>) = 0 [pid 6932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6933] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] newfstatat(AT_FDCWD, "./307/file1", [pid 6935] <... close resumed>) = 0 [pid 6932] truncate("./file1", 0 [pid 6934] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6935] mkdir("./file1", 0777 [pid 6934] <... openat resumed>) = 3 [pid 5071] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6935] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6935] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6934] chdir("./file1" [pid 5071] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6934] <... chdir resumed>) = 0 [pid 6934] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", [pid 6934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6932] <... truncate resumed>) = 0 [pid 6933] <... write resumed>) = 524288 [ 239.296997][ T6935] loop1: detected capacity change from 0 to 1024 [pid 6932] memfd_create("syzkaller", 0 [pid 6934] truncate("./file1", 0 [pid 5071] getdents64(4, [pid 6932] <... memfd_create resumed>) = 4 [pid 6932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6932] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] getdents64(4, [pid 6934] <... truncate resumed>) = 0 [pid 6934] memfd_create("syzkaller", 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6934] <... memfd_create resumed>) = 4 [pid 5071] close(4 [pid 6934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... close resumed>) = 0 [pid 6935] <... mount resumed>) = 0 [pid 6935] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6935] chdir("./file1") = 0 [pid 6935] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6935] truncate("./file1", 0 [pid 6934] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] rmdir("./307/file1" [pid 6936] <... write resumed>) = 524288 [pid 6933] munmap(0x7f943d000000, 138412032) = 0 [pid 6936] munmap(0x7f943d000000, 138412032 [pid 5071] <... rmdir resumed>) = 0 [pid 6935] <... truncate resumed>) = 0 [pid 5071] getdents64(3, [pid 6935] memfd_create("syzkaller", 0 [pid 6936] <... munmap resumed>) = 0 [pid 6935] <... memfd_create resumed>) = 4 [pid 6933] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] close(3 [pid 6935] <... mmap resumed>) = 0x7f943d000000 [pid 6932] <... write resumed>) = 524288 [pid 6933] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 6936] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6935] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6936] <... openat resumed>) = 4 [pid 5071] rmdir("./307" [pid 6936] ioctl(4, LOOP_SET_FD, 3 [pid 6934] <... write resumed>) = 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./308", 0777 [pid 6933] close(4 [pid 5071] <... mkdir resumed>) = 0 [pid 6933] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6934] munmap(0x7f943d000000, 138412032 [pid 6932] munmap(0x7f943d000000, 138412032 [pid 6934] <... munmap resumed>) = 0 [pid 6932] <... munmap resumed>) = 0 [pid 6934] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6932] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6935] <... write resumed>) = 524288 [pid 6934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6936] <... ioctl resumed>) = 0 [pid 6934] close(4 [pid 6932] close(4 [pid 6933] exit_group(0 [pid 6934] <... close resumed>) = 0 [pid 6932] <... close resumed>) = 0 [pid 6936] close(3) = 0 [pid 6933] <... exit_group resumed>) = ? [pid 6936] close(4 [pid 6935] munmap(0x7f943d000000, 138412032 [pid 6936] <... close resumed>) = 0 [pid 6933] +++ exited with 0 +++ [pid 6936] mkdir("./file1", 0777 [pid 6935] <... munmap resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6933, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6936] <... mkdir resumed>) = 0 [pid 6936] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6935] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6932] exit_group(0 [pid 5076] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6935] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6935] <... close resumed>) = 0 [pid 6936] <... mount resumed>) = 0 [pid 6934] exit_group(0 [pid 6932] <... exit_group resumed>) = ? [ 239.392792][ T6936] loop3: detected capacity change from 0 to 1024 [pid 5076] <... openat resumed>) = 3 [pid 6936] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(3, "", [pid 5071] <... ioctl resumed>) = 0 [pid 6936] <... openat resumed>) = 3 [pid 6935] exit_group(0 [pid 6934] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6936] chdir("./file1" [pid 6935] <... exit_group resumed>) = ? [pid 6934] +++ exited with 0 +++ [pid 6932] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5071] close(3 [pid 6936] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6932, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6936] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6935] +++ exited with 0 +++ [pid 5076] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... close resumed>) = 0 [pid 6936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6934, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6936] truncate("./file1", 0 [pid 5076] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6935, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] unlink("./303/binderfs" [pid 5075] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6937 attached [pid 6936] <... truncate resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6937] set_robust_list(0x555583d53660, 24 [pid 6936] memfd_create("syzkaller", 0 [pid 5076] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6937 [pid 6937] <... set_robust_list resumed>) = 0 [pid 6936] <... memfd_create resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(3, "", [pid 6937] chdir("./308" [pid 6936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6936] <... mmap resumed>) = 0x7f943d000000 [pid 5076] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 6937] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5073] newfstatat(3, "", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6937] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6936] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(AT_FDCWD, "./303/file1", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] <... prctl resumed>) = 0 [pid 6937] setpgid(0, 0 [pid 5075] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6937] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5072] newfstatat(AT_FDCWD, "./306/binderfs", [pid 6937] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./306/binderfs" [pid 5072] unlink("./306/binderfs" [pid 5076] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./307/binderfs", [pid 5072] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] write(3, "1000", 4 [pid 6936] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./307/binderfs" [pid 6937] <... write resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6937] close(3 [pid 5076] getdents64(4, [pid 5073] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6937] symlink("/dev/binderfs", "./binderfs" [pid 5076] getdents64(4, [pid 6937] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6937] memfd_create("syzkaller", 0 [pid 5076] close(4 [pid 6937] <... memfd_create resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 6937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] rmdir("./303/file1" [pid 6937] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5076] rmdir("./303" [pid 5073] <... umount2 resumed>) = 0 [pid 6936] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 6936] <... munmap resumed>) = 0 [pid 5073] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 6937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6936] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] mkdir("./304", 0777 [pid 5075] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./307/file1", [pid 6936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6936] close(4 [pid 5075] newfstatat(AT_FDCWD, "./306/file1", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./306/file1", [pid 5073] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 6936] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5075] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(4 [pid 5075] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./307/file1" [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./306/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] getdents64(3, [pid 5072] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6937] <... write resumed>) = 524288 [pid 6936] exit_group(0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5072] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 6936] <... exit_group resumed>) = ? [pid 5075] rmdir("./306" [pid 5073] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6937] munmap(0x7f943d000000, 138412032 [pid 6936] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 6937] <... munmap resumed>) = 0 [pid 5075] mkdir("./307", 0777 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6936, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] rmdir("./307" [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5074] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 6937] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] mkdir("./308", 0777 [pid 5072] close(4) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] rmdir("./306/file1") = 0 [pid 6937] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6937] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 6937] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] close(4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6937] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(3 [pid 6937] mkdir("./file1", 0777 [pid 5074] newfstatat(AT_FDCWD, "./307/binderfs", [pid 5072] <... close resumed>) = 0 [pid 6937] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] rmdir("./306") = 0 [pid 6937] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] unlink("./307/binderfs" [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] mkdir("./307", 0777 [pid 5074] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [ 239.586164][ T6937] loop0: detected capacity change from 0 to 1024 [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(3 [pid 5074] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6937] <... mount resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] newfstatat(AT_FDCWD, "./307/file1", [pid 5073] <... close resumed>) = 0 ./strace-static-x86_64: Process 6938 attached [pid 6938] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6938 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6938] <... set_robust_list resumed>) = 0 [pid 5074] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6939 attached ) = -1 EINVAL (Invalid argument) [pid 6939] set_robust_list(0x555583d53660, 24 [pid 6938] chdir("./304" [pid 6937] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6939 [pid 5074] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6940 attached [pid 6939] <... set_robust_list resumed>) = 0 [pid 6937] <... openat resumed>) = 3 [pid 6937] chdir("./file1" [pid 5074] <... openat resumed>) = 4 [pid 6937] <... chdir resumed>) = 0 [pid 6939] chdir("./307" [pid 6937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] newfstatat(4, "", [pid 6939] <... chdir resumed>) = 0 [pid 6939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6938] <... chdir resumed>) = 0 [pid 6937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6939] <... prctl resumed>) = 0 [pid 6938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] getdents64(4, [pid 6939] setpgid(0, 0 [pid 6938] <... prctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6938] setpgid(0, 0 [pid 6937] truncate("./file1", 0 [pid 5074] getdents64(4, [pid 6939] <... setpgid resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6940 [pid 6938] <... setpgid resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6940] set_robust_list(0x555583d53660, 24 [pid 6939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] close(4 [pid 6940] <... set_robust_list resumed>) = 0 [pid 6938] <... openat resumed>) = 3 [pid 6940] chdir("./308" [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./307/file1" [pid 6940] <... chdir resumed>) = 0 [pid 6937] <... truncate resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6937] memfd_create("syzkaller", 0 [pid 6940] <... prctl resumed>) = 0 [pid 6940] setpgid(0, 0 [pid 6937] <... memfd_create resumed>) = 4 [pid 6940] <... setpgid resumed>) = 0 [pid 6937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6938] write(3, "1000", 4 [pid 6937] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] getdents64(3, [pid 5072] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6940] <... openat resumed>) = 3 [pid 6939] <... openat resumed>) = 3 [pid 6938] <... write resumed>) = 4 [pid 5074] close(3 [pid 6939] write(3, "1000", 4 [pid 6938] close(3 [pid 6939] <... write resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 6939] close(3 [pid 6938] <... close resumed>) = 0 [pid 5074] rmdir("./307" [pid 6939] <... close resumed>) = 0 [pid 6938] symlink("/dev/binderfs", "./binderfs" [pid 6939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6938] <... symlink resumed>) = 0 [pid 6940] write(3, "1000", 4 [pid 6939] memfd_create("syzkaller", 0 [pid 6940] <... write resumed>) = 4 [pid 6939] <... memfd_create resumed>) = 3 [pid 6938] memfd_create("syzkaller", 0 [pid 6940] close(3 [pid 6939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6938] <... memfd_create resumed>) = 3 [pid 6937] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 6940] <... close resumed>) = 0 [pid 6939] <... mmap resumed>) = 0x7f943d000000 [pid 5072] close(3 [pid 6940] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... close resumed>) = 0 [pid 6940] <... symlink resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6940] memfd_create("syzkaller", 0 [pid 6939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] mkdir("./308", 0777 [pid 6940] <... memfd_create resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 6940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6938] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6941 [pid 6940] <... mmap resumed>) = 0x7f943d000000 [pid 6940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6941 attached [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6941] set_robust_list(0x555583d53660, 24 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6941] <... set_robust_list resumed>) = 0 [pid 6941] chdir("./307") = 0 [pid 6941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6937] munmap(0x7f943d000000, 138412032 [pid 6941] <... prctl resumed>) = 0 [pid 6937] <... munmap resumed>) = 0 [pid 6941] setpgid(0, 0) = 0 [pid 6941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6941] write(3, "1000", 4 [pid 6938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6941] <... write resumed>) = 4 [pid 6937] close(4 [pid 6941] close(3) = 0 [pid 6941] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6941] memfd_create("syzkaller", 0 [pid 6939] <... write resumed>) = 524288 [pid 6940] <... write resumed>) = 524288 [pid 6937] <... close resumed>) = 0 [pid 6939] munmap(0x7f943d000000, 138412032 [pid 6941] <... memfd_create resumed>) = 3 [pid 6938] <... write resumed>) = 524288 [pid 6941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6939] <... munmap resumed>) = 0 [pid 6938] munmap(0x7f943d000000, 138412032 [pid 6940] munmap(0x7f943d000000, 138412032 [pid 6937] exit_group(0 [pid 6940] <... munmap resumed>) = 0 [pid 6938] <... munmap resumed>) = 0 [pid 6937] <... exit_group resumed>) = ? [pid 6940] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6940] ioctl(4, LOOP_SET_FD, 3 [pid 6939] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6938] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6937] +++ exited with 0 +++ [pid 6941] <... write resumed>) = 524288 [pid 6940] <... ioctl resumed>) = 0 [pid 6939] <... openat resumed>) = 4 [pid 6938] <... openat resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6937, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 6939] ioctl(4, LOOP_SET_FD, 3 [pid 6938] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./308/binderfs") = 0 [pid 5071] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 6941] munmap(0x7f943d000000, 138412032 [pid 6940] close(3 [pid 5074] close(3 [pid 6939] <... ioctl resumed>) = 0 [pid 6938] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6941] <... munmap resumed>) = 0 [pid 6940] <... close resumed>) = 0 [pid 6939] close(3 [pid 6938] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6941] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6940] close(4 [pid 6939] <... close resumed>) = 0 [pid 6938] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./308/file1", ./strace-static-x86_64: Process 6942 attached [pid 6941] <... openat resumed>) = 4 [pid 6940] <... close resumed>) = 0 [pid 6939] close(4 [pid 6938] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6942] set_robust_list(0x555583d53660, 24 [ 239.796187][ T6940] loop2: detected capacity change from 0 to 1024 [ 239.808814][ T6938] loop5: detected capacity change from 0 to 1024 [ 239.816513][ T6939] loop4: detected capacity change from 0 to 1024 [pid 6941] ioctl(4, LOOP_SET_FD, 3 [pid 6940] mkdir("./file1", 0777 [pid 6939] <... close resumed>) = 0 [pid 6938] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6942 [pid 5071] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6942] <... set_robust_list resumed>) = 0 [pid 6942] chdir("./308" [pid 6939] mkdir("./file1", 0777 [pid 6938] mkdir("./file1", 0777 [pid 6940] <... mkdir resumed>) = 0 [pid 6942] <... chdir resumed>) = 0 [pid 6939] <... mkdir resumed>) = 0 [pid 6938] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] <... openat resumed>) = 4 [pid 6942] setpgid(0, 0 [pid 6939] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6938] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] newfstatat(4, "", [pid 6942] <... setpgid resumed>) = 0 [pid 6940] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6939] <... mount resumed>) = 0 [pid 6938] <... mount resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6942] <... openat resumed>) = 3 [pid 6939] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6938] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] getdents64(4, [pid 6942] write(3, "1000", 4 [pid 6941] <... ioctl resumed>) = 0 [pid 6939] <... openat resumed>) = 3 [pid 6938] <... openat resumed>) = 3 [pid 6942] <... write resumed>) = 4 [pid 6941] close(3 [pid 6939] chdir("./file1" [pid 6938] chdir("./file1" [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6942] close(3 [pid 6941] <... close resumed>) = 0 [pid 6939] <... chdir resumed>) = 0 [pid 6938] <... chdir resumed>) = 0 [pid 5071] getdents64(4, [pid 6942] <... close resumed>) = 0 [pid 6941] close(4 [pid 6939] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6938] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6942] symlink("/dev/binderfs", "./binderfs" [pid 6941] <... close resumed>) = 0 [pid 6939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] close(4 [pid 6942] <... symlink resumed>) = 0 [pid 6941] mkdir("./file1", 0777 [pid 6939] truncate("./file1", 0 [pid 6938] truncate("./file1", 0 [pid 5071] <... close resumed>) = 0 [pid 6942] memfd_create("syzkaller", 0 [pid 6941] <... mkdir resumed>) = 0 [pid 6940] <... mount resumed>) = 0 [pid 5071] rmdir("./308/file1" [pid 6940] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6942] <... memfd_create resumed>) = 3 [pid 6940] <... openat resumed>) = 3 [pid 6938] <... truncate resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6941] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6940] chdir("./file1" [pid 6939] <... truncate resumed>) = 0 [pid 6938] memfd_create("syzkaller", 0 [pid 5071] getdents64(3, [pid 6942] <... mmap resumed>) = 0x7f943d000000 [pid 6939] memfd_create("syzkaller", 0 [pid 6938] <... memfd_create resumed>) = 4 [pid 6942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6940] <... chdir resumed>) = 0 [pid 6939] <... memfd_create resumed>) = 4 [pid 6938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 6940] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6938] <... mmap resumed>) = 0x7f943d000000 [ 239.852561][ T6941] loop1: detected capacity change from 0 to 1024 [pid 6940] truncate("./file1", 0 [pid 6939] <... mmap resumed>) = 0x7f943d000000 [pid 6938] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] rmdir("./308" [pid 6941] <... mount resumed>) = 0 [pid 6940] <... truncate resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6940] memfd_create("syzkaller", 0) = 4 [pid 6940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6941] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6940] <... mmap resumed>) = 0x7f943d000000 [pid 5071] mkdir("./309", 0777 [pid 6941] <... openat resumed>) = 3 [pid 6941] chdir("./file1" [pid 6939] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6942] <... write resumed>) = 524288 [pid 6941] <... chdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6941] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6940] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6941] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6941] truncate("./file1", 0 [pid 6938] <... write resumed>) = 524288 [pid 6941] <... truncate resumed>) = 0 [pid 6939] <... write resumed>) = 524288 [pid 6942] munmap(0x7f943d000000, 138412032 [pid 6941] memfd_create("syzkaller", 0) = 4 [pid 6938] munmap(0x7f943d000000, 138412032 [pid 6942] <... munmap resumed>) = 0 [pid 6941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6938] <... munmap resumed>) = 0 [pid 6941] <... mmap resumed>) = 0x7f943d000000 [pid 6942] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6940] <... write resumed>) = 524288 [pid 6942] <... openat resumed>) = 4 [pid 6939] munmap(0x7f943d000000, 138412032 [pid 6938] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6938] close(4) = 0 [pid 6942] ioctl(4, LOOP_SET_FD, 3 [pid 6939] <... munmap resumed>) = 0 [pid 6940] munmap(0x7f943d000000, 138412032 [pid 6939] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6941] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6940] <... munmap resumed>) = 0 [pid 6939] close(4 [pid 6940] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6939] <... close resumed>) = 0 [pid 6940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6938] exit_group(0) = ? [pid 6940] close(4 [pid 6938] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6938, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6940] <... close resumed>) = 0 [pid 5076] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6941] <... write resumed>) = 524288 [pid 5076] newfstatat(3, "", [pid 6939] exit_group(0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6939] <... exit_group resumed>) = ? [pid 5076] getdents64(3, [pid 6942] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6943 [pid 6942] close(3 [pid 6941] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6941] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6942] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./304/binderfs", [pid 6942] close(4 [pid 6939] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6943 attached [pid 6942] <... close resumed>) = 0 [pid 5076] unlink("./304/binderfs" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6939, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6940] exit_group(0 [ 239.961747][ T6942] loop3: detected capacity change from 0 to 1024 [pid 6943] set_robust_list(0x555583d53660, 24) = 0 [pid 6941] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6940] <... exit_group resumed>) = ? [pid 6943] chdir("./309" [pid 6942] mkdir("./file1", 0777 [pid 6941] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... unlink resumed>) = 0 [pid 6942] <... mkdir resumed>) = 0 [pid 6941] close(4 [pid 5076] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] <... chdir resumed>) = 0 [pid 6940] +++ exited with 0 +++ [pid 5075] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6940, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6943] setpgid(0, 0 [pid 6942] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5075] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6943] <... setpgid resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6942] <... mount resumed>) = 0 [pid 6941] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6942] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] getdents64(3, [pid 5073] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] write(3, "1000", 4 [pid 6942] <... openat resumed>) = 3 [pid 6942] chdir("./file1") = 0 [pid 6942] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6943] <... write resumed>) = 4 [pid 6942] truncate("./file1", 0 [pid 6941] exit_group(0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] close(3 [pid 6942] <... truncate resumed>) = 0 [pid 6941] <... exit_group resumed>) = ? [pid 5076] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] <... close resumed>) = 0 [pid 6942] memfd_create("syzkaller", 0 [pid 6941] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6942] <... memfd_create resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./304/file1", [pid 6943] symlink("/dev/binderfs", "./binderfs" [pid 6942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6942] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... openat resumed>) = 3 [pid 6943] <... symlink resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6941, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6942] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6943] memfd_create("syzkaller", 0 [pid 6942] <... write resumed>) = 524288 [pid 5075] newfstatat(AT_FDCWD, "./307/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5073] getdents64(3, [pid 5072] <... restart_syscall resumed>) = 0 [pid 5076] getdents64(4, [pid 6942] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6943] <... memfd_create resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6942] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] unlink("./307/binderfs" [pid 5073] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6942] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] rmdir("./304/file1" [pid 5075] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./308/binderfs", [pid 5072] <... openat resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(3, "", [pid 6942] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] unlink("./308/binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] getdents64(3, [pid 6942] close(4 [pid 5076] getdents64(3, [pid 5073] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./307/binderfs") = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5076] close(3) = 0 [pid 6943] <... write resumed>) = 524288 [pid 6942] <... close resumed>) = 0 [pid 5076] rmdir("./304" [pid 5075] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] munmap(0x7f943d000000, 138412032 [pid 6942] exit_group(0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] mkdir("./305", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 6942] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./307/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./307/file1", [pid 6943] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] <... openat resumed>) = 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 4 [pid 5073] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6943] ioctl(4, LOOP_SET_FD, 3 [pid 6942] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./308/file1", [pid 5072] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(4, "", [pid 5073] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5073] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6943] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6942, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6943] close(3 [pid 5075] getdents64(4, [pid 5074] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] rmdir("./307/file1" [pid 6943] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 6943] close(4 [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 6943] <... close resumed>) = 0 [pid 6943] mkdir("./file1", 0777 [pid 5075] rmdir("./307/file1" [pid 5074] newfstatat(3, "", [pid 5073] rmdir("./308/file1" [pid 5072] getdents64(3, [pid 6943] <... mkdir resumed>) = 0 [pid 6943] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 5072] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... close resumed>) = 0 [pid 5074] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./307" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./308/binderfs", [pid 5073] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5074] unlink("./308/binderfs" [pid 5073] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] mkdir("./308", 0777 [pid 5075] rmdir("./307" [pid 5073] <... close resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./308" [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] mkdir("./308", 0777 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 240.127076][ T6943] loop0: detected capacity change from 0 to 1024 [pid 5073] mkdir("./309", 0777) = 0 [pid 6943] <... mount resumed>) = 0 [pid 5076] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./308/file1", [pid 6943] chdir("./file1" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6943] <... chdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6943] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6943] truncate("./file1", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6944 attached [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6944 [pid 5074] <... openat resumed>) = 4 [pid 6944] set_robust_list(0x555583d53660, 24 [pid 6943] <... truncate resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6944] <... set_robust_list resumed>) = 0 [pid 6943] memfd_create("syzkaller", 0 [pid 6944] chdir("./305" [pid 6943] <... memfd_create resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6944] <... chdir resumed>) = 0 [pid 6943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6944] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6943] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(4, [pid 6944] <... prctl resumed>) = 0 [pid 6944] setpgid(0, 0) = 0 [pid 6944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6944] <... openat resumed>) = 3 [pid 6943] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(4) = 0 [pid 6944] write(3, "1000", 4 [pid 5074] rmdir("./308/file1" [pid 6944] <... write resumed>) = 4 [pid 6944] close(3) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6944] symlink("/dev/binderfs", "./binderfs" [pid 6943] <... write resumed>) = 524288 [pid 6944] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 5074] getdents64(3, [pid 5073] close(3 [pid 5072] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6944] memfd_create("syzkaller", 0 [pid 6943] munmap(0x7f943d000000, 138412032 [pid 5074] close(3 [pid 5073] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6944] <... memfd_create resumed>) = 3 [pid 6943] <... munmap resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] rmdir("./308" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6944] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./309", 0777 [pid 6943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 6943] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6945 ./strace-static-x86_64: Process 6945 attached [pid 6943] close(4 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6946 ./strace-static-x86_64: Process 6947 attached ./strace-static-x86_64: Process 6946 attached [pid 6945] set_robust_list(0x555583d53660, 24 [pid 6943] <... close resumed>) = 0 [pid 6946] set_robust_list(0x555583d53660, 24 [pid 6947] set_robust_list(0x555583d53660, 24 [pid 6945] <... set_robust_list resumed>) = 0 [pid 6944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6947] <... set_robust_list resumed>) = 0 [pid 6946] <... set_robust_list resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6947 [pid 6947] chdir("./308" [pid 6946] chdir("./308" [pid 5074] <... openat resumed>) = 3 [pid 6947] <... chdir resumed>) = 0 [pid 6947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6945] chdir("./309" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6947] <... prctl resumed>) = 0 [pid 6946] <... chdir resumed>) = 0 [pid 6947] setpgid(0, 0 [pid 6946] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6947] <... setpgid resumed>) = 0 [pid 6946] <... prctl resumed>) = 0 [pid 6945] <... chdir resumed>) = 0 [pid 6947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6946] setpgid(0, 0 [pid 6943] exit_group(0 [pid 6947] <... openat resumed>) = 3 [pid 6946] <... setpgid resumed>) = 0 [pid 6943] <... exit_group resumed>) = ? [pid 6945] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6947] write(3, "1000", 4 [pid 6946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6943] +++ exited with 0 +++ [pid 6947] <... write resumed>) = 4 [pid 6946] <... openat resumed>) = 3 [pid 6945] <... prctl resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6943, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6947] close(3 [pid 6946] write(3, "1000", 4 [pid 6945] setpgid(0, 0 [pid 6947] <... close resumed>) = 0 [pid 6946] <... write resumed>) = 4 [pid 6945] <... setpgid resumed>) = 0 [pid 6947] symlink("/dev/binderfs", "./binderfs" [pid 6946] close(3 [pid 6947] <... symlink resumed>) = 0 [pid 6946] <... close resumed>) = 0 [pid 6945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6944] <... write resumed>) = 524288 [pid 6946] symlink("/dev/binderfs", "./binderfs" [pid 6947] memfd_create("syzkaller", 0 [pid 6946] <... symlink resumed>) = 0 [pid 5071] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6945] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6945] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6947] <... memfd_create resumed>) = 3 [pid 6947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6946] memfd_create("syzkaller", 0 [pid 6944] munmap(0x7f943d000000, 138412032 [pid 5071] <... openat resumed>) = 3 [pid 6947] <... mmap resumed>) = 0x7f943d000000 [pid 6946] <... memfd_create resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 6946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6946] <... mmap resumed>) = 0x7f943d000000 [pid 6945] <... write resumed>) = 4 [pid 6944] <... munmap resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6947] <... write resumed>) = 524288 [pid 6945] close(3 [pid 6944] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... ioctl resumed>) = 0 [pid 5071] getdents64(3, [pid 6945] <... close resumed>) = 0 [pid 6945] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6945] <... symlink resumed>) = 0 [pid 5071] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6947] munmap(0x7f943d000000, 138412032 [pid 6945] memfd_create("syzkaller", 0 [pid 6944] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6947] <... munmap resumed>) = 0 [pid 6945] <... memfd_create resumed>) = 3 [pid 6944] ioctl(4, LOOP_SET_FD, 3 [pid 5071] newfstatat(AT_FDCWD, "./309/binderfs", [pid 6947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6947] <... openat resumed>) = 4 [pid 6946] <... write resumed>) = 524288 [pid 6947] ioctl(4, LOOP_SET_FD, 3 [pid 6945] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 6945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5071] unlink("./309/binderfs" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... unlink resumed>) = 0 [pid 6946] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6948 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6946] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6948 attached [pid 6944] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6948] set_robust_list(0x555583d53660, 24) = 0 [pid 6944] close(3) = 0 [pid 6948] chdir("./309" [pid 6947] <... ioctl resumed>) = 0 [pid 6944] close(4 [pid 6947] close(3 [pid 6944] <... close resumed>) = 0 [pid 5071] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6947] <... close resumed>) = 0 [pid 6948] <... chdir resumed>) = 0 [pid 6947] close(4 [pid 6944] mkdir("./file1", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6947] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./309/file1", [pid 6947] mkdir("./file1", 0777 [pid 6948] <... prctl resumed>) = 0 [pid 6947] <... mkdir resumed>) = 0 [pid 6944] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6948] setpgid(0, 0 [pid 6947] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] <... setpgid resumed>) = 0 [pid 6948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6947] <... mount resumed>) = 0 [pid 6945] <... write resumed>) = 524288 [pid 6944] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6948] <... openat resumed>) = 3 [pid 6947] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6947] chdir("./file1") = 0 [pid 5071] <... openat resumed>) = 4 [pid 6947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6946] <... ioctl resumed>) = 0 [pid 6947] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6946] close(3 [pid 6947] truncate("./file1", 0 [pid 6946] <... close resumed>) = 0 [pid 6946] close(4) = 0 [pid 6947] <... truncate resumed>) = 0 [pid 6946] mkdir("./file1", 0777 [pid 6947] memfd_create("syzkaller", 0) = 4 [pid 6947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] newfstatat(4, "", [pid 6948] write(3, "1000", 4 [pid 6947] <... mmap resumed>) = 0x7f943d000000 [pid 6946] <... mkdir resumed>) = 0 [ 240.328244][ T6944] loop5: detected capacity change from 0 to 1024 [ 240.345799][ T6947] loop4: detected capacity change from 0 to 1024 [ 240.359964][ T6946] loop1: detected capacity change from 0 to 1024 [pid 6945] munmap(0x7f943d000000, 138412032 [pid 6948] <... write resumed>) = 4 [pid 6947] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6948] close(3) = 0 [pid 5071] getdents64(4, [pid 6948] symlink("/dev/binderfs", "./binderfs" [pid 6946] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6945] <... munmap resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6948] <... symlink resumed>) = 0 [pid 6946] <... mount resumed>) = 0 [pid 6944] <... mount resumed>) = 0 [pid 6945] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] getdents64(4, [pid 6948] memfd_create("syzkaller", 0 [pid 6946] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6944] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6948] <... memfd_create resumed>) = 3 [pid 6945] <... openat resumed>) = 4 [pid 5071] close(4 [pid 6948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6945] ioctl(4, LOOP_SET_FD, 3 [pid 6944] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 6948] <... mmap resumed>) = 0x7f943d000000 [pid 5071] rmdir("./309/file1" [pid 6946] <... openat resumed>) = 3 [pid 6946] chdir("./file1") = 0 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6946] truncate("./file1", 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6944] chdir("./file1" [pid 6946] <... truncate resumed>) = 0 [pid 6946] memfd_create("syzkaller", 0) = 4 [pid 6946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6944] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 6944] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6944] truncate("./file1", 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6946] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] close(3 [pid 6947] <... write resumed>) = 524288 [pid 5071] <... close resumed>) = 0 [pid 6946] <... write resumed>) = 524288 [pid 5071] rmdir("./309" [pid 6947] munmap(0x7f943d000000, 138412032) = 0 [pid 6947] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6947] close(4 [pid 5071] <... rmdir resumed>) = 0 [pid 6948] <... write resumed>) = 524288 [pid 5071] mkdir("./310", 0777 [pid 6945] <... ioctl resumed>) = 0 [pid 6948] munmap(0x7f943d000000, 138412032 [pid 6945] close(3 [pid 6944] <... truncate resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6948] <... munmap resumed>) = 0 [pid 6945] <... close resumed>) = 0 [pid 6944] memfd_create("syzkaller", 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6945] close(4 [pid 6944] <... memfd_create resumed>) = 4 [pid 6947] <... close resumed>) = 0 [pid 6945] <... close resumed>) = 0 [pid 6944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... openat resumed>) = 3 [pid 6945] mkdir("./file1", 0777 [pid 6948] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6945] <... mkdir resumed>) = 0 [pid 6944] <... mmap resumed>) = 0x7f943d000000 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6945] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6946] munmap(0x7f943d000000, 138412032) = 0 [pid 6948] <... openat resumed>) = 4 [pid 6947] exit_group(0 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6948] ioctl(4, LOOP_SET_FD, 3 [pid 6946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 240.430213][ T6945] loop2: detected capacity change from 0 to 1024 [pid 6946] close(4 [pid 6947] <... exit_group resumed>) = ? [pid 6947] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6947, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6946] <... close resumed>) = 0 [pid 6944] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./308/binderfs" [pid 6946] exit_group(0 [pid 5075] <... unlink resumed>) = 0 [pid 6946] <... exit_group resumed>) = ? [pid 5075] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6946] +++ exited with 0 +++ [pid 6945] <... mount resumed>) = 0 [ 240.481191][ T6948] loop3: detected capacity change from 0 to 1024 [pid 6948] <... ioctl resumed>) = 0 [pid 6945] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6944] <... write resumed>) = 524288 [pid 5071] <... ioctl resumed>) = 0 [pid 6948] close(3 [pid 6945] <... openat resumed>) = 3 [pid 6945] chdir("./file1") = 0 [pid 6948] <... close resumed>) = 0 [pid 6945] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6948] close(4 [pid 6945] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6948] <... close resumed>) = 0 [pid 6945] truncate("./file1", 0 [pid 6948] mkdir("./file1", 0777 [pid 6945] <... truncate resumed>) = 0 [pid 6945] memfd_create("syzkaller", 0 [pid 6948] <... mkdir resumed>) = 0 [pid 6945] <... memfd_create resumed>) = 4 [pid 6944] munmap(0x7f943d000000, 138412032 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6946, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6944] <... munmap resumed>) = 0 [pid 6945] <... mmap resumed>) = 0x7f943d000000 [pid 6945] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6944] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6944] close(4) = 0 [pid 5072] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6948] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 5075] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6945] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6949 ./strace-static-x86_64: Process 6949 attached [pid 6944] exit_group(0 [pid 5075] newfstatat(AT_FDCWD, "./308/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] set_robust_list(0x555583d53660, 24 [pid 5075] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 6944] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6949] <... set_robust_list resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6948] <... mount resumed>) = 0 [pid 6944] +++ exited with 0 +++ [pid 6949] chdir("./310" [pid 6948] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6944, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] <... openat resumed>) = 4 [pid 5072] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 6948] chdir("./file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6949] <... chdir resumed>) = 0 [pid 6948] <... chdir resumed>) = 0 [pid 5076] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./308/binderfs", [pid 6949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6948] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] <... prctl resumed>) = 0 [pid 6948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6945] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5072] unlink("./308/binderfs" [pid 6949] setpgid(0, 0 [pid 6948] truncate("./file1", 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6949] <... setpgid resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5075] close(4 [pid 5072] <... unlink resumed>) = 0 [pid 6949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6949] <... openat resumed>) = 3 [pid 6948] <... truncate resumed>) = 0 [pid 6945] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] rmdir("./308/file1" [pid 6949] write(3, "1000", 4 [pid 6948] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... rmdir resumed>) = 0 [pid 6949] <... write resumed>) = 4 [pid 6948] <... memfd_create resumed>) = 4 [pid 6945] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 6949] close(3 [pid 6948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6945] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6949] <... close resumed>) = 0 [pid 6948] <... mmap resumed>) = 0x7f943d000000 [pid 6945] close(4 [pid 5076] newfstatat(AT_FDCWD, "./305/binderfs", [pid 5075] close(3 [pid 6949] symlink("/dev/binderfs", "./binderfs" [pid 6948] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6945] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6949] <... symlink resumed>) = 0 [pid 6949] memfd_create("syzkaller", 0) = 3 [pid 6949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] unlink("./305/binderfs" [pid 5075] rmdir("./308") = 0 [pid 5072] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6949] <... write resumed>) = 524288 [pid 6948] <... write resumed>) = 524288 [pid 6945] exit_group(0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] mkdir("./309", 0777 [pid 5072] newfstatat(AT_FDCWD, "./308/file1", [pid 6949] munmap(0x7f943d000000, 138412032 [pid 6948] munmap(0x7f943d000000, 138412032 [pid 6945] <... exit_group resumed>) = ? [pid 5076] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] <... munmap resumed>) = 0 [pid 6945] +++ exited with 0 +++ [pid 5075] <... mkdir resumed>) = 0 [pid 5072] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6945, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6948] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 4 [pid 6949] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6948] close(4 [pid 5073] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 6949] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6949] ioctl(4, LOOP_SET_FD, 3 [pid 5073] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(4, [pid 6948] <... close resumed>) = 0 [pid 5076] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6948] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(3, "", [pid 5072] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./305/file1", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6948] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5072] close(4 [pid 6948] +++ exited with 0 +++ [pid 6949] <... ioctl resumed>) = 0 [pid 5076] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... close resumed>) = 0 [pid 6949] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./308/file1" [pid 6949] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6948, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6949] close(4 [pid 5076] <... openat resumed>) = 4 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] newfstatat(AT_FDCWD, "./309/binderfs", [pid 5072] <... rmdir resumed>) = 0 [pid 6949] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(3, [pid 6949] mkdir("./file1", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./309/binderfs" [pid 6949] <... mkdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5074] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5072] close(3 [pid 5076] getdents64(4, [pid 5074] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 6949] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] rmdir("./308" [pid 5074] newfstatat(3, "", [pid 5076] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5076] rmdir("./305/file1" [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] mkdir("./309", 0777 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./309/binderfs", [pid 5072] <... mkdir resumed>) = 0 [pid 6949] <... mount resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] unlink("./309/binderfs" [pid 6949] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 6949] chdir("./file1") = 0 [pid 5076] <... close resumed>) = 0 [pid 6949] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] rmdir("./305" [pid 5074] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6949] truncate("./file1", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./309/file1", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] mkdir("./306", 0777 [pid 5073] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6949] <... truncate resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6949] memfd_create("syzkaller", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 6949] <... memfd_create resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./309/file1", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6949] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(3 [pid 5074] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [ 240.655772][ T6949] loop0: detected capacity change from 0 to 1024 [pid 5074] rmdir("./309/file1") = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(3, [pid 5073] getdents64(4, ./strace-static-x86_64: Process 6950 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6950 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 6950] set_robust_list(0x555583d53660, 24 [pid 5074] close(3 [pid 5073] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6950] <... set_robust_list resumed>) = 0 [pid 5073] rmdir("./309/file1" [pid 6950] chdir("./309" [pid 5074] rmdir("./309") = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6950] <... chdir resumed>) = 0 [pid 5073] close(3 [pid 6950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] mkdir("./310", 0777 [pid 6950] setpgid(0, 0 [pid 6949] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6950] <... setpgid resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] rmdir("./309" [pid 6950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6950] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6950] write(3, "1000", 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6950] <... write resumed>) = 4 [pid 6950] close(3) = 0 [pid 6950] symlink("/dev/binderfs", "./binderfs" [pid 5073] mkdir("./310", 0777 [pid 6950] <... symlink resumed>) = 0 [pid 6950] memfd_create("syzkaller", 0 [pid 6949] munmap(0x7f943d000000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 6950] <... memfd_create resumed>) = 3 [pid 6950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6949] <... munmap resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6951 ./strace-static-x86_64: Process 6951 attached [pid 6951] set_robust_list(0x555583d53660, 24 [pid 6950] <... mmap resumed>) = 0x7f943d000000 [pid 6950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6951] <... set_robust_list resumed>) = 0 [pid 6949] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 6949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 6949] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6951] chdir("./309") = 0 [pid 6951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6949] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6952 [pid 6951] setpgid(0, 0) = 0 [pid 6951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6950] <... write resumed>) = 524288 ./strace-static-x86_64: Process 6952 attached [pid 6950] munmap(0x7f943d000000, 138412032 [pid 6952] set_robust_list(0x555583d53660, 24 [pid 6950] <... munmap resumed>) = 0 [pid 6952] <... set_robust_list resumed>) = 0 [pid 6951] <... openat resumed>) = 3 [pid 6952] chdir("./306") = 0 [pid 6950] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] close(3 [pid 6952] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6950] <... openat resumed>) = 4 [pid 6949] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6952] <... prctl resumed>) = 0 [pid 6950] ioctl(4, LOOP_SET_FD, 3 [pid 6949] <... exit_group resumed>) = ? [pid 6952] setpgid(0, 0 [pid 6951] write(3, "1000", 4 [pid 6949] +++ exited with 0 +++ [pid 5073] <... ioctl resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6953 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6949, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6951] <... write resumed>) = 4 [pid 5073] close(3 [pid 5071] getdents64(3, [pid 6952] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6952] write(3, "1000", 4) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6952] close(3./strace-static-x86_64: Process 6953 attached ) = 0 [pid 6953] set_robust_list(0x555583d53660, 24) = 0 [pid 6952] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6953] chdir("./310") = 0 [pid 6952] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6953] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6952] memfd_create("syzkaller", 0 [pid 6953] <... prctl resumed>) = 0 [pid 6952] <... memfd_create resumed>) = 3 [pid 5071] unlink("./310/binderfs" [pid 6953] setpgid(0, 0 [pid 6952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6951] close(3 [pid 5073] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6953] <... setpgid resumed>) = 0 [pid 6953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6950] <... ioctl resumed>) = 0 [pid 5071] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6951] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6953] <... openat resumed>) = 3 [pid 6950] close(3 [pid 6952] <... mmap resumed>) = 0x7f943d000000 [pid 6950] <... close resumed>) = 0 [pid 6953] write(3, "1000", 4 [pid 6950] close(4 [pid 6953] <... write resumed>) = 4 [pid 6951] symlink("/dev/binderfs", "./binderfs" [pid 6950] <... close resumed>) = 0 [pid 6953] close(3 [pid 6950] mkdir("./file1", 0777./strace-static-x86_64: Process 6954 attached [pid 6953] <... close resumed>) = 0 [pid 6951] <... symlink resumed>) = 0 [pid 6950] <... mkdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6954 [pid 6953] symlink("/dev/binderfs", "./binderfs" [pid 6951] memfd_create("syzkaller", 0 [pid 6954] set_robust_list(0x555583d53660, 24 [pid 6953] <... symlink resumed>) = 0 [pid 6953] memfd_create("syzkaller", 0 [pid 6951] <... memfd_create resumed>) = 3 [pid 6954] <... set_robust_list resumed>) = 0 [pid 6953] <... memfd_create resumed>) = 3 [pid 6951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] chdir("./310" [pid 6953] <... mmap resumed>) = 0x7f943d000000 [pid 6951] <... mmap resumed>) = 0x7f943d000000 [pid 6950] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... umount2 resumed>) = 0 [pid 6954] <... chdir resumed>) = 0 [pid 6953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 240.813161][ T6950] loop4: detected capacity change from 0 to 1024 [pid 6951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6954] <... prctl resumed>) = 0 [pid 6954] setpgid(0, 0) = 0 [pid 5071] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6954] <... openat resumed>) = 3 [pid 6950] <... mount resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./310/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6954] write(3, "1000", 4 [pid 6953] <... write resumed>) = 524288 [pid 6951] <... write resumed>) = 524288 [pid 6950] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] <... write resumed>) = 4 [pid 6952] <... write resumed>) = 524288 [pid 6951] munmap(0x7f943d000000, 138412032 [pid 6950] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6954] close(3) = 0 [pid 6951] <... munmap resumed>) = 0 [pid 6950] chdir("./file1" [pid 5071] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6954] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6953] munmap(0x7f943d000000, 138412032 [pid 6952] munmap(0x7f943d000000, 138412032 [pid 6951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6950] <... chdir resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 6953] <... munmap resumed>) = 0 [pid 6952] <... munmap resumed>) = 0 [pid 6951] <... openat resumed>) = 4 [pid 6950] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] newfstatat(4, "", [pid 6954] memfd_create("syzkaller", 0 [pid 6953] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6951] ioctl(4, LOOP_SET_FD, 3 [pid 6950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6953] <... openat resumed>) = 4 [pid 6952] <... openat resumed>) = 4 [pid 6950] truncate("./file1", 0 [pid 5071] getdents64(4, [pid 6953] ioctl(4, LOOP_SET_FD, 3 [pid 6952] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6954] <... memfd_create resumed>) = 3 [pid 6954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./310/file1") = 0 [pid 6950] <... truncate resumed>) = 0 [pid 6950] memfd_create("syzkaller", 0 [pid 5071] getdents64(3, [pid 6954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6950] <... memfd_create resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 6950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] rmdir("./310" [pid 6950] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./311", 0777 [pid 6951] <... ioctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6951] close(3 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6951] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6951] close(4 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6951] <... close resumed>) = 0 [pid 6951] mkdir("./file1", 0777 [pid 6950] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6951] <... mkdir resumed>) = 0 [pid 6951] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6954] <... write resumed>) = 524288 [pid 6952] <... ioctl resumed>) = 0 [pid 6953] <... ioctl resumed>) = 0 [pid 6952] close(3 [pid 6953] close(3 [pid 6952] <... close resumed>) = 0 [pid 6954] munmap(0x7f943d000000, 138412032 [pid 6952] close(4 [pid 6953] <... close resumed>) = 0 [pid 6952] <... close resumed>) = 0 [pid 6953] close(4 [pid 6952] mkdir("./file1", 0777 [pid 6953] <... close resumed>) = 0 [pid 6952] <... mkdir resumed>) = 0 [pid 6954] <... munmap resumed>) = 0 [pid 6953] mkdir("./file1", 0777 [pid 6951] <... mount resumed>) = 0 [pid 6950] <... write resumed>) = 524288 [pid 6954] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6953] <... mkdir resumed>) = 0 [pid 6954] <... openat resumed>) = 4 [pid 6954] ioctl(4, LOOP_SET_FD, 3 [pid 6953] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [ 240.923006][ T6951] loop1: detected capacity change from 0 to 1024 [ 240.925051][ T6953] loop3: detected capacity change from 0 to 1024 [ 240.942100][ T6952] loop5: detected capacity change from 0 to 1024 [pid 6952] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6951] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6951] chdir("./file1") = 0 [pid 6951] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6950] munmap(0x7f943d000000, 138412032 [pid 6951] truncate("./file1", 0 [pid 6950] <... munmap resumed>) = 0 [pid 6950] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6951] <... truncate resumed>) = 0 [pid 6954] <... ioctl resumed>) = 0 [pid 6952] <... mount resumed>) = 0 [pid 6951] memfd_create("syzkaller", 0 [pid 6950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... ioctl resumed>) = 0 [pid 6954] close(3 [pid 6952] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6951] <... memfd_create resumed>) = 4 [pid 6954] <... close resumed>) = 0 [pid 6952] <... openat resumed>) = 3 [pid 6954] close(4 [pid 6953] <... mount resumed>) = 0 [pid 6952] chdir("./file1" [pid 6951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6950] close(4 [pid 6954] <... close resumed>) = 0 [pid 6953] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6952] <... chdir resumed>) = 0 [pid 6954] mkdir("./file1", 0777 [pid 6953] <... openat resumed>) = 3 [pid 6952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6951] <... mmap resumed>) = 0x7f943d000000 [pid 6954] <... mkdir resumed>) = 0 [pid 6953] chdir("./file1" [pid 6952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6954] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6953] <... chdir resumed>) = 0 [pid 6953] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] close(3 [pid 6953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6952] truncate("./file1", 0 [pid 6950] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6953] truncate("./file1", 0 [pid 6951] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6953] <... truncate resumed>) = 0 [pid 6952] <... truncate resumed>) = 0 [ 240.982607][ T6954] loop2: detected capacity change from 0 to 1024 [pid 6954] <... mount resumed>) = 0 [pid 6953] memfd_create("syzkaller", 0 [pid 6952] memfd_create("syzkaller", 0 [pid 6951] <... write resumed>) = 524288 [pid 6950] exit_group(0./strace-static-x86_64: Process 6955 attached [pid 6953] <... memfd_create resumed>) = 4 [pid 6952] <... memfd_create resumed>) = 4 [pid 6954] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] <... openat resumed>) = 3 [pid 6954] chdir("./file1" [pid 6953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] <... chdir resumed>) = 0 [pid 6953] <... mmap resumed>) = 0x7f943d000000 [pid 6954] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6953] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6952] <... mmap resumed>) = 0x7f943d000000 [pid 6954] truncate("./file1", 0 [pid 6955] set_robust_list(0x555583d53660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6955 [pid 6955] <... set_robust_list resumed>) = 0 [pid 6955] chdir("./311" [pid 6950] <... exit_group resumed>) = ? [pid 6955] <... chdir resumed>) = 0 [pid 6950] +++ exited with 0 +++ [pid 6955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6950, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6955] setpgid(0, 0 [pid 5075] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6955] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6955] write(3, "1000", 4 [pid 5075] newfstatat(3, "", [pid 6955] <... write resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6955] close(3 [pid 5075] getdents64(3, [pid 6955] <... close resumed>) = 0 [pid 6954] <... truncate resumed>) = 0 [pid 6952] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6955] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] <... symlink resumed>) = 0 [pid 6954] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6955] memfd_create("syzkaller", 0 [pid 6951] munmap(0x7f943d000000, 138412032 [pid 5075] newfstatat(AT_FDCWD, "./309/binderfs", [pid 6955] <... memfd_create resumed>) = 3 [pid 6954] <... memfd_create resumed>) = 4 [pid 6953] <... write resumed>) = 524288 [pid 6951] <... munmap resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] unlink("./309/binderfs" [pid 6955] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... unlink resumed>) = 0 [pid 6955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] <... mmap resumed>) = 0x7f943d000000 [pid 6951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6953] munmap(0x7f943d000000, 138412032 [pid 6951] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6953] <... munmap resumed>) = 0 [pid 6951] close(4) = 0 [pid 6955] <... write resumed>) = 524288 [pid 6953] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6952] <... write resumed>) = 524288 [pid 6953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6954] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6953] close(4 [pid 5075] <... umount2 resumed>) = 0 [pid 6952] munmap(0x7f943d000000, 138412032 [pid 6951] exit_group(0) = ? [pid 6952] <... munmap resumed>) = 0 [pid 6953] <... close resumed>) = 0 [pid 6952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./309/file1", [pid 6952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6955] munmap(0x7f943d000000, 138412032 [pid 6951] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6951, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6955] <... munmap resumed>) = 0 [pid 6954] <... write resumed>) = 524288 [pid 6953] exit_group(0 [pid 6952] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6954] munmap(0x7f943d000000, 138412032 [pid 6952] <... close resumed>) = 0 [pid 6955] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6953] <... exit_group resumed>) = ? [pid 6955] <... openat resumed>) = 4 [pid 6955] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 6954] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6954] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] close(4) = 0 [pid 5072] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6954] close(4 [pid 5072] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6953] +++ exited with 0 +++ [pid 5075] rmdir("./309/file1" [pid 5072] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6953, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5072] newfstatat(AT_FDCWD, "./309/binderfs", [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6954] <... close resumed>) = 0 [pid 6952] exit_group(0 [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] unlink("./309/binderfs" [pid 5075] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 6954] exit_group(0 [pid 6952] <... exit_group resumed>) = ? [pid 5074] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] <... ioctl resumed>) = 0 [pid 5075] rmdir("./309" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6955] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6954] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6955] <... close resumed>) = 0 [pid 5074] unlink("./310/binderfs" [pid 6955] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 6955] <... close resumed>) = 0 [pid 5074] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] mkdir("./file1", 0777) = 0 [pid 5075] mkdir("./310", 0777 [pid 6955] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... mkdir resumed>) = 0 [pid 6954] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6954, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] <... umount2 resumed>) = 0 [pid 5074] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./310/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6952] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 241.139128][ T6955] loop0: detected capacity change from 0 to 1024 [pid 5074] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6952, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(3, "", [pid 5072] newfstatat(AT_FDCWD, "./309/file1", [pid 5076] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 5076] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5072] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5076] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] getdents64(4, [pid 5073] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6955] <... mount resumed>) = 0 [pid 5076] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6955] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(4 [pid 5073] newfstatat(AT_FDCWD, "./310/binderfs", [pid 5072] newfstatat(4, "", [pid 6955] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6955] chdir("./file1") = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] unlink("./310/binderfs" [pid 5072] getdents64(4, [pid 5076] unlink("./306/binderfs" [pid 5074] rmdir("./310/file1" [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 6955] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6955] truncate("./file1", 0 [pid 5074] close(3 [pid 5072] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./309/file1" [pid 5074] rmdir("./310") = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 5075] close(3 [pid 5074] mkdir("./311", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] close(3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 6955] <... truncate resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] rmdir("./309" [pid 6955] memfd_create("syzkaller", 0 [pid 5074] <... openat resumed>) = 3 [pid 6955] <... memfd_create resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6955] <... mmap resumed>) = 0x7f943d000000 [pid 6955] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] mkdir("./310", 0777./strace-static-x86_64: Process 6956 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6956 [pid 6956] set_robust_list(0x555583d53660, 24) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5076] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6956] chdir("./310" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] newfstatat(AT_FDCWD, "./306/file1", [pid 5073] newfstatat(AT_FDCWD, "./310/file1", [pid 6956] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6956] setpgid(0, 0 [pid 5076] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6956] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5073] <... openat resumed>) = 4 [pid 6956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(4, "", [pid 6956] <... openat resumed>) = 3 [pid 6956] write(3, "1000", 4) = 4 [pid 6956] close(3) = 0 [pid 6956] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6956] memfd_create("syzkaller", 0) = 3 [pid 6956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5076] getdents64(4, [pid 6956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6955] <... write resumed>) = 524288 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] close(4 [pid 5076] rmdir("./306/file1" [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./310/file1" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6955] munmap(0x7f943d000000, 138412032 [pid 5076] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(3, [pid 6955] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5076] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] rmdir("./306" [pid 5073] rmdir("./310" [pid 6955] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6956] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] close(3 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] mkdir("./307", 0777 [pid 5073] mkdir("./311", 0777 [pid 6956] munmap(0x7f943d000000, 138412032 [pid 6955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... close resumed>) = 0 [pid 6956] <... munmap resumed>) = 0 [pid 6955] close(4 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6957 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6957 attached [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6957] set_robust_list(0x555583d53660, 24 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6957] <... set_robust_list resumed>) = 0 [pid 6956] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 6957] chdir("./311" [pid 6955] <... close resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6958 [pid 6957] <... chdir resumed>) = 0 [pid 6956] <... openat resumed>) = 4 [pid 6957] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6958 attached [pid 6956] ioctl(4, LOOP_SET_FD, 3 [pid 6958] set_robust_list(0x555583d53660, 24 [pid 6957] <... prctl resumed>) = 0 [pid 6958] <... set_robust_list resumed>) = 0 [pid 6958] chdir("./310") = 0 [pid 6955] exit_group(0 [pid 6958] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6955] <... exit_group resumed>) = ? [pid 6958] <... prctl resumed>) = 0 [pid 6957] setpgid(0, 0 [pid 6955] +++ exited with 0 +++ [pid 6958] setpgid(0, 0) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6955, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6957] <... setpgid resumed>) = 0 [pid 6958] <... openat resumed>) = 3 [pid 6957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6957] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6958] write(3, "1000", 4) = 4 [pid 6957] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6958] close(3) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6957] <... write resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 6958] memfd_create("syzkaller", 0 [pid 6957] close(3) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6957] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 6957] <... symlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6957] memfd_create("syzkaller", 0 [pid 6956] <... ioctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./311/binderfs", [pid 6957] <... memfd_create resumed>) = 3 [pid 6956] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6956] <... close resumed>) = 0 [pid 5071] unlink("./311/binderfs") = 0 [pid 6958] <... memfd_create resumed>) = 3 [pid 6958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6956] close(4 [pid 5071] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6958] <... mmap resumed>) = 0x7f943d000000 [pid 6956] <... close resumed>) = 0 [pid 6956] mkdir("./file1", 0777) = 0 [pid 6957] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... ioctl resumed>) = 0 [pid 6956] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6957] <... write resumed>) = 524288 [ 241.314412][ T6956] loop4: detected capacity change from 0 to 1024 [pid 5073] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 6958] <... write resumed>) = 524288 [pid 5076] close(3 [pid 5073] <... close resumed>) = 0 [pid 6957] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6957] <... munmap resumed>) = 0 [pid 5071] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6959 ./strace-static-x86_64: Process 6959 attached [pid 6959] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6960 ./strace-static-x86_64: Process 6960 attached [pid 6959] <... set_robust_list resumed>) = 0 [pid 6959] chdir("./311") = 0 [pid 6959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6960] set_robust_list(0x555583d53660, 24 [pid 6959] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6960] <... set_robust_list resumed>) = 0 [pid 6959] <... setpgid resumed>) = 0 [pid 6959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6957] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./311/file1", [pid 6959] <... openat resumed>) = 3 [pid 6958] munmap(0x7f943d000000, 138412032 [pid 6960] chdir("./307" [pid 6958] <... munmap resumed>) = 0 [pid 6957] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6960] <... chdir resumed>) = 0 [pid 6959] write(3, "1000", 4 [pid 6960] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6959] <... write resumed>) = 4 [pid 6960] <... prctl resumed>) = 0 [pid 6959] close(3 [pid 6960] setpgid(0, 0 [pid 6959] <... close resumed>) = 0 [pid 6960] <... setpgid resumed>) = 0 [pid 6959] symlink("/dev/binderfs", "./binderfs" [pid 6958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6959] <... symlink resumed>) = 0 [pid 6958] <... openat resumed>) = 4 [pid 6959] memfd_create("syzkaller", 0 [pid 6958] ioctl(4, LOOP_SET_FD, 3 [pid 6957] ioctl(4, LOOP_SET_FD, 3 [pid 5071] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6958] <... ioctl resumed>) = 0 [pid 6960] <... openat resumed>) = 3 [pid 6959] <... memfd_create resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", [pid 6960] write(3, "1000", 4) = 4 [pid 6960] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6960] <... close resumed>) = 0 [pid 6960] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] getdents64(4, [pid 6959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6957] <... ioctl resumed>) = 0 [pid 6960] memfd_create("syzkaller", 0 [pid 6956] <... mount resumed>) = 0 [pid 6960] <... memfd_create resumed>) = 3 [pid 6956] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6956] <... openat resumed>) = 3 [pid 6960] <... mmap resumed>) = 0x7f943d000000 [pid 6956] chdir("./file1" [pid 6960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6957] close(3 [pid 6956] <... chdir resumed>) = 0 [pid 5071] getdents64(4, [pid 6956] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6957] <... close resumed>) = 0 [pid 6956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6957] close(4 [pid 6956] truncate("./file1", 0 [pid 6957] <... close resumed>) = 0 [pid 5071] close(4 [pid 6957] mkdir("./file1", 0777) = 0 [pid 6957] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./311/file1" [pid 6956] <... truncate resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [ 241.415729][ T6958] loop1: detected capacity change from 0 to 1024 [ 241.424753][ T6957] loop3: detected capacity change from 0 to 1024 [pid 6956] memfd_create("syzkaller", 0 [pid 6960] <... write resumed>) = 524288 [pid 6957] <... mount resumed>) = 0 [pid 6956] <... memfd_create resumed>) = 4 [pid 5071] getdents64(3, [pid 6958] close(3 [pid 6957] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6958] <... close resumed>) = 0 [pid 6957] <... openat resumed>) = 3 [pid 5071] close(3 [pid 6958] close(4 [pid 6957] chdir("./file1" [pid 5071] <... close resumed>) = 0 [pid 6959] <... write resumed>) = 524288 [pid 6958] <... close resumed>) = 0 [pid 5071] rmdir("./311" [pid 6957] <... chdir resumed>) = 0 [pid 6959] munmap(0x7f943d000000, 138412032 [pid 6958] mkdir("./file1", 0777 [pid 6956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6959] <... munmap resumed>) = 0 [pid 6958] <... mkdir resumed>) = 0 [pid 6957] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6956] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... rmdir resumed>) = 0 [pid 6957] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6956] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6959] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6957] truncate("./file1", 0 [pid 5071] mkdir("./312", 0777 [pid 6959] <... openat resumed>) = 4 [pid 6959] ioctl(4, LOOP_SET_FD, 3 [pid 6958] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6957] <... truncate resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6957] memfd_create("syzkaller", 0 [pid 6960] munmap(0x7f943d000000, 138412032 [pid 6957] <... memfd_create resumed>) = 4 [pid 6960] <... munmap resumed>) = 0 [pid 6957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6960] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6957] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... openat resumed>) = 3 [pid 6960] <... openat resumed>) = 4 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6960] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6957] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6959] <... ioctl resumed>) = 0 [pid 6958] <... mount resumed>) = 0 [pid 6959] close(3 [pid 6958] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6959] <... close resumed>) = 0 [pid 6958] <... openat resumed>) = 3 [pid 6959] close(4 [pid 6958] chdir("./file1" [pid 6960] close(3 [pid 6959] <... close resumed>) = 0 [pid 6958] <... chdir resumed>) = 0 [pid 6956] <... write resumed>) = 524288 [pid 6960] <... close resumed>) = 0 [pid 6959] mkdir("./file1", 0777 [pid 6958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6960] close(4 [pid 6959] <... mkdir resumed>) = 0 [pid 6958] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6960] <... close resumed>) = 0 [pid 6960] mkdir("./file1", 0777) = 0 [pid 6958] truncate("./file1", 0 [pid 6960] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6959] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6956] munmap(0x7f943d000000, 138412032 [pid 6958] <... truncate resumed>) = 0 [pid 6956] <... munmap resumed>) = 0 [ 241.490290][ T6959] loop2: detected capacity change from 0 to 1024 [ 241.506523][ T6960] loop5: detected capacity change from 0 to 1024 [pid 6958] memfd_create("syzkaller", 0 [pid 6957] <... write resumed>) = 524288 [pid 6958] <... memfd_create resumed>) = 4 [pid 6956] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6958] <... mmap resumed>) = 0x7f943d000000 [pid 6956] close(4) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6958] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6956] exit_group(0 [pid 6957] munmap(0x7f943d000000, 138412032 [pid 6956] <... exit_group resumed>) = ? [pid 6957] <... munmap resumed>) = 0 [pid 6957] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6960] <... mount resumed>) = 0 [pid 6959] <... mount resumed>) = 0 [pid 6957] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6957] close(4 [pid 6959] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6960] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6959] <... openat resumed>) = 3 [pid 6958] <... write resumed>) = 524288 [pid 6957] <... close resumed>) = 0 [pid 6956] +++ exited with 0 +++ [pid 6960] <... openat resumed>) = 3 [pid 6959] chdir("./file1" [pid 5071] close(3 [pid 6959] <... chdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6956, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6960] chdir("./file1" [pid 6959] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6960] <... chdir resumed>) = 0 [pid 6959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... restart_syscall resumed>) = 0 [pid 6960] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6959] truncate("./file1", 0 [pid 6960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6960] truncate("./file1", 0 [pid 5075] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6959] <... truncate resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6959] memfd_create("syzkaller", 0 [pid 5075] newfstatat(3, "", [pid 5071] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6959] <... memfd_create resumed>) = 4 [pid 5075] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6960] <... truncate resumed>) = 0 [pid 6959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6957] exit_group(0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6960] memfd_create("syzkaller", 0 [pid 6959] <... mmap resumed>) = 0x7f943d000000 [pid 6957] <... exit_group resumed>) = ? [pid 5075] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6961 attached [pid 6958] munmap(0x7f943d000000, 138412032 [pid 6961] set_robust_list(0x555583d53660, 24 [pid 6960] <... memfd_create resumed>) = 4 [pid 6958] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6961 [pid 6960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6960] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6960] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6957] +++ exited with 0 +++ [pid 5075] unlink("./310/binderfs" [pid 6961] <... set_robust_list resumed>) = 0 [pid 6958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6957, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6961] chdir("./312" [pid 6958] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6961] <... chdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6959] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6958] close(4 [pid 5074] <... openat resumed>) = 3 [pid 6961] <... prctl resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 6961] setpgid(0, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6961] <... setpgid resumed>) = 0 [pid 5074] getdents64(3, [pid 6961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6961] <... openat resumed>) = 3 [pid 6958] <... close resumed>) = 0 [pid 6961] write(3, "1000", 4 [pid 6959] <... write resumed>) = 524288 [pid 5074] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6961] close(3 [pid 5074] newfstatat(AT_FDCWD, "./311/binderfs", [pid 6961] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6961] symlink("/dev/binderfs", "./binderfs" [pid 6960] <... write resumed>) = 524288 [pid 6958] exit_group(0 [pid 5075] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] unlink("./311/binderfs" [pid 6961] <... symlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 6961] memfd_create("syzkaller", 0 [pid 5075] newfstatat(AT_FDCWD, "./310/file1", [pid 5074] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] <... memfd_create resumed>) = 3 [pid 6958] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6961] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... openat resumed>) = 4 [pid 6961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6959] munmap(0x7f943d000000, 138412032 [pid 5075] close(4 [pid 6960] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 6960] <... munmap resumed>) = 0 [pid 6959] <... munmap resumed>) = 0 [pid 6958] +++ exited with 0 +++ [pid 5075] rmdir("./310/file1" [pid 6961] <... write resumed>) = 524288 [pid 6960] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6959] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6958, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6960] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] munmap(0x7f943d000000, 138412032 [pid 6959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 5074] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6961] <... munmap resumed>) = 0 [pid 6960] <... close resumed>) = 0 [pid 6959] close(4 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./310" [pid 6961] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6960] exit_group(0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./311/file1", [pid 5072] <... openat resumed>) = 3 [pid 6960] <... exit_group resumed>) = ? [pid 5075] mkdir("./311", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6961] <... openat resumed>) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5072] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6961] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 6961] <... ioctl resumed>) = 0 [pid 6960] +++ exited with 0 +++ [pid 6959] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 6961] close(3 [pid 6959] exit_group(0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6960, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6961] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6961] close(4 [pid 6959] <... exit_group resumed>) = ? [pid 5074] close(4 [pid 5072] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] <... close resumed>) = 0 [pid 5076] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./311/file1" [pid 5072] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6961] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6961] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 6961] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6959] +++ exited with 0 +++ [pid 5076] newfstatat(3, "", [pid 5074] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6959, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] unlink("./310/binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] rmdir("./311" [pid 5072] <... unlink resumed>) = 0 [pid 5073] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] mkdir("./312", 0777 [pid 5073] newfstatat(3, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5076] unlink("./307/binderfs" [pid 5074] <... mkdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5073] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] newfstatat(AT_FDCWD, "./311/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./311/binderfs") = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6961] <... mount resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./310/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 241.695742][ T6961] loop0: detected capacity change from 0 to 1024 [pid 6961] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6961] chdir("./file1" [pid 5076] newfstatat(AT_FDCWD, "./307/file1", [pid 6961] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6961] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... openat resumed>) = 4 [pid 6961] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6961] truncate("./file1", 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./307/file1") = 0 [pid 5073] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./311/file1", [pid 5075] close(3 [pid 5072] getdents64(4, [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 6961] <... truncate resumed>) = 0 [pid 5076] close(3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6961] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 6961] <... memfd_create resumed>) = 4 [pid 5076] rmdir("./307" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(4 [pid 5073] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./308", 0777) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5073] newfstatat(4, "", [pid 5072] rmdir("./310/file1" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6961] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6962 attached [pid 5074] close(3 [pid 5073] getdents64(4, [pid 5072] getdents64(3, [pid 6962] set_robust_list(0x555583d53660, 24 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6962 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5073] close(4./strace-static-x86_64: Process 6963 attached ) = 0 [pid 5072] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6963 [pid 5073] rmdir("./311/file1" [pid 5072] rmdir("./310" [pid 6962] <... set_robust_list resumed>) = 0 [pid 6962] chdir("./311" [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6963] set_robust_list(0x555583d53660, 24 [pid 5073] getdents64(3, [pid 5072] mkdir("./311", 0777 [pid 6963] <... set_robust_list resumed>) = 0 [pid 6962] <... chdir resumed>) = 0 [pid 6961] <... write resumed>) = 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6963] chdir("./312" [pid 6962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] close(3 [pid 6963] <... chdir resumed>) = 0 [pid 6963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6962] <... prctl resumed>) = 0 [pid 6961] munmap(0x7f943d000000, 138412032 [pid 5073] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6963] <... prctl resumed>) = 0 [pid 6961] <... munmap resumed>) = 0 [pid 5073] rmdir("./311" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6963] setpgid(0, 0 [pid 6962] setpgid(0, 0 [pid 6963] <... setpgid resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6961] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6963] <... openat resumed>) = 3 [pid 5073] mkdir("./312", 0777 [pid 6963] write(3, "1000", 4 [pid 6961] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... mkdir resumed>) = 0 [pid 6963] <... write resumed>) = 4 [pid 6963] close(3) = 0 [pid 6962] <... setpgid resumed>) = 0 [pid 6961] close(4 [pid 6963] symlink("/dev/binderfs", "./binderfs" [pid 6962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6963] <... symlink resumed>) = 0 [pid 6962] <... openat resumed>) = 3 [pid 6961] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6963] memfd_create("syzkaller", 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6963] <... memfd_create resumed>) = 3 [pid 6963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... ioctl resumed>) = 0 [pid 6962] write(3, "1000", 4 [pid 6961] exit_group(0 [pid 6963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6962] <... write resumed>) = 4 [pid 6961] <... exit_group resumed>) = ? [pid 5076] close(3 [pid 6962] close(3) = 0 [pid 6962] symlink("/dev/binderfs", "./binderfs" [pid 6961] +++ exited with 0 +++ [pid 6962] <... symlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6961, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- ./strace-static-x86_64: Process 6964 attached [pid 6963] <... write resumed>) = 524288 [pid 6962] memfd_create("syzkaller", 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6964 [pid 5072] <... ioctl resumed>) = 0 [pid 6963] munmap(0x7f943d000000, 138412032 [pid 6962] <... memfd_create resumed>) = 3 [pid 5071] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6964] set_robust_list(0x555583d53660, 24 [pid 6963] <... munmap resumed>) = 0 [pid 6962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6964] <... set_robust_list resumed>) = 0 [pid 6963] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6962] <... mmap resumed>) = 0x7f943d000000 [pid 5071] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6964] chdir("./308" [pid 6963] <... openat resumed>) = 4 [pid 6962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6963] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 6964] <... chdir resumed>) = 0 [pid 6963] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6964] setpgid(0, 0 [pid 5072] close(3 [pid 5071] getdents64(3, [pid 6964] <... setpgid resumed>) = 0 [pid 5073] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6964] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./312/binderfs", ./strace-static-x86_64: Process 6965 attached [pid 6964] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6964] <... write resumed>) = 4 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6965 [pid 6964] close(3 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6966 [pid 6964] <... close resumed>) = 0 [pid 6964] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6966 attached [pid 6965] set_robust_list(0x555583d53660, 24 [pid 6964] memfd_create("syzkaller", 0 [pid 6962] <... write resumed>) = 524288 [pid 5071] unlink("./312/binderfs" [pid 6966] set_robust_list(0x555583d53660, 24 [pid 6965] <... set_robust_list resumed>) = 0 [pid 6966] <... set_robust_list resumed>) = 0 [pid 6965] chdir("./311" [pid 6964] <... memfd_create resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 6965] <... chdir resumed>) = 0 [pid 6964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6966] chdir("./312" [pid 5071] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] <... chdir resumed>) = 0 [pid 6965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6965] <... prctl resumed>) = 0 [pid 6964] <... mmap resumed>) = 0x7f943d000000 [pid 6966] <... prctl resumed>) = 0 [pid 6965] setpgid(0, 0 [pid 6966] setpgid(0, 0 [pid 6965] <... setpgid resumed>) = 0 [pid 6964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6963] close(3 [pid 5071] <... umount2 resumed>) = 0 [pid 6966] <... setpgid resumed>) = 0 [pid 6965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6963] <... close resumed>) = 0 [pid 6966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6965] <... openat resumed>) = 3 [pid 6963] close(4) = 0 [pid 6962] munmap(0x7f943d000000, 138412032 [pid 6963] mkdir("./file1", 0777 [pid 6962] <... munmap resumed>) = 0 [pid 6966] <... openat resumed>) = 3 [pid 6965] write(3, "1000", 4 [pid 6963] <... mkdir resumed>) = 0 [pid 6966] write(3, "1000", 4 [pid 6965] <... write resumed>) = 4 [pid 6963] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] <... write resumed>) = 4 [pid 6965] close(3 [pid 6962] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6966] close(3 [pid 6965] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6966] <... close resumed>) = 0 [pid 6965] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./312/file1", [pid 6966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6965] <... symlink resumed>) = 0 [ 241.893953][ T6963] loop3: detected capacity change from 0 to 1024 [pid 6964] <... write resumed>) = 524288 [pid 6962] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6962] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6966] memfd_create("syzkaller", 0 [pid 6965] memfd_create("syzkaller", 0 [pid 6962] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6966] <... memfd_create resumed>) = 3 [pid 5071] <... openat resumed>) = 4 [pid 6965] <... memfd_create resumed>) = 3 [pid 5071] newfstatat(4, "", [pid 6966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6966] <... mmap resumed>) = 0x7f943d000000 [pid 6965] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 6966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6964] munmap(0x7f943d000000, 138412032 [pid 6963] <... mount resumed>) = 0 [pid 6962] close(3 [pid 6964] <... munmap resumed>) = 0 [pid 6963] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6963] <... openat resumed>) = 3 [pid 5071] getdents64(4, [pid 6964] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6963] chdir("./file1" [pid 6962] <... close resumed>) = 0 [pid 6964] <... openat resumed>) = 4 [pid 6963] <... chdir resumed>) = 0 [pid 6962] close(4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6964] ioctl(4, LOOP_SET_FD, 3 [pid 6963] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6962] <... close resumed>) = 0 [pid 5071] close(4 [pid 6966] <... write resumed>) = 524288 [pid 6963] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6962] mkdir("./file1", 0777 [pid 5071] <... close resumed>) = 0 [pid 6966] munmap(0x7f943d000000, 138412032 [pid 6964] <... ioctl resumed>) = 0 [pid 6963] truncate("./file1", 0 [pid 6962] <... mkdir resumed>) = 0 [pid 5071] rmdir("./312/file1" [pid 6965] <... write resumed>) = 524288 [ 241.956788][ T6962] loop4: detected capacity change from 0 to 1024 [ 241.997215][ T6964] loop5: detected capacity change from 0 to 1024 [pid 6962] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6965] munmap(0x7f943d000000, 138412032 [pid 5071] <... rmdir resumed>) = 0 [pid 6966] <... munmap resumed>) = 0 [pid 6965] <... munmap resumed>) = 0 [pid 5071] getdents64(3, [pid 6966] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6966] <... openat resumed>) = 4 [pid 6965] <... openat resumed>) = 4 [pid 5071] close(3 [pid 6966] ioctl(4, LOOP_SET_FD, 3 [pid 6965] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... close resumed>) = 0 [pid 6962] <... mount resumed>) = 0 [pid 6962] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6964] close(3 [pid 6962] <... openat resumed>) = 3 [pid 6962] chdir("./file1") = 0 [pid 6962] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6964] <... close resumed>) = 0 [pid 6962] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6964] close(4 [pid 6962] truncate("./file1", 0 [pid 6964] <... close resumed>) = 0 [pid 5071] rmdir("./312" [pid 6964] mkdir("./file1", 0777) = 0 [pid 6962] <... truncate resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6963] <... truncate resumed>) = 0 [pid 6962] memfd_create("syzkaller", 0 [pid 5071] mkdir("./313", 0777 [pid 6964] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6963] memfd_create("syzkaller", 0 [pid 6962] <... memfd_create resumed>) = 4 [pid 6963] <... memfd_create resumed>) = 4 [pid 6962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6962] <... mmap resumed>) = 0x7f943d000000 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6966] <... ioctl resumed>) = 0 [pid 6965] <... ioctl resumed>) = 0 [pid 6963] <... mmap resumed>) = 0x7f943d000000 [pid 6962] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... openat resumed>) = 3 [pid 6966] close(3 [pid 6965] close(3 [pid 6964] <... mount resumed>) = 0 [pid 6964] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6966] <... close resumed>) = 0 [pid 6965] <... close resumed>) = 0 [pid 6964] <... openat resumed>) = 3 [pid 6963] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6966] close(4 [pid 6965] close(4 [pid 6966] <... close resumed>) = 0 [pid 6965] <... close resumed>) = 0 [pid 6964] chdir("./file1" [pid 6962] <... write resumed>) = 524288 [pid 6966] mkdir("./file1", 0777 [pid 6965] mkdir("./file1", 0777 [pid 6964] <... chdir resumed>) = 0 [pid 6966] <... mkdir resumed>) = 0 [pid 6964] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6965] <... mkdir resumed>) = 0 [pid 6964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6964] truncate("./file1", 0 [pid 6966] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6965] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6964] <... truncate resumed>) = 0 [pid 6964] memfd_create("syzkaller", 0) = 4 [ 242.011654][ T6966] loop2: detected capacity change from 0 to 1024 [ 242.018718][ T6965] loop1: detected capacity change from 0 to 1024 [pid 6964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6964] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6962] munmap(0x7f943d000000, 138412032) = 0 [pid 6962] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6962] close(4 [pid 5071] <... ioctl resumed>) = 0 [pid 6962] <... close resumed>) = 0 [pid 5071] close(3 [pid 6965] <... mount resumed>) = 0 [pid 6966] <... mount resumed>) = 0 [pid 6965] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6963] <... write resumed>) = 524288 [pid 5071] <... close resumed>) = 0 [pid 6966] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6965] <... openat resumed>) = 3 [pid 6964] <... write resumed>) = 524288 [pid 6962] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6962] <... exit_group resumed>) = ? [pid 6966] <... openat resumed>) = 3 [pid 6965] chdir("./file1" [pid 6963] munmap(0x7f943d000000, 138412032 [pid 6966] chdir("./file1" [pid 6965] <... chdir resumed>) = 0 [pid 6964] munmap(0x7f943d000000, 138412032 [pid 6966] <... chdir resumed>) = 0 [pid 6965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6966] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6965] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6963] <... munmap resumed>) = 0 [pid 6962] +++ exited with 0 +++ [pid 6963] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6965] truncate("./file1", 0 [pid 6966] truncate("./file1", 0./strace-static-x86_64: Process 6967 attached [pid 6964] <... munmap resumed>) = 0 [pid 6964] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6962, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6967] set_robust_list(0x555583d53660, 24 [pid 6964] close(4 [pid 6963] close(4 [pid 6967] <... set_robust_list resumed>) = 0 [pid 6967] chdir("./313" [pid 6966] <... truncate resumed>) = 0 [pid 5075] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6967 [pid 6967] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6966] memfd_create("syzkaller", 0 [pid 6964] <... close resumed>) = 0 [pid 6967] <... prctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6967] setpgid(0, 0 [pid 5075] <... openat resumed>) = 3 [pid 6967] <... setpgid resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6966] <... memfd_create resumed>) = 4 [pid 6965] <... truncate resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6967] write(3, "1000", 4 [pid 6966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6965] memfd_create("syzkaller", 0 [pid 6964] exit_group(0 [pid 6963] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 6967] <... write resumed>) = 4 [pid 6966] <... mmap resumed>) = 0x7f943d000000 [pid 6965] <... memfd_create resumed>) = 4 [pid 6964] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6967] close(3 [pid 6965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6964] +++ exited with 0 +++ [pid 6963] exit_group(0 [pid 6967] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6964, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6967] symlink("/dev/binderfs", "./binderfs" [pid 6965] <... mmap resumed>) = 0x7f943d000000 [pid 6963] <... exit_group resumed>) = ? [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6967] <... symlink resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6967] memfd_create("syzkaller", 0 [pid 6963] +++ exited with 0 +++ [pid 5076] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] <... memfd_create resumed>) = 3 [pid 6967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6963, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5075] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", [pid 6965] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 6966] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(AT_FDCWD, "./311/binderfs", [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] unlink("./311/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./308/binderfs", [pid 5074] newfstatat(3, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] unlink("./308/binderfs" [pid 5074] getdents64(3, [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6967] <... write resumed>) = 524288 [pid 6966] <... write resumed>) = 524288 [pid 6965] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] unlink("./312/binderfs" [pid 6967] munmap(0x7f943d000000, 138412032 [pid 6966] munmap(0x7f943d000000, 138412032 [pid 6965] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 6966] <... munmap resumed>) = 0 [pid 6965] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] <... munmap resumed>) = 0 [pid 6965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./308/file1", [pid 5075] newfstatat(AT_FDCWD, "./311/file1", [pid 6967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6965] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6967] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6967] ioctl(4, LOOP_SET_FD, 3 [pid 6965] close(4 [pid 5076] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6965] <... close resumed>) = 0 [pid 5075] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./308/file1" [pid 6966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] close(4 [pid 5075] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./308") = 0 [pid 6965] exit_group(0) = ? [pid 6966] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./312/file1", [pid 6967] <... ioctl resumed>) = 0 [pid 6967] close(3 [pid 5076] mkdir("./309", 0777 [pid 6967] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6967] close(4) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] mkdir("./file1", 0777 [pid 6965] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6965, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 6967] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(4, "", [pid 5072] <... restart_syscall resumed>) = 0 [pid 6966] exit_group(0 [pid 5075] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6967] <... mount resumed>) = 0 [pid 5072] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6967] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] newfstatat(3, "", [pid 6967] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6966] <... exit_group resumed>) = ? [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] getdents64(3, [pid 6967] chdir("./file1" [pid 5075] rmdir("./311/file1" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6967] <... chdir resumed>) = 0 [pid 6967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] truncate("./file1", 0 [pid 6966] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./311/binderfs", [pid 5075] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6966, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] unlink("./311/binderfs" [pid 6967] <... truncate resumed>) = 0 [pid 5075] close(3 [pid 5074] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 6967] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 5074] rmdir("./312/file1" [pid 6967] <... memfd_create resumed>) = 4 [pid 5075] rmdir("./311" [pid 5073] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] <... mmap resumed>) = 0x7f943d000000 [ 242.211549][ T6967] loop0: detected capacity change from 0 to 1024 [pid 5073] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6967] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 5075] mkdir("./312", 0777 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./312") = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] mkdir("./313", 0777 [pid 5072] <... umount2 resumed>) = 0 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./312/binderfs", [pid 5072] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] unlink("./312/binderfs") = 0 [pid 5072] newfstatat(AT_FDCWD, "./311/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./311/file1") = 0 [pid 5076] close(3 [pid 5073] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(AT_FDCWD, "./312/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6967] <... write resumed>) = 524288 [pid 5073] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] close(3 [pid 6967] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 6967] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./311" [pid 5073] <... openat resumed>) = 4 [pid 5072] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6968 attached [pid 6968] set_robust_list(0x555583d53660, 24 [pid 5073] newfstatat(4, "", [pid 6968] <... set_robust_list resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6968 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] mkdir("./312", 0777 [pid 6968] chdir("./309" [pid 6967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] getdents64(4, [pid 5072] <... mkdir resumed>) = 0 [pid 6968] <... chdir resumed>) = 0 [pid 6967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6968] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] getdents64(4, [pid 6968] <... prctl resumed>) = 0 [pid 6967] close(4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6968] setpgid(0, 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] close(4 [pid 5072] <... openat resumed>) = 3 [pid 6968] <... setpgid resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] rmdir("./312/file1" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6967] <... close resumed>) = 0 [pid 6968] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6968] write(3, "1000", 4) = 4 [pid 6968] close(3 [pid 5073] getdents64(3, [pid 6968] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6968] symlink("/dev/binderfs", "./binderfs" [pid 5073] close(3 [pid 6968] <... symlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./312") = 0 [pid 6968] memfd_create("syzkaller", 0) = 3 [pid 5073] mkdir("./313", 0777) = 0 [pid 6968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6967] exit_group(0 [pid 6968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6967] <... exit_group resumed>) = ? [pid 6967] +++ exited with 0 +++ [pid 5074] close(3 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6967, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5071] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... ioctl resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./313/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./313/binderfs") = 0 [pid 5071] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6969 attached [pid 6968] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6968] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6969 [pid 5072] close(3 [pid 5071] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6969] set_robust_list(0x555583d53660, 24 [pid 6968] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(3 [pid 5072] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(AT_FDCWD, "./313/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6971 attached [pid 6968] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6971 [pid 5071] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6971] set_robust_list(0x555583d53660, 24 [pid 6968] <... openat resumed>) = 4 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6970 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6971] <... set_robust_list resumed>) = 0 [pid 6968] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6972 attached [pid 6971] chdir("./313" [pid 6969] <... set_robust_list resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6970 attached [pid 6971] <... chdir resumed>) = 0 [pid 6969] chdir("./313" [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6972 [pid 6972] set_robust_list(0x555583d53660, 24 [pid 5071] <... openat resumed>) = 4 [pid 6972] <... set_robust_list resumed>) = 0 [pid 6970] set_robust_list(0x555583d53660, 24 [pid 6971] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6969] <... chdir resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 6972] chdir("./312" [pid 6970] <... set_robust_list resumed>) = 0 [pid 6971] <... prctl resumed>) = 0 [pid 6969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6972] <... chdir resumed>) = 0 [pid 6970] chdir("./312" [pid 6971] setpgid(0, 0 [pid 6969] <... prctl resumed>) = 0 [pid 6972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6970] <... chdir resumed>) = 0 [pid 6971] <... setpgid resumed>) = 0 [pid 6969] setpgid(0, 0 [pid 5071] getdents64(4, [pid 6972] <... prctl resumed>) = 0 [pid 6970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6969] <... setpgid resumed>) = 0 [pid 6968] <... ioctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6972] setpgid(0, 0 [pid 6970] <... prctl resumed>) = 0 [pid 6971] <... openat resumed>) = 3 [pid 6969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6968] close(3 [pid 5071] getdents64(4, [pid 6972] <... setpgid resumed>) = 0 [pid 6970] setpgid(0, 0 [pid 6971] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6970] <... setpgid resumed>) = 0 [pid 6971] <... write resumed>) = 4 [pid 6968] <... close resumed>) = 0 [pid 5071] close(4 [pid 6972] <... openat resumed>) = 3 [pid 6970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6971] close(3 [pid 6969] <... openat resumed>) = 3 [pid 6968] close(4 [pid 5071] <... close resumed>) = 0 [pid 6972] write(3, "1000", 4 [pid 6970] <... openat resumed>) = 3 [pid 6971] <... close resumed>) = 0 [pid 6969] write(3, "1000", 4 [pid 6968] <... close resumed>) = 0 [pid 5071] rmdir("./313/file1" [pid 6972] <... write resumed>) = 4 [pid 6970] write(3, "1000", 4 [pid 6971] symlink("/dev/binderfs", "./binderfs" [pid 6969] <... write resumed>) = 4 [pid 6968] mkdir("./file1", 0777 [pid 5071] <... rmdir resumed>) = 0 [pid 6972] close(3 [pid 6970] <... write resumed>) = 4 [pid 6971] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 6972] <... close resumed>) = 0 [pid 6970] close(3 [pid 6971] memfd_create("syzkaller", 0 [pid 6969] close(3 [pid 6968] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6972] symlink("/dev/binderfs", "./binderfs" [pid 6970] <... close resumed>) = 0 [pid 6971] <... memfd_create resumed>) = 3 [pid 5071] close(3 [pid 6970] symlink("/dev/binderfs", "./binderfs" [pid 6971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... close resumed>) = 0 [pid 6972] <... symlink resumed>) = 0 [pid 6970] <... symlink resumed>) = 0 [pid 6971] <... mmap resumed>) = 0x7f943d000000 [pid 6969] <... close resumed>) = 0 [pid 6968] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] rmdir("./313" [pid 6972] memfd_create("syzkaller", 0 [pid 6970] memfd_create("syzkaller", 0 [pid 6971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6970] <... memfd_create resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 6970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6969] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./314", 0777 [pid 6972] <... memfd_create resumed>) = 3 [pid 6969] <... symlink resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [ 242.424677][ T6968] loop5: detected capacity change from 0 to 1024 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6971] <... write resumed>) = 524288 [pid 6970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6969] memfd_create("syzkaller", 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6969] <... memfd_create resumed>) = 3 [pid 6969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6968] <... mount resumed>) = 0 [pid 6971] munmap(0x7f943d000000, 138412032) = 0 [pid 6971] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6968] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6971] <... openat resumed>) = 4 [pid 6971] ioctl(4, LOOP_SET_FD, 3 [pid 6968] chdir("./file1" [pid 6970] <... write resumed>) = 524288 [pid 6968] <... chdir resumed>) = 0 [pid 6972] <... write resumed>) = 524288 [pid 6968] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6972] munmap(0x7f943d000000, 138412032 [pid 6968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6970] munmap(0x7f943d000000, 138412032) = 0 [pid 6968] truncate("./file1", 0 [pid 6970] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6972] <... munmap resumed>) = 0 [pid 6970] ioctl(4, LOOP_SET_FD, 3 [pid 6969] <... write resumed>) = 524288 [pid 6972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6969] munmap(0x7f943d000000, 138412032 [pid 6968] <... truncate resumed>) = 0 [pid 6968] memfd_create("syzkaller", 0 [pid 6972] <... openat resumed>) = 4 [pid 6968] <... memfd_create resumed>) = 4 [pid 6972] ioctl(4, LOOP_SET_FD, 3 [pid 6970] <... ioctl resumed>) = 0 [pid 6971] <... ioctl resumed>) = 0 [pid 6969] <... munmap resumed>) = 0 [ 242.509647][ T6971] loop2: detected capacity change from 0 to 1024 [ 242.535045][ T6970] loop1: detected capacity change from 0 to 1024 [pid 6968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6971] close(3 [pid 6969] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6969] ioctl(4, LOOP_SET_FD, 3 [pid 6971] <... close resumed>) = 0 [pid 6968] <... mmap resumed>) = 0x7f943d000000 [pid 6970] close(3) = 0 [pid 6971] close(4 [pid 6970] close(4 [pid 6971] <... close resumed>) = 0 [pid 6971] mkdir("./file1", 0777 [pid 6970] <... close resumed>) = 0 [pid 6970] mkdir("./file1", 0777 [pid 6971] <... mkdir resumed>) = 0 [pid 6970] <... mkdir resumed>) = 0 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 6973 ./strace-static-x86_64: Process 6973 attached [pid 6973] set_robust_list(0x555583d53660, 24) = 0 [pid 6971] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6970] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6973] chdir("./314") = 0 [pid 6973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6973] setpgid(0, 0) = 0 [pid 6968] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6973] write(3, "1000", 4) = 4 [pid 6973] close(3) = 0 [pid 6969] <... ioctl resumed>) = 0 [pid 6973] symlink("/dev/binderfs", "./binderfs" [pid 6969] close(3 [pid 6973] <... symlink resumed>) = 0 [pid 6969] <... close resumed>) = 0 [pid 6973] memfd_create("syzkaller", 0 [pid 6969] close(4 [pid 6973] <... memfd_create resumed>) = 3 [pid 6969] <... close resumed>) = 0 [pid 6973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6969] mkdir("./file1", 0777 [pid 6973] <... mmap resumed>) = 0x7f943d000000 [pid 6969] <... mkdir resumed>) = 0 [pid 6970] <... mount resumed>) = 0 [pid 6972] <... ioctl resumed>) = 0 [pid 6969] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [ 242.557034][ T6972] loop4: detected capacity change from 0 to 1024 [ 242.558065][ T6969] loop3: detected capacity change from 0 to 1024 [pid 6972] close(3 [pid 6973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6972] <... close resumed>) = 0 [pid 6970] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6971] <... mount resumed>) = 0 [pid 6969] <... mount resumed>) = 0 [pid 6968] <... write resumed>) = 524288 [pid 6972] close(4 [pid 6970] <... openat resumed>) = 3 [pid 6971] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6969] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6968] munmap(0x7f943d000000, 138412032 [pid 6972] <... close resumed>) = 0 [pid 6970] chdir("./file1" [pid 6971] <... openat resumed>) = 3 [pid 6969] <... openat resumed>) = 3 [pid 6972] mkdir("./file1", 0777 [pid 6970] <... chdir resumed>) = 0 [pid 6971] chdir("./file1" [pid 6969] chdir("./file1" [pid 6968] <... munmap resumed>) = 0 [pid 6972] <... mkdir resumed>) = 0 [pid 6970] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6971] <... chdir resumed>) = 0 [pid 6969] <... chdir resumed>) = 0 [pid 6968] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6972] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6971] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6969] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6973] <... write resumed>) = 524288 [pid 6970] truncate("./file1", 0 [pid 6971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6971] truncate("./file1", 0 [pid 6968] close(4 [pid 6969] truncate("./file1", 0) = 0 [pid 6969] memfd_create("syzkaller", 0) = 4 [pid 6969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6970] <... truncate resumed>) = 0 [pid 6969] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6968] <... close resumed>) = 0 [pid 6970] memfd_create("syzkaller", 0) = 4 [pid 6973] munmap(0x7f943d000000, 138412032) = 0 [pid 6971] <... truncate resumed>) = 0 [pid 6971] memfd_create("syzkaller", 0 [pid 6970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6971] <... memfd_create resumed>) = 4 [pid 6969] <... write resumed>) = 524288 [pid 6968] exit_group(0 [pid 6970] <... mmap resumed>) = 0x7f943d000000 [pid 6971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6973] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6973] ioctl(4, LOOP_SET_FD, 3 [pid 6972] <... mount resumed>) = 0 [pid 6970] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6971] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6968] <... exit_group resumed>) = ? [pid 6972] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6972] chdir("./file1") = 0 [pid 6972] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6969] munmap(0x7f943d000000, 138412032 [pid 6973] <... ioctl resumed>) = 0 [pid 6969] <... munmap resumed>) = 0 [pid 6972] truncate("./file1", 0 [pid 6973] close(3 [pid 6969] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6973] <... close resumed>) = 0 [pid 6969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6973] close(4 [pid 6970] <... write resumed>) = 524288 [pid 6969] close(4 [pid 6968] +++ exited with 0 +++ [pid 6973] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6968, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6973] mkdir("./file1", 0777 [pid 5076] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6973] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6972] <... truncate resumed>) = 0 [pid 6972] memfd_create("syzkaller", 0 [pid 6969] <... close resumed>) = 0 [pid 5076] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6973] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6972] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./309/binderfs", [pid 6972] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./309/binderfs") = 0 [pid 5076] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 6972] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6973] <... mount resumed>) = 0 [pid 6970] munmap(0x7f943d000000, 138412032 [pid 6969] exit_group(0 [pid 6973] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6970] <... munmap resumed>) = 0 [pid 6969] <... exit_group resumed>) = ? [pid 6973] <... openat resumed>) = 3 [pid 6973] chdir("./file1" [pid 6969] +++ exited with 0 +++ [pid 6973] <... chdir resumed>) = 0 [pid 6970] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6969, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6973] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 242.675525][ T6973] loop0: detected capacity change from 0 to 1024 [pid 6973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6973] truncate("./file1", 0 [pid 6970] close(4 [pid 6971] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./309/file1", [pid 6970] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6971] munmap(0x7f943d000000, 138412032 [pid 6973] <... truncate resumed>) = 0 [pid 6973] memfd_create("syzkaller", 0 [pid 6971] <... munmap resumed>) = 0 [pid 6973] <... memfd_create resumed>) = 4 [pid 5076] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6973] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 4 [pid 6973] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(4, "", [pid 5074] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 6970] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./309/file1" [pid 6972] <... write resumed>) = 524288 [pid 6970] <... exit_group resumed>) = ? [pid 6971] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6970] +++ exited with 0 +++ [pid 6971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 6972] munmap(0x7f943d000000, 138412032 [pid 6971] close(4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(3, "", [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6970, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] close(3 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... close resumed>) = 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 5076] rmdir("./309") = 0 [pid 5072] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] mkdir("./310", 0777 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6973] <... write resumed>) = 524288 [pid 6972] <... munmap resumed>) = 0 [pid 6971] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6973] munmap(0x7f943d000000, 138412032 [pid 6972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6971] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6971] <... exit_group resumed>) = ? [pid 5074] newfstatat(AT_FDCWD, "./313/binderfs", [pid 5072] <... openat resumed>) = 3 [pid 6972] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] unlink("./313/binderfs" [pid 5072] newfstatat(3, "", [pid 6973] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] newfstatat(AT_FDCWD, "./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./312/binderfs") = 0 [pid 6973] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6971] +++ exited with 0 +++ [pid 6973] close(4 [pid 6972] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6971, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5072] <... umount2 resumed>) = 0 [pid 6973] <... close resumed>) = 0 [pid 5073] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6972] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6972] <... exit_group resumed>) = ? [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./313/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./313/binderfs" [pid 6972] +++ exited with 0 +++ [pid 5073] <... unlink resumed>) = 0 [pid 5073] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6972, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./312/file1", [pid 6973] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6973] <... exit_group resumed>) = ? [pid 5076] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = 0 [pid 5072] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6973] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 5074] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./313/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6973, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(AT_FDCWD, "./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 4 [pid 5071] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] unlink("./312/binderfs" [pid 5074] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./313/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(4, [pid 5075] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5073] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] newfstatat(3, "", [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5072] close(4./strace-static-x86_64: Process 6974 attached [pid 5074] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6974] set_robust_list(0x555583d53660, 24 [pid 5074] rmdir("./313/file1" [pid 6974] <... set_robust_list resumed>) = 0 [pid 5075] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5072] rmdir("./312/file1" [pid 5071] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] chdir("./310" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6974] <... chdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6974 [pid 5075] newfstatat(AT_FDCWD, "./312/file1", [pid 5074] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./314/binderfs", [pid 6974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6974] <... prctl resumed>) = 0 [pid 5075] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] unlink("./314/binderfs" [pid 6974] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5072] close(3 [pid 5071] <... unlink resumed>) = 0 [pid 6974] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./313" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5073] close(4 [pid 5072] rmdir("./312" [pid 6974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] newfstatat(4, "", [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] mkdir("./314", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] rmdir("./313/file1" [pid 5072] <... rmdir resumed>) = 0 [pid 6974] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6974] write(3, "1000", 4 [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 5072] mkdir("./313", 0777 [pid 5071] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(3, [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6974] close(3 [pid 5075] close(4 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6974] <... close resumed>) = 0 [pid 6974] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 5073] close(3 [pid 5071] newfstatat(AT_FDCWD, "./314/file1", [pid 5075] rmdir("./312/file1" [pid 5073] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] rmdir("./313" [pid 5071] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5071] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6974] <... symlink resumed>) = 0 [pid 5073] mkdir("./314", 0777 [pid 5075] rmdir("./312" [pid 5071] getdents64(4, [pid 6974] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6974] <... memfd_create resumed>) = 3 [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] mkdir("./313", 0777 [pid 6974] <... mmap resumed>) = 0x7f943d000000 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] rmdir("./314/file1" [pid 6974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 6974] <... write resumed>) = 524288 [pid 6974] munmap(0x7f943d000000, 138412032 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 6974] <... munmap resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6974] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./314" [pid 5074] close(3 [pid 6974] <... openat resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6974] ioctl(4, LOOP_SET_FD, 3 [pid 5071] mkdir("./315", 0777) = 0 ./strace-static-x86_64: Process 6975 attached [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6975 [pid 5071] <... openat resumed>) = 3 [pid 6975] set_robust_list(0x555583d53660, 24 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6975] <... set_robust_list resumed>) = 0 [pid 6975] chdir("./314" [pid 5072] <... ioctl resumed>) = 0 [pid 6975] <... chdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6975] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... ioctl resumed>) = 0 [pid 6975] <... prctl resumed>) = 0 [pid 6974] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 5072] close(3 [pid 6975] setpgid(0, 0 [pid 6974] close(3 [pid 5075] close(3 [pid 6975] <... setpgid resumed>) = 0 [pid 6974] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6974] close(4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6976 attached [pid 6975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6974] <... close resumed>) = 0 [pid 6976] set_robust_list(0x555583d53660, 24 [pid 6975] <... openat resumed>) = 3 [pid 6974] mkdir("./file1", 0777./strace-static-x86_64: Process 6977 attached [pid 6976] <... set_robust_list resumed>) = 0 [pid 6977] set_robust_list(0x555583d53660, 24 [pid 6976] chdir("./313" [pid 6974] <... mkdir resumed>) = 0 [pid 6975] write(3, "1000", 4 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6976 ./strace-static-x86_64: Process 6978 attached [pid 6977] <... set_robust_list resumed>) = 0 [pid 6976] <... chdir resumed>) = 0 [pid 6975] <... write resumed>) = 4 [pid 6974] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6977 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6978 [pid 6978] set_robust_list(0x555583d53660, 24 [pid 6977] chdir("./314" [pid 6976] prctl(PR_SET_PDEATHSIG, SIGKILL [ 242.910178][ T6974] loop5: detected capacity change from 0 to 1024 [pid 6975] close(3 [pid 6978] <... set_robust_list resumed>) = 0 [pid 6977] <... chdir resumed>) = 0 [pid 6976] <... prctl resumed>) = 0 [pid 6975] <... close resumed>) = 0 [pid 6978] chdir("./313" [pid 6977] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6976] setpgid(0, 0 [pid 6975] symlink("/dev/binderfs", "./binderfs" [pid 6977] <... prctl resumed>) = 0 [pid 6976] <... setpgid resumed>) = 0 [pid 6978] <... chdir resumed>) = 0 [pid 6977] setpgid(0, 0 [pid 6976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6975] <... symlink resumed>) = 0 [pid 6978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6977] <... setpgid resumed>) = 0 [pid 6978] <... prctl resumed>) = 0 [pid 6978] setpgid(0, 0 [pid 6977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6976] <... openat resumed>) = 3 [pid 6975] memfd_create("syzkaller", 0 [pid 6974] <... mount resumed>) = 0 [pid 6978] <... setpgid resumed>) = 0 [pid 6977] <... openat resumed>) = 3 [pid 6978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6977] write(3, "1000", 4 [pid 6976] write(3, "1000", 4 [pid 6975] <... memfd_create resumed>) = 3 [pid 6974] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6978] <... openat resumed>) = 3 [pid 6977] <... write resumed>) = 4 [pid 6976] <... write resumed>) = 4 [pid 6975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6974] <... openat resumed>) = 3 [pid 6977] close(3 [pid 6976] close(3 [pid 6978] write(3, "1000", 4 [pid 6977] <... close resumed>) = 0 [pid 6976] <... close resumed>) = 0 [pid 6977] symlink("/dev/binderfs", "./binderfs" [pid 6978] <... write resumed>) = 4 [pid 6977] <... symlink resumed>) = 0 [pid 6976] symlink("/dev/binderfs", "./binderfs" [pid 6975] <... mmap resumed>) = 0x7f943d000000 [pid 6974] chdir("./file1" [pid 5071] <... ioctl resumed>) = 0 [pid 6978] close(3 [pid 6977] memfd_create("syzkaller", 0 [pid 6976] <... symlink resumed>) = 0 [pid 6975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6974] <... chdir resumed>) = 0 [pid 6977] <... memfd_create resumed>) = 3 [pid 6974] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6978] <... close resumed>) = 0 [pid 6976] memfd_create("syzkaller", 0 [pid 6974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] close(3) = 0 [pid 6977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6974] truncate("./file1", 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6978] symlink("/dev/binderfs", "./binderfs" [pid 6976] <... memfd_create resumed>) = 3 [pid 6978] <... symlink resumed>) = 0 [pid 6977] <... mmap resumed>) = 0x7f943d000000 [pid 6976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6978] memfd_create("syzkaller", 0 [pid 6977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6976] <... mmap resumed>) = 0x7f943d000000 [pid 6974] <... truncate resumed>) = 0 [pid 6978] <... memfd_create resumed>) = 3 [pid 6974] memfd_create("syzkaller", 0) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6979 [pid 6978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6979 attached ) = 0x7f943d000000 [pid 6976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6975] <... write resumed>) = 524288 [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6979] set_robust_list(0x555583d53660, 24) = 0 [pid 6978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6977] <... write resumed>) = 524288 [pid 6974] <... mmap resumed>) = 0x7f943d000000 [pid 6979] chdir("./315") = 0 [pid 6979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6974] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6979] <... prctl resumed>) = 0 [pid 6978] <... write resumed>) = 524288 [pid 6977] munmap(0x7f943d000000, 138412032 [pid 6976] <... write resumed>) = 524288 [pid 6975] munmap(0x7f943d000000, 138412032 [pid 6979] setpgid(0, 0 [pid 6974] <... write resumed>) = 524288 [pid 6979] <... setpgid resumed>) = 0 [pid 6978] munmap(0x7f943d000000, 138412032 [pid 6977] <... munmap resumed>) = 0 [pid 6975] <... munmap resumed>) = 0 [pid 6979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6978] <... munmap resumed>) = 0 [pid 6976] munmap(0x7f943d000000, 138412032 [pid 6979] <... openat resumed>) = 3 [pid 6977] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6979] write(3, "1000", 4 [pid 6978] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6975] <... openat resumed>) = 4 [pid 6974] munmap(0x7f943d000000, 138412032 [pid 6979] <... write resumed>) = 4 [pid 6977] <... openat resumed>) = 4 [pid 6976] <... munmap resumed>) = 0 [pid 6975] ioctl(4, LOOP_SET_FD, 3 [pid 6974] <... munmap resumed>) = 0 [pid 6979] close(3 [pid 6977] ioctl(4, LOOP_SET_FD, 3 [pid 6976] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6979] <... close resumed>) = 0 [pid 6974] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6979] symlink("/dev/binderfs", "./binderfs" [pid 6978] <... openat resumed>) = 4 [pid 6974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6974] close(4 [pid 6979] <... symlink resumed>) = 0 [pid 6978] ioctl(4, LOOP_SET_FD, 3 [pid 6976] <... openat resumed>) = 4 [pid 6979] memfd_create("syzkaller", 0 [pid 6976] ioctl(4, LOOP_SET_FD, 3 [pid 6975] <... ioctl resumed>) = 0 [pid 6974] <... close resumed>) = 0 [pid 6975] close(3) = 0 [pid 6979] <... memfd_create resumed>) = 3 [pid 6975] close(4 [pid 6974] exit_group(0 [pid 6979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6975] <... close resumed>) = 0 [pid 6975] mkdir("./file1", 0777 [pid 6979] <... mmap resumed>) = 0x7f943d000000 [pid 6979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6975] <... mkdir resumed>) = 0 [pid 6974] <... exit_group resumed>) = ? [pid 6978] <... ioctl resumed>) = 0 [pid 6978] close(3) = 0 [pid 6978] close(4) = 0 [pid 6975] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6978] mkdir("./file1", 0777) = 0 [pid 6978] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6976] <... ioctl resumed>) = 0 [pid 6976] close(3) = 0 [pid 6974] +++ exited with 0 +++ [pid 6977] <... ioctl resumed>) = 0 [pid 6976] close(4 [pid 6977] close(3 [pid 6976] <... close resumed>) = 0 [pid 6975] <... mount resumed>) = 0 [pid 6977] <... close resumed>) = 0 [pid 6976] mkdir("./file1", 0777 [pid 6975] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6974, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6979] <... write resumed>) = 524288 [pid 6978] <... mount resumed>) = 0 [pid 6977] close(4 [pid 6976] <... mkdir resumed>) = 0 [pid 6977] <... close resumed>) = 0 [pid 6976] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6977] mkdir("./file1", 0777 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6977] <... mkdir resumed>) = 0 [pid 6978] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6975] <... openat resumed>) = 3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6978] <... openat resumed>) = 3 [pid 6977] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6975] chdir("./file1" [pid 6979] munmap(0x7f943d000000, 138412032 [pid 6978] chdir("./file1") = 0 [pid 6975] <... chdir resumed>) = 0 [pid 6978] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6979] <... munmap resumed>) = 0 [pid 6978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6976] <... mount resumed>) = 0 [pid 6975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 243.086744][ T6975] loop3: detected capacity change from 0 to 1024 [ 243.087879][ T6977] loop2: detected capacity change from 0 to 1024 [ 243.104508][ T6978] loop1: detected capacity change from 0 to 1024 [ 243.113718][ T6976] loop4: detected capacity change from 0 to 1024 [pid 6978] truncate("./file1", 0 [pid 6976] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6975] truncate("./file1", 0 [pid 5076] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6979] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6976] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 6975] <... truncate resumed>) = 0 [pid 6979] <... openat resumed>) = 4 [pid 6979] ioctl(4, LOOP_SET_FD, 3 [pid 6976] chdir("./file1" [pid 6975] memfd_create("syzkaller", 0 [pid 5076] newfstatat(3, "", [pid 6976] <... chdir resumed>) = 0 [pid 6975] <... memfd_create resumed>) = 4 [pid 6976] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6976] truncate("./file1", 0 [pid 6975] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(3, [pid 6978] <... truncate resumed>) = 0 [pid 6977] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6978] memfd_create("syzkaller", 0 [pid 5076] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6978] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6978] <... mmap resumed>) = 0x7f943d000000 [pid 6977] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6978] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6977] <... openat resumed>) = 3 [pid 6975] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6977] chdir("./file1") = 0 [pid 5076] unlink("./310/binderfs" [pid 6977] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6976] <... truncate resumed>) = 0 [pid 6977] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6976] memfd_create("syzkaller", 0 [pid 6977] truncate("./file1", 0 [pid 6976] <... memfd_create resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 6977] <... truncate resumed>) = 0 [pid 6976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6977] memfd_create("syzkaller", 0) = 4 [pid 6977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6977] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6978] <... write resumed>) = 524288 [pid 6979] <... ioctl resumed>) = 0 [pid 6976] <... mmap resumed>) = 0x7f943d000000 [pid 6979] close(3) = 0 [pid 6979] close(4) = 0 [pid 6979] mkdir("./file1", 0777) = 0 [pid 6979] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6976] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6979] <... mount resumed>) = 0 [pid 6975] <... write resumed>) = 524288 [pid 6979] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6979] chdir("./file1") = 0 [pid 6975] munmap(0x7f943d000000, 138412032 [ 243.171351][ T6979] loop0: detected capacity change from 0 to 1024 [pid 6979] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6979] truncate("./file1", 0 [pid 6975] <... munmap resumed>) = 0 [pid 6978] munmap(0x7f943d000000, 138412032 [pid 6975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6978] <... munmap resumed>) = 0 [pid 6975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6975] close(4 [pid 5076] <... umount2 resumed>) = 0 [pid 6979] <... truncate resumed>) = 0 [pid 6979] memfd_create("syzkaller", 0 [pid 6978] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6979] <... memfd_create resumed>) = 4 [pid 6978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6978] close(4 [pid 6979] <... mmap resumed>) = 0x7f943d000000 [pid 6977] <... write resumed>) = 524288 [pid 6976] <... write resumed>) = 524288 [pid 6975] <... close resumed>) = 0 [pid 5076] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6979] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6977] munmap(0x7f943d000000, 138412032 [pid 5076] newfstatat(AT_FDCWD, "./310/file1", [pid 6976] munmap(0x7f943d000000, 138412032 [pid 6977] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6975] exit_group(0 [pid 6977] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6977] close(4 [pid 6976] <... munmap resumed>) = 0 [pid 6975] <... exit_group resumed>) = ? [pid 5076] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6978] <... close resumed>) = 0 [pid 6977] <... close resumed>) = 0 [pid 6976] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6979] <... write resumed>) = 524288 [pid 6978] exit_group(0 [pid 6976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6978] <... exit_group resumed>) = ? [pid 6976] close(4 [pid 6975] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 4 [pid 6978] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6978, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6977] exit_group(0 [pid 5072] <... openat resumed>) = 3 [pid 6977] <... exit_group resumed>) = ? [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6976] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 5076] newfstatat(4, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6975, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5072] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5074] <... restart_syscall resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./313/binderfs", [pid 6976] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6976] <... exit_group resumed>) = ? [pid 5076] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6979] munmap(0x7f943d000000, 138412032 [pid 6977] +++ exited with 0 +++ [pid 5074] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6979] <... munmap resumed>) = 0 [pid 5076] rmdir("./310/file1" [pid 5074] <... openat resumed>) = 3 [pid 5072] unlink("./313/binderfs" [pid 5074] newfstatat(3, "", [pid 6979] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6977, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 6979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6979] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... restart_syscall resumed>) = 0 [pid 6979] <... close resumed>) = 0 [pid 6976] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./314/binderfs", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6976, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] unlink("./314/binderfs" [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5075] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./314/binderfs", [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 6979] exit_group(0 [pid 5076] rmdir("./310" [pid 5075] <... openat resumed>) = 3 [pid 5073] unlink("./314/binderfs" [pid 5072] <... umount2 resumed>) = 0 [pid 6979] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6979] +++ exited with 0 +++ [pid 5076] mkdir("./311", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6979, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] newfstatat(AT_FDCWD, "./313/file1", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./313/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./314/file1", [pid 5072] newfstatat(4, "", [pid 5071] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(3, "", [pid 5076] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5072] getdents64(4, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] unlink("./313/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5075] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./314/file1", [pid 5072] close(4 [pid 5074] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] rmdir("./313/file1" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./313" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5072] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./315/binderfs", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 5075] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] mkdir("./314", 0777 [pid 5071] unlink("./315/binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 5072] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./313/file1", [pid 5073] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./314/file1" [pid 5075] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5073] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, [pid 5073] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./314" [pid 5075] getdents64(4, [pid 5074] close(4 [pid 5071] <... unlink resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./314/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./313/file1") = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] mkdir("./315", 0777 [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5073] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] <... close resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] rmdir("./313" [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] close(3) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3) = 0 ./strace-static-x86_64: Process 6980 attached [pid 5075] mkdir("./314", 0777 [pid 6980] set_robust_list(0x555583d53660, 24 [pid 5076] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6980 [pid 5072] <... ioctl resumed>) = 0 [pid 5074] rmdir("./314" [pid 5071] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6980] <... set_robust_list resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6980] chdir("./315" [pid 5075] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6980] <... chdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./315/file1", [pid 6980] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] mkdir("./315", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(3 [pid 5071] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6981 [pid 6980] <... prctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6982 attached [pid 6980] setpgid(0, 0 [pid 5071] <... openat resumed>) = 4 [pid 6982] set_robust_list(0x555583d53660, 24 [pid 5071] newfstatat(4, "", ./strace-static-x86_64: Process 6981 attached [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6982 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6981] set_robust_list(0x555583d53660, 24 [pid 5071] getdents64(4, [pid 6980] <... setpgid resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6981] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6981] chdir("./314" [pid 6980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(4, [pid 6982] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6982] chdir("./311" [pid 5071] close(4 [pid 6980] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6982] <... chdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6981] <... chdir resumed>) = 0 [pid 6980] write(3, "1000", 4 [pid 5071] rmdir("./315/file1" [pid 6982] <... prctl resumed>) = 0 [pid 6981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6980] <... write resumed>) = 4 [pid 6980] close(3) = 0 [pid 6980] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 6982] setpgid(0, 0 [pid 6981] <... prctl resumed>) = 0 [pid 6980] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 6982] <... setpgid resumed>) = 0 [pid 6981] setpgid(0, 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6981] <... setpgid resumed>) = 0 [pid 5071] close(3 [pid 6982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6980] memfd_create("syzkaller", 0 [pid 5071] <... close resumed>) = 0 [pid 6981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6980] <... memfd_create resumed>) = 3 [pid 5071] rmdir("./315" [pid 6980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6982] <... openat resumed>) = 3 [pid 6981] <... openat resumed>) = 3 [pid 6980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 6982] write(3, "1000", 4 [pid 6981] write(3, "1000", 4 [pid 6982] <... write resumed>) = 4 [pid 6981] <... write resumed>) = 4 [pid 5071] mkdir("./316", 0777 [pid 6982] close(3 [pid 6981] close(3 [pid 6982] <... close resumed>) = 0 [pid 6981] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6982] symlink("/dev/binderfs", "./binderfs" [pid 6981] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6982] <... symlink resumed>) = 0 [pid 6981] memfd_create("syzkaller", 0 [pid 6980] <... write resumed>) = 524288 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6982] memfd_create("syzkaller", 0 [pid 6981] <... memfd_create resumed>) = 3 [pid 6980] munmap(0x7f943d000000, 138412032 [pid 6982] <... memfd_create resumed>) = 3 [pid 6981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6980] <... munmap resumed>) = 0 [pid 6982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6981] <... mmap resumed>) = 0x7f943d000000 [pid 5075] close(3 [pid 6981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6982] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... close resumed>) = 0 [pid 6980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6982] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6981] <... write resumed>) = 524288 [pid 6980] <... openat resumed>) = 4 [pid 6980] ioctl(4, LOOP_SET_FD, 3 [pid 5074] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6983 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6983 attached [pid 6982] <... write resumed>) = 524288 [pid 6981] munmap(0x7f943d000000, 138412032 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6984 [pid 6983] set_robust_list(0x555583d53660, 24) = 0 [pid 5071] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6984 attached [pid 6983] chdir("./314" [pid 5071] close(3 [pid 6983] <... chdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6984] set_robust_list(0x555583d53660, 24 [pid 6983] <... prctl resumed>) = 0 [pid 6982] munmap(0x7f943d000000, 138412032 [pid 6981] <... munmap resumed>) = 0 [pid 6980] <... ioctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6983] setpgid(0, 0 [pid 6981] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6980] close(3 [pid 6983] <... setpgid resumed>) = 0 [pid 6984] <... set_robust_list resumed>) = 0 [pid 6984] chdir("./315") = 0 [pid 6984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6984] setpgid(0, 0 [pid 6983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6981] <... openat resumed>) = 4 [pid 6980] <... close resumed>) = 0 [pid 6984] <... setpgid resumed>) = 0 [pid 6984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6983] <... openat resumed>) = 3 [pid 6981] ioctl(4, LOOP_SET_FD, 3 [pid 6980] close(4 [pid 6983] write(3, "1000", 4 [pid 6980] <... close resumed>) = 0 ./strace-static-x86_64: Process 6985 attached [pid 6984] <... openat resumed>) = 3 [pid 6985] set_robust_list(0x555583d53660, 24 [pid 6984] write(3, "1000", 4 [pid 6985] <... set_robust_list resumed>) = 0 [pid 6984] <... write resumed>) = 4 [pid 6985] chdir("./316" [pid 6984] close(3 [pid 6985] <... chdir resumed>) = 0 [pid 6985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6985] setpgid(0, 0) = 0 [pid 6985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6984] <... close resumed>) = 0 [pid 6984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6983] <... write resumed>) = 4 [pid 6982] <... munmap resumed>) = 0 [pid 6980] mkdir("./file1", 0777 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6985 [pid 6985] <... openat resumed>) = 3 [pid 6984] memfd_create("syzkaller", 0 [pid 6981] <... ioctl resumed>) = 0 [pid 6985] write(3, "1000", 4 [pid 6984] <... memfd_create resumed>) = 3 [pid 6983] close(3 [pid 6981] close(3 [pid 6982] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6980] <... mkdir resumed>) = 0 [pid 6985] <... write resumed>) = 4 [pid 6984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6983] <... close resumed>) = 0 [pid 6982] <... openat resumed>) = 4 [pid 6981] <... close resumed>) = 0 [pid 6980] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6985] close(3 [pid 6984] <... mmap resumed>) = 0x7f943d000000 [pid 6983] symlink("/dev/binderfs", "./binderfs" [pid 6982] ioctl(4, LOOP_SET_FD, 3 [pid 6981] close(4 [pid 6985] <... close resumed>) = 0 [pid 6981] <... close resumed>) = 0 [pid 6983] <... symlink resumed>) = 0 [pid 6985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6985] memfd_create("syzkaller", 0) = 3 [pid 6985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6981] mkdir("./file1", 0777 [pid 6985] <... mmap resumed>) = 0x7f943d000000 [pid 6983] memfd_create("syzkaller", 0) = 3 [pid 6981] <... mkdir resumed>) = 0 [ 243.509497][ T6980] loop2: detected capacity change from 0 to 1024 [ 243.538536][ T6981] loop1: detected capacity change from 0 to 1024 [ 243.553399][ T6982] loop5: detected capacity change from 0 to 1024 [pid 6983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6981] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6984] <... write resumed>) = 524288 [pid 6983] <... mmap resumed>) = 0x7f943d000000 [pid 6985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6980] <... mount resumed>) = 0 [pid 6984] munmap(0x7f943d000000, 138412032 [pid 6983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6980] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6984] <... munmap resumed>) = 0 [pid 6980] <... openat resumed>) = 3 [pid 6980] chdir("./file1") = 0 [pid 6982] <... ioctl resumed>) = 0 [pid 6980] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6984] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6980] truncate("./file1", 0 [pid 6984] <... openat resumed>) = 4 [pid 6984] ioctl(4, LOOP_SET_FD, 3 [pid 6983] <... write resumed>) = 524288 [pid 6982] close(3) = 0 [pid 6982] close(4) = 0 [pid 6982] mkdir("./file1", 0777 [pid 6985] munmap(0x7f943d000000, 138412032 [pid 6982] <... mkdir resumed>) = 0 [pid 6982] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6980] <... truncate resumed>) = 0 [pid 6985] <... munmap resumed>) = 0 [pid 6980] memfd_create("syzkaller", 0) = 4 [pid 6980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6980] <... mmap resumed>) = 0x7f943d000000 [pid 6985] ioctl(4, LOOP_SET_FD, 3 [pid 6983] munmap(0x7f943d000000, 138412032 [pid 6982] <... mount resumed>) = 0 [pid 6981] <... mount resumed>) = 0 [pid 6980] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6982] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6984] <... ioctl resumed>) = 0 [pid 6982] <... openat resumed>) = 3 [pid 6984] close(3) = 0 [pid 6984] close(4) = 0 [pid 6984] mkdir("./file1", 0777) = 0 [pid 6982] chdir("./file1" [pid 6983] <... munmap resumed>) = 0 [pid 6982] <... chdir resumed>) = 0 [pid 6981] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6982] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6981] <... openat resumed>) = 3 [pid 6982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6981] chdir("./file1" [pid 6984] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6981] <... chdir resumed>) = 0 [pid 6983] <... openat resumed>) = 4 [pid 6982] truncate("./file1", 0 [pid 6981] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6983] ioctl(4, LOOP_SET_FD, 3 [pid 6981] truncate("./file1", 0 [pid 6985] <... ioctl resumed>) = 0 [pid 6984] <... mount resumed>) = 0 [pid 6985] close(3 [pid 6984] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6985] <... close resumed>) = 0 [pid 6984] <... openat resumed>) = 3 [pid 6985] close(4 [pid 6984] chdir("./file1" [pid 6985] <... close resumed>) = 0 [pid 6984] <... chdir resumed>) = 0 [pid 6985] mkdir("./file1", 0777 [pid 6984] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6985] <... mkdir resumed>) = 0 [pid 6984] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6984] truncate("./file1", 0) = 0 [pid 6985] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6984] memfd_create("syzkaller", 0) = 4 [pid 6982] <... truncate resumed>) = 0 [pid 6981] <... truncate resumed>) = 0 [pid 6984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6982] memfd_create("syzkaller", 0 [pid 6981] memfd_create("syzkaller", 0 [pid 6985] <... mount resumed>) = 0 [pid 6984] <... mmap resumed>) = 0x7f943d000000 [pid 6983] <... ioctl resumed>) = 0 [pid 6982] <... memfd_create resumed>) = 4 [pid 6981] <... memfd_create resumed>) = 4 [pid 6985] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6984] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6983] close(3 [pid 6982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6985] <... openat resumed>) = 3 [pid 6983] <... close resumed>) = 0 [pid 6980] <... write resumed>) = 524288 [pid 6983] close(4 [pid 6985] chdir("./file1" [pid 6981] <... mmap resumed>) = 0x7f943d000000 [pid 6983] <... close resumed>) = 0 [pid 6985] <... chdir resumed>) = 0 [pid 6983] mkdir("./file1", 0777 [pid 6982] <... mmap resumed>) = 0x7f943d000000 [pid 6985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6983] <... mkdir resumed>) = 0 [pid 6985] truncate("./file1", 0 [pid 6983] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6980] munmap(0x7f943d000000, 138412032) = 0 [pid 6985] <... truncate resumed>) = 0 [pid 6981] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6985] memfd_create("syzkaller", 0) = 4 [pid 6980] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 243.598125][ T6984] loop3: detected capacity change from 0 to 1024 [ 243.617816][ T6985] loop0: detected capacity change from 0 to 1024 [ 243.636135][ T6983] loop4: detected capacity change from 0 to 1024 [pid 6985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6984] <... write resumed>) = 524288 [pid 6980] close(4 [pid 6982] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6985] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6984] munmap(0x7f943d000000, 138412032 [pid 6982] <... write resumed>) = 524288 [pid 6984] <... munmap resumed>) = 0 [pid 6981] <... write resumed>) = 524288 [pid 6984] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6983] <... mount resumed>) = 0 [pid 6980] <... close resumed>) = 0 [pid 6980] exit_group(0 [pid 6984] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6985] <... write resumed>) = 524288 [pid 6984] close(4 [pid 6983] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6982] munmap(0x7f943d000000, 138412032 [pid 6981] munmap(0x7f943d000000, 138412032 [pid 6980] <... exit_group resumed>) = ? [pid 6983] <... openat resumed>) = 3 [pid 6982] <... munmap resumed>) = 0 [pid 6981] <... munmap resumed>) = 0 [pid 6980] +++ exited with 0 +++ [pid 6983] chdir("./file1" [pid 6981] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6983] <... chdir resumed>) = 0 [pid 6982] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6981] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6980, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6981] close(4 [pid 5073] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6982] close(4 [pid 6981] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6985] munmap(0x7f943d000000, 138412032 [pid 6984] <... close resumed>) = 0 [pid 6983] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6982] <... close resumed>) = 0 [pid 6981] exit_group(0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6983] truncate("./file1", 0 [pid 6984] exit_group(0 [pid 5073] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6985] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./315/binderfs", [pid 6984] <... exit_group resumed>) = ? [pid 6981] <... exit_group resumed>) = ? [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6985] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] unlink("./315/binderfs" [pid 6985] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6983] <... truncate resumed>) = 0 [pid 6981] +++ exited with 0 +++ [pid 5073] <... unlink resumed>) = 0 [pid 6985] close(4 [pid 6983] memfd_create("syzkaller", 0 [pid 6982] exit_group(0 [pid 5073] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6983] <... memfd_create resumed>) = 4 [pid 6982] <... exit_group resumed>) = ? [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6981, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6984] +++ exited with 0 +++ [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6982] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6984, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... openat resumed>) = 3 [pid 6983] <... mmap resumed>) = 0x7f943d000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6982, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(3, "", [pid 6983] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5072] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./314/binderfs", [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] unlink("./314/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... unlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./315/binderfs", [pid 5072] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6985] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] unlink("./315/binderfs") = 0 [pid 5074] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 6985] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = 0 [pid 5076] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./311/binderfs", [pid 6985] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./311/binderfs") = 0 [pid 5076] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5072] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./314/file1", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6985] +++ exited with 0 +++ [pid 6983] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./315/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6985, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] newfstatat(AT_FDCWD, "./311/file1", [pid 5072] <... openat resumed>) = 4 [pid 6983] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(4, "", [pid 6983] <... munmap resumed>) = 0 [pid 5076] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./315/file1", [pid 5073] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6983] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] getdents64(4, [pid 6983] close(4 [pid 5076] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... openat resumed>) = 4 [pid 5074] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5072] getdents64(4, [pid 5071] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 5072] close(4 [pid 5071] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5072] rmdir("./314/file1" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5073] close(4 [pid 5071] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5074] newfstatat(4, "", [pid 5071] getdents64(3, [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] rmdir("./315/file1" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] close(4 [pid 5074] getdents64(4, [pid 5071] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./311/file1" [pid 5074] getdents64(4, [pid 5071] newfstatat(AT_FDCWD, "./316/binderfs", [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(3, [pid 5074] close(4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] unlink("./316/binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5076] close(3 [pid 5074] rmdir("./315/file1" [pid 5073] getdents64(3, [pid 5072] close(3 [pid 5076] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6983] <... close resumed>) = 0 [pid 5076] rmdir("./311" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6983] exit_group(0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] close(3 [pid 5072] rmdir("./314" [pid 6983] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 6983] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./315" [pid 5072] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 5076] mkdir("./312", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6983, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] mkdir("./315", 0777 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] mkdir("./316", 0777 [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5074] rmdir("./315" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5075] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5074] mkdir("./316", 0777 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(3, "", [pid 5076] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5076] ioctl(3, LOOP_CLR_FD) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] close(3) = 0 [pid 5071] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] newfstatat(AT_FDCWD, "./316/file1", [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... ioctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./314/binderfs", [pid 5074] <... openat resumed>) = 3 [pid 5072] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] unlink("./314/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5071] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6986 [pid 5074] <... close resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6987 [pid 5071] newfstatat(4, "", ./strace-static-x86_64: Process 6987 attached [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6988 attached [pid 6987] set_robust_list(0x555583d53660, 24 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] getdents64(4, ./strace-static-x86_64: Process 6986 attached [pid 6987] <... set_robust_list resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6988 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6988] set_robust_list(0x555583d53660, 24 [pid 6986] set_robust_list(0x555583d53660, 24 [pid 6987] chdir("./315" [pid 5071] getdents64(4, [pid 6988] <... set_robust_list resumed>) = 0 [pid 6987] <... chdir resumed>) = 0 [pid 6986] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6988] chdir("./316" [pid 6986] chdir("./312" [pid 6987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] close(4 [pid 6987] <... prctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5075] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./316/file1" [pid 6988] <... chdir resumed>) = 0 [pid 6987] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 6986] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./314/file1", [pid 5071] getdents64(3, [pid 6986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6986] <... prctl resumed>) = 0 [pid 5075] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 6986] setpgid(0, 0 [pid 6987] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 6988] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6986] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./316" [pid 6988] <... prctl resumed>) = 0 [pid 6986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6988] setpgid(0, 0 [pid 6987] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 6986] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5071] mkdir("./317", 0777 [pid 6988] <... setpgid resumed>) = 0 [pid 6987] write(3, "1000", 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6987] <... write resumed>) = 4 [pid 6986] write(3, "1000", 4 [pid 5075] getdents64(4, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6987] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6987] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 6986] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6986] close(3 [pid 6987] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(4 [pid 6988] <... openat resumed>) = 3 [pid 6986] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6988] write(3, "1000", 4 [pid 6986] symlink("/dev/binderfs", "./binderfs" [pid 6987] <... symlink resumed>) = 0 [pid 5075] rmdir("./314/file1" [pid 6988] <... write resumed>) = 4 [pid 6986] <... symlink resumed>) = 0 [pid 6988] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 6988] <... close resumed>) = 0 [pid 6987] memfd_create("syzkaller", 0 [pid 6988] symlink("/dev/binderfs", "./binderfs" [pid 6986] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6986] <... memfd_create resumed>) = 3 [pid 5075] getdents64(3, [pid 6988] <... symlink resumed>) = 0 [pid 6986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6986] <... mmap resumed>) = 0x7f943d000000 [pid 6987] <... memfd_create resumed>) = 3 [pid 5075] close(3 [pid 5073] close(3 [pid 6988] memfd_create("syzkaller", 0 [pid 6986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] rmdir("./314") = 0 [pid 5075] mkdir("./315", 0777 [pid 6987] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6988] <... memfd_create resumed>) = 3 [pid 6987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6989 attached ) = 0x7f943d000000 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6989 [pid 6989] set_robust_list(0x555583d53660, 24) = 0 [pid 6989] chdir("./316") = 0 [pid 6988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6986] <... write resumed>) = 524288 [pid 6989] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6988] <... write resumed>) = 524288 [pid 6987] <... write resumed>) = 524288 [pid 6989] <... prctl resumed>) = 0 [pid 6989] setpgid(0, 0 [pid 6988] munmap(0x7f943d000000, 138412032 [pid 6989] <... setpgid resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6986] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] close(3 [pid 6986] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 6989] <... openat resumed>) = 3 [pid 6988] <... munmap resumed>) = 0 [pid 6986] <... openat resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6986] ioctl(4, LOOP_SET_FD, 3 [pid 6989] write(3, "1000", 4 [pid 6988] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 6989] <... write resumed>) = 4 [pid 6989] close(3 [pid 6988] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6990 [pid 5075] <... close resumed>) = 0 [pid 6989] <... close resumed>) = 0 [pid 6989] symlink("/dev/binderfs", "./binderfs" [pid 6988] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6990 attached [pid 6987] munmap(0x7f943d000000, 138412032 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6990] set_robust_list(0x555583d53660, 24 [pid 6987] <... munmap resumed>) = 0 [pid 6987] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6990] <... set_robust_list resumed>) = 0 [pid 6987] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6991 ./strace-static-x86_64: Process 6991 attached [pid 6990] chdir("./317" [pid 6989] <... symlink resumed>) = 0 [pid 6991] set_robust_list(0x555583d53660, 24 [pid 6990] <... chdir resumed>) = 0 [pid 6989] memfd_create("syzkaller", 0 [pid 6991] <... set_robust_list resumed>) = 0 [pid 6990] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6991] chdir("./315" [pid 6990] <... prctl resumed>) = 0 [pid 6991] <... chdir resumed>) = 0 [pid 6991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6990] setpgid(0, 0 [pid 6986] <... ioctl resumed>) = 0 [pid 6990] <... setpgid resumed>) = 0 [pid 6986] close(3 [pid 6991] setpgid(0, 0 [pid 6990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6989] <... memfd_create resumed>) = 3 [pid 6986] <... close resumed>) = 0 [pid 6991] <... setpgid resumed>) = 0 [pid 6990] <... openat resumed>) = 3 [pid 6989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6988] <... ioctl resumed>) = 0 [pid 6986] close(4 [pid 6991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6989] <... mmap resumed>) = 0x7f943d000000 [pid 6988] close(3 [pid 6986] <... close resumed>) = 0 [pid 6990] write(3, "1000", 4 [pid 6988] <... close resumed>) = 0 [pid 6986] mkdir("./file1", 0777 [pid 6991] <... openat resumed>) = 3 [pid 6990] <... write resumed>) = 4 [pid 6988] close(4 [pid 6986] <... mkdir resumed>) = 0 [pid 6991] write(3, "1000", 4 [pid 6990] close(3 [pid 6991] <... write resumed>) = 4 [pid 6990] <... close resumed>) = 0 [pid 6988] <... close resumed>) = 0 [pid 6991] close(3 [pid 6990] symlink("/dev/binderfs", "./binderfs" [pid 6988] mkdir("./file1", 0777 [pid 6991] <... close resumed>) = 0 [pid 6990] <... symlink resumed>) = 0 [pid 6989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6986] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6991] symlink("/dev/binderfs", "./binderfs" [pid 6990] memfd_create("syzkaller", 0 [pid 6988] <... mkdir resumed>) = 0 [pid 6990] <... memfd_create resumed>) = 3 [pid 6991] <... symlink resumed>) = 0 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6988] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6991] memfd_create("syzkaller", 0 [pid 6990] <... mmap resumed>) = 0x7f943d000000 [pid 6986] <... mount resumed>) = 0 [pid 6987] <... ioctl resumed>) = 0 [pid 6991] <... memfd_create resumed>) = 3 [pid 6990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6987] close(3 [pid 6991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6986] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6987] <... close resumed>) = 0 [pid 6986] <... openat resumed>) = 3 [pid 6987] close(4) = 0 [pid 6986] chdir("./file1" [pid 6987] mkdir("./file1", 0777 [pid 6986] <... chdir resumed>) = 0 [pid 6987] <... mkdir resumed>) = 0 [pid 6986] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 243.990558][ T6986] loop5: detected capacity change from 0 to 1024 [ 244.006625][ T6988] loop3: detected capacity change from 0 to 1024 [ 244.011961][ T6987] loop1: detected capacity change from 0 to 1024 [pid 6986] truncate("./file1", 0 [pid 6989] <... write resumed>) = 524288 [pid 6986] <... truncate resumed>) = 0 [pid 6987] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6989] munmap(0x7f943d000000, 138412032 [pid 6988] <... mount resumed>) = 0 [pid 6986] memfd_create("syzkaller", 0 [pid 6989] <... munmap resumed>) = 0 [pid 6988] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6986] <... memfd_create resumed>) = 4 [pid 6991] <... write resumed>) = 524288 [pid 6990] <... write resumed>) = 524288 [pid 6986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6988] <... openat resumed>) = 3 [pid 6988] chdir("./file1" [pid 6989] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6988] <... chdir resumed>) = 0 [pid 6987] <... mount resumed>) = 0 [pid 6989] <... openat resumed>) = 4 [pid 6988] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6986] <... mmap resumed>) = 0x7f943d000000 [pid 6988] truncate("./file1", 0 [pid 6987] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6989] ioctl(4, LOOP_SET_FD, 3 [pid 6987] <... openat resumed>) = 3 [pid 6987] chdir("./file1") = 0 [pid 6987] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6987] truncate("./file1", 0 [pid 6986] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6990] munmap(0x7f943d000000, 138412032 [pid 6987] <... truncate resumed>) = 0 [pid 6987] memfd_create("syzkaller", 0) = 4 [pid 6987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6991] munmap(0x7f943d000000, 138412032 [pid 6989] <... ioctl resumed>) = 0 [pid 6988] <... truncate resumed>) = 0 [pid 6987] <... mmap resumed>) = 0x7f943d000000 [pid 6991] <... munmap resumed>) = 0 [pid 6988] memfd_create("syzkaller", 0 [pid 6990] <... munmap resumed>) = 0 [pid 6988] <... memfd_create resumed>) = 4 [pid 6991] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6989] close(3 [pid 6988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6989] <... close resumed>) = 0 [pid 6991] <... openat resumed>) = 4 [pid 6990] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6989] close(4 [pid 6988] <... mmap resumed>) = 0x7f943d000000 [pid 6986] <... write resumed>) = 524288 [pid 6991] ioctl(4, LOOP_SET_FD, 3 [pid 6989] <... close resumed>) = 0 [pid 6991] <... ioctl resumed>) = 0 [pid 6989] mkdir("./file1", 0777 [pid 6988] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6989] <... mkdir resumed>) = 0 [pid 6991] close(3 [pid 6989] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6988] <... write resumed>) = 524288 [pid 6986] munmap(0x7f943d000000, 138412032 [pid 6991] <... close resumed>) = 0 [pid 6990] <... openat resumed>) = 4 [pid 6986] <... munmap resumed>) = 0 [pid 6991] close(4) = 0 [pid 6987] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6991] mkdir("./file1", 0777 [ 244.111855][ T6989] loop2: detected capacity change from 0 to 1024 [ 244.144493][ T6991] loop4: detected capacity change from 0 to 1024 [pid 6990] ioctl(4, LOOP_SET_FD, 3 [pid 6986] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6988] munmap(0x7f943d000000, 138412032 [pid 6991] <... mkdir resumed>) = 0 [pid 6988] <... munmap resumed>) = 0 [pid 6986] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6987] <... write resumed>) = 524288 [pid 6991] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6988] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6986] close(4 [pid 6988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6988] close(4 [pid 6986] <... close resumed>) = 0 [pid 6987] munmap(0x7f943d000000, 138412032 [pid 6990] <... ioctl resumed>) = 0 [pid 6987] <... munmap resumed>) = 0 [pid 6990] close(3) = 0 [pid 6990] close(4) = 0 [pid 6990] mkdir("./file1", 0777) = 0 [pid 6986] exit_group(0 [pid 6987] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6988] <... close resumed>) = 0 [pid 6986] <... exit_group resumed>) = ? [pid 6987] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6990] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6989] <... mount resumed>) = 0 [pid 6986] +++ exited with 0 +++ [pid 6987] close(4 [pid 6988] exit_group(0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6986, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6988] <... exit_group resumed>) = ? [pid 5076] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6990] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6989] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6990] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 244.175783][ T6990] loop0: detected capacity change from 0 to 1024 [pid 5076] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6990] <... openat resumed>) = 3 [pid 6989] <... openat resumed>) = 3 [pid 6988] +++ exited with 0 +++ [pid 6987] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6990] chdir("./file1" [pid 6989] chdir("./file1" [pid 6987] exit_group(0 [pid 5076] newfstatat(3, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6988, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6991] <... mount resumed>) = 0 [pid 6991] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6989] <... chdir resumed>) = 0 [pid 6987] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6991] <... openat resumed>) = 3 [pid 6989] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6987] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6991] chdir("./file1" [pid 6989] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6987, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6991] <... chdir resumed>) = 0 [pid 6989] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6991] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6990] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./312/binderfs", [pid 6991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6990] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6989] <... truncate resumed>) = 0 [pid 5074] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6991] truncate("./file1", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./312/binderfs" [pid 5072] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", [pid 6990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6989] memfd_create("syzkaller", 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6989] <... memfd_create resumed>) = 4 [pid 5076] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 6990] truncate("./file1", 0 [pid 6989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6989] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(3, "", [pid 5072] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6991] <... truncate resumed>) = 0 [pid 6990] <... truncate resumed>) = 0 [pid 5076] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./315/binderfs", [pid 6991] memfd_create("syzkaller", 0 [pid 6990] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./312/file1", [pid 6991] <... memfd_create resumed>) = 4 [pid 6990] <... memfd_create resumed>) = 4 [pid 6989] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6989] <... write resumed>) = 524288 [pid 5076] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] unlink("./315/binderfs" [pid 6991] <... mmap resumed>) = 0x7f943d000000 [pid 6990] <... mmap resumed>) = 0x7f943d000000 [pid 6989] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] <... unlink resumed>) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./312/file1") = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./312") = 0 [pid 5076] mkdir("./313", 0777 [pid 6991] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6990] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6989] <... munmap resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./316/binderfs", [pid 5072] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6989] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6989] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] unlink("./316/binderfs" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6991] <... write resumed>) = 524288 [pid 6990] <... write resumed>) = 524288 [pid 6989] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6991] munmap(0x7f943d000000, 138412032 [pid 6990] munmap(0x7f943d000000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 5074] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6991] <... munmap resumed>) = 0 [pid 6990] <... munmap resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6990] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6991] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6989] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6989] exit_group(0 [pid 5072] newfstatat(AT_FDCWD, "./315/file1", [pid 6991] close(4 [pid 6990] close(4 [pid 6989] <... exit_group resumed>) = ? [pid 5074] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6991] <... close resumed>) = 0 [pid 6990] <... close resumed>) = 0 [pid 6989] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./316/file1", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6989, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6991] exit_group(0 [pid 6990] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 6990] <... exit_group resumed>) = ? [pid 5072] rmdir("./315/file1" [pid 6991] <... exit_group resumed>) = ? [pid 5074] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6990] +++ exited with 0 +++ [pid 5073] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6990, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 6991] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... restart_syscall resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6991, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] rmdir("./315" [pid 5075] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5072] mkdir("./316", 0777 [pid 5075] newfstatat(3, "", [pid 5074] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] newfstatat(3, "", [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./317/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./315/binderfs", [pid 5074] getdents64(4, [pid 5072] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(AT_FDCWD, "./316/binderfs", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] unlink("./317/binderfs" [pid 5075] unlink("./315/binderfs" [pid 5074] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] unlink("./316/binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 5075] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] rmdir("./316/file1" [pid 5073] <... unlink resumed>) = 0 [pid 5071] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3) = 0 [pid 5074] rmdir("./316") = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./316/file1", ./strace-static-x86_64: Process 6992 attached [pid 5075] <... umount2 resumed>) = 0 [pid 5074] mkdir("./317", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6992] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6992 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6992] <... set_robust_list resumed>) = 0 [pid 5075] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6992] chdir("./313" [pid 5071] newfstatat(AT_FDCWD, "./317/file1", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6992] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./315/file1", [pid 5073] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 6992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6992] <... prctl resumed>) = 0 [pid 5075] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5071] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6992] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 5072] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 6992] <... setpgid resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] newfstatat(4, "", [pid 5073] rmdir("./316/file1" [pid 5071] getdents64(4, ./strace-static-x86_64: Process 6993 attached [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6993] set_robust_list(0x555583d53660, 24 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] getdents64(4, [pid 6993] <... set_robust_list resumed>) = 0 [pid 6992] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6993] chdir("./316" [pid 6992] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6993 [pid 5071] close(4 [pid 6993] <... chdir resumed>) = 0 [pid 6992] <... write resumed>) = 4 [pid 5075] close(4 [pid 5073] close(3 [pid 5071] <... close resumed>) = 0 [pid 6993] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6992] close(3 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] rmdir("./317/file1" [pid 6993] <... prctl resumed>) = 0 [pid 6992] <... close resumed>) = 0 [pid 5075] rmdir("./315/file1" [pid 5073] rmdir("./316" [pid 5071] <... rmdir resumed>) = 0 [pid 6993] setpgid(0, 0 [pid 6992] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 6993] <... setpgid resumed>) = 0 [pid 6992] <... symlink resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6992] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5071] close(3 [pid 6992] <... memfd_create resumed>) = 3 [pid 6992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6992] <... mmap resumed>) = 0x7f943d000000 [pid 5075] rmdir("./315" [pid 6993] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] mkdir("./317", 0777 [pid 5071] rmdir("./317" [pid 6993] write(3, "1000", 4 [pid 5071] <... rmdir resumed>) = 0 [pid 6993] <... write resumed>) = 4 [pid 6992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] mkdir("./316", 0777 [pid 5074] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 6993] close(3 [pid 6992] <... write resumed>) = 524288 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] mkdir("./318", 0777 [pid 6993] <... close resumed>) = 0 [pid 6993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 6993] memfd_create("syzkaller", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6993] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6993] <... mmap resumed>) = 0x7f943d000000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6994 ./strace-static-x86_64: Process 6994 attached [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6992] munmap(0x7f943d000000, 138412032) = 0 [pid 6992] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6994] set_robust_list(0x555583d53660, 24 [pid 6993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6992] ioctl(4, LOOP_SET_FD, 3 [pid 6994] <... set_robust_list resumed>) = 0 [pid 6994] chdir("./317") = 0 [pid 6993] <... write resumed>) = 524288 [pid 6992] <... ioctl resumed>) = 0 [pid 6993] munmap(0x7f943d000000, 138412032 [pid 6992] close(3 [pid 6994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6993] <... munmap resumed>) = 0 [pid 6992] <... close resumed>) = 0 [pid 6994] setpgid(0, 0) = 0 [pid 6994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6993] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6992] close(4 [pid 6994] <... openat resumed>) = 3 [pid 6993] <... openat resumed>) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 6994] write(3, "1000", 4) = 4 [pid 6994] close(3) = 0 [pid 6994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6994] memfd_create("syzkaller", 0 [pid 6993] ioctl(4, LOOP_SET_FD, 3 [pid 6992] <... close resumed>) = 0 [pid 6994] <... memfd_create resumed>) = 3 [pid 6994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6992] mkdir("./file1", 0777 [pid 5075] <... ioctl resumed>) = 0 [pid 6992] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6995 attached [pid 6994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6993] <... ioctl resumed>) = 0 [pid 6992] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] close(3 [pid 5071] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6995] set_robust_list(0x555583d53660, 24 [pid 6993] close(3 [pid 6992] <... mount resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6995 [pid 5071] close(3 [pid 6995] <... set_robust_list resumed>) = 0 [pid 6993] <... close resumed>) = 0 [pid 6992] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 6995] chdir("./317" [pid 6993] close(4 [pid 6992] <... openat resumed>) = 3 [pid 6995] <... chdir resumed>) = 0 [pid 6993] <... close resumed>) = 0 [pid 6992] chdir("./file1" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6992] <... chdir resumed>) = 0 [pid 6995] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6993] mkdir("./file1", 0777 [pid 6995] <... prctl resumed>) = 0 [pid 6993] <... mkdir resumed>) = 0 [pid 6992] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6995] setpgid(0, 0 [pid 6992] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6995] <... setpgid resumed>) = 0 [pid 6992] truncate("./file1", 0./strace-static-x86_64: Process 6996 attached [pid 6995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 244.518570][ T6992] loop5: detected capacity change from 0 to 1024 [ 244.544795][ T6993] loop1: detected capacity change from 0 to 1024 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6997 ./strace-static-x86_64: Process 6997 attached [pid 6996] set_robust_list(0x555583d53660, 24 [pid 6995] write(3, "1000", 4 [pid 6994] <... write resumed>) = 524288 [pid 6993] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6992] <... truncate resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6996 [pid 6997] set_robust_list(0x555583d53660, 24 [pid 6996] <... set_robust_list resumed>) = 0 [pid 6995] <... write resumed>) = 4 [pid 6992] memfd_create("syzkaller", 0 [pid 6997] <... set_robust_list resumed>) = 0 [pid 6997] chdir("./318" [pid 6996] chdir("./316" [pid 6995] close(3 [pid 6992] <... memfd_create resumed>) = 4 [pid 6997] <... chdir resumed>) = 0 [pid 6996] <... chdir resumed>) = 0 [pid 6995] <... close resumed>) = 0 [pid 6992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6996] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6995] symlink("/dev/binderfs", "./binderfs" [pid 6997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6996] <... prctl resumed>) = 0 [pid 6995] <... symlink resumed>) = 0 [pid 6992] <... mmap resumed>) = 0x7f943d000000 [pid 6995] memfd_create("syzkaller", 0 [pid 6994] munmap(0x7f943d000000, 138412032 [pid 6993] <... mount resumed>) = 0 [pid 6995] <... memfd_create resumed>) = 3 [pid 6994] <... munmap resumed>) = 0 [pid 6993] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6994] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6993] <... openat resumed>) = 3 [pid 6995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6994] <... openat resumed>) = 4 [pid 6993] chdir("./file1" [pid 6997] <... prctl resumed>) = 0 [pid 6996] setpgid(0, 0 [pid 6997] setpgid(0, 0 [pid 6996] <... setpgid resumed>) = 0 [pid 6994] ioctl(4, LOOP_SET_FD, 3 [pid 6993] <... chdir resumed>) = 0 [pid 6997] <... setpgid resumed>) = 0 [pid 6996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6993] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6992] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6996] <... openat resumed>) = 3 [pid 6993] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6997] <... openat resumed>) = 3 [pid 6996] write(3, "1000", 4 [pid 6993] truncate("./file1", 0 [pid 6996] <... write resumed>) = 4 [pid 6997] write(3, "1000", 4 [pid 6996] close(3 [pid 6997] <... write resumed>) = 4 [pid 6996] <... close resumed>) = 0 [pid 6997] close(3 [pid 6996] symlink("/dev/binderfs", "./binderfs" [pid 6997] <... close resumed>) = 0 [pid 6997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6996] <... symlink resumed>) = 0 [pid 6995] <... write resumed>) = 524288 [pid 6993] <... truncate resumed>) = 0 [pid 6992] <... write resumed>) = 524288 [pid 6997] memfd_create("syzkaller", 0 [pid 6996] memfd_create("syzkaller", 0 [pid 6993] memfd_create("syzkaller", 0 [pid 6997] <... memfd_create resumed>) = 3 [pid 6997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6996] <... memfd_create resumed>) = 3 [pid 6997] <... mmap resumed>) = 0x7f943d000000 [pid 6996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6993] <... memfd_create resumed>) = 4 [pid 6996] <... mmap resumed>) = 0x7f943d000000 [pid 6993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6992] munmap(0x7f943d000000, 138412032 [pid 6993] <... mmap resumed>) = 0x7f943d000000 [pid 6993] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6992] <... munmap resumed>) = 0 [pid 6994] <... ioctl resumed>) = 0 [pid 6994] close(3) = 0 [pid 6994] close(4) = 0 [pid 6994] mkdir("./file1", 0777) = 0 [pid 6994] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6992] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6995] munmap(0x7f943d000000, 138412032) = 0 [pid 6992] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 244.630408][ T6994] loop3: detected capacity change from 0 to 1024 [pid 6995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6993] <... write resumed>) = 524288 [pid 6995] ioctl(4, LOOP_SET_FD, 3 [pid 6992] close(4 [pid 6993] munmap(0x7f943d000000, 138412032) = 0 [pid 6992] <... close resumed>) = 0 [pid 6993] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6993] close(4) = 0 [pid 6994] <... mount resumed>) = 0 [pid 6995] <... ioctl resumed>) = 0 [pid 6994] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6992] exit_group(0 [pid 6994] chdir("./file1" [pid 6992] <... exit_group resumed>) = ? [pid 6995] close(3) = 0 [pid 6994] <... chdir resumed>) = 0 [pid 6995] close(4 [pid 6994] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6993] exit_group(0 [pid 6995] <... close resumed>) = 0 [pid 6994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6995] mkdir("./file1", 0777 [pid 6994] truncate("./file1", 0 [pid 6993] <... exit_group resumed>) = ? [pid 6996] <... write resumed>) = 524288 [pid 6995] <... mkdir resumed>) = 0 [pid 6997] <... write resumed>) = 524288 [pid 6996] munmap(0x7f943d000000, 138412032 [pid 6992] +++ exited with 0 +++ [pid 6997] munmap(0x7f943d000000, 138412032 [pid 6996] <... munmap resumed>) = 0 [pid 6995] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6992, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6997] <... munmap resumed>) = 0 [pid 6996] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6994] <... truncate resumed>) = 0 [pid 6997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6996] <... openat resumed>) = 4 [pid 6997] <... openat resumed>) = 4 [pid 6996] ioctl(4, LOOP_SET_FD, 3 [pid 6995] <... mount resumed>) = 0 [pid 6994] memfd_create("syzkaller", 0 [pid 6993] +++ exited with 0 +++ [pid 6997] ioctl(4, LOOP_SET_FD, 3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6993, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 244.698246][ T6995] loop2: detected capacity change from 0 to 1024 [pid 6995] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6994] <... memfd_create resumed>) = 4 [pid 6995] <... openat resumed>) = 3 [pid 6994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6995] chdir("./file1" [pid 6994] <... mmap resumed>) = 0x7f943d000000 [pid 6995] <... chdir resumed>) = 0 [pid 5076] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6994] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6995] truncate("./file1", 0 [pid 5076] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6995] <... truncate resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6995] memfd_create("syzkaller", 0 [pid 5076] newfstatat(3, "", [pid 6995] <... memfd_create resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(3, [pid 6995] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6997] <... ioctl resumed>) = 0 [pid 6996] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 6997] close(3 [pid 5072] newfstatat(3, "", [pid 6997] <... close resumed>) = 0 [pid 6996] close(3 [pid 6997] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6996] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 6996] close(4) = 0 [pid 5076] newfstatat(AT_FDCWD, "./313/binderfs", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6997] <... close resumed>) = 0 [pid 6996] mkdir("./file1", 0777 [pid 6995] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6997] mkdir("./file1", 0777 [pid 6996] <... mkdir resumed>) = 0 [pid 6994] <... write resumed>) = 524288 [pid 5076] unlink("./313/binderfs" [pid 5072] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6997] <... mkdir resumed>) = 0 [pid 6996] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6994] munmap(0x7f943d000000, 138412032 [pid 5076] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6997] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6994] <... munmap resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./316/binderfs") = 0 [ 244.746053][ T6997] loop0: detected capacity change from 0 to 1024 [ 244.754082][ T6996] loop4: detected capacity change from 0 to 1024 [pid 5072] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6995] <... write resumed>) = 524288 [pid 6997] <... mount resumed>) = 0 [pid 6994] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6997] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6994] close(4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6995] munmap(0x7f943d000000, 138412032 [pid 6994] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./316/file1", [pid 6997] <... openat resumed>) = 3 [pid 6995] <... munmap resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./313/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6997] chdir("./file1" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6997] <... chdir resumed>) = 0 [pid 6997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6994] exit_group(0 [pid 5076] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6997] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6997] <... truncate resumed>) = 0 [pid 6996] <... mount resumed>) = 0 [pid 6995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6994] <... exit_group resumed>) = ? [pid 5076] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... openat resumed>) = 4 [pid 6997] memfd_create("syzkaller", 0 [pid 6995] close(4 [pid 6997] <... memfd_create resumed>) = 4 [pid 6996] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6994] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 6997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6996] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6997] <... mmap resumed>) = 0x7f943d000000 [pid 6996] chdir("./file1" [pid 5076] newfstatat(4, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6994, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] getdents64(4, [pid 6995] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 6996] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6996] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 6996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6995] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] close(4 [pid 6996] truncate("./file1", 0 [pid 5076] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./316/file1" [pid 6995] <... exit_group resumed>) = ? [pid 6997] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5074] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6995] +++ exited with 0 +++ [pid 5076] close(4 [pid 5074] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6995, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5076] rmdir("./313/file1" [pid 5074] newfstatat(3, "", [pid 5072] rmdir("./316" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 6997] <... write resumed>) = 524288 [pid 6996] <... truncate resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] mkdir("./317", 0777 [pid 6997] munmap(0x7f943d000000, 138412032 [pid 6996] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5072] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6997] <... munmap resumed>) = 0 [pid 6996] <... memfd_create resumed>) = 4 [pid 5076] close(3 [pid 5074] newfstatat(AT_FDCWD, "./317/binderfs", [pid 5073] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 6997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6996] <... mmap resumed>) = 0x7f943d000000 [pid 5076] rmdir("./313" [pid 5074] unlink("./317/binderfs" [pid 5073] newfstatat(AT_FDCWD, "./317/binderfs", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6997] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5073] unlink("./317/binderfs") = 0 [pid 5074] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6996] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6997] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6997] exit_group(0) = ? [pid 6996] <... write resumed>) = 524288 [pid 5076] mkdir("./314", 0777 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6996] munmap(0x7f943d000000, 138412032 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./317/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6997] +++ exited with 0 +++ [pid 5073] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6996] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 6996] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6997, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 6996] close(4 [pid 5074] newfstatat(AT_FDCWD, "./317/file1", [pid 5071] <... restart_syscall resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6996] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 5074] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5072] close(3 [pid 5071] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(3, "", [pid 5074] getdents64(4, [pid 5073] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6998 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6998 attached [pid 6996] exit_group(0 [pid 5074] getdents64(4, [pid 5073] rmdir("./317/file1" [pid 5071] newfstatat(AT_FDCWD, "./318/binderfs", [pid 6996] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6998] set_robust_list(0x555583d53660, 24 [pid 6996] +++ exited with 0 +++ [pid 5074] close(4 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6998] <... set_robust_list resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6996, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5071] unlink("./318/binderfs" [pid 5074] rmdir("./317/file1" [pid 6998] chdir("./317" [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./317" [pid 6998] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] close(3 [pid 5071] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] newfstatat(3, "", [pid 5073] <... close resumed>) = 0 [pid 6998] <... prctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6998] setpgid(0, 0 [pid 5075] getdents64(3, [pid 5074] mkdir("./318", 0777 [pid 5073] rmdir("./317" [pid 6998] <... setpgid resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6998] <... openat resumed>) = 3 [pid 5075] unlink("./316/binderfs" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] mkdir("./318", 0777 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 6998] write(3, "1000", 4) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6998] close(3 [pid 5075] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6998] <... close resumed>) = 0 [pid 6998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6998] memfd_create("syzkaller", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6998] <... memfd_create resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./318/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./316/file1", [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = 0 [pid 5071] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6999 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6999 attached [pid 6999] set_robust_list(0x555583d53660, 24) = 0 [pid 6999] chdir("./314" [pid 5075] getdents64(4, [pid 5071] <... openat resumed>) = 4 [pid 6999] <... chdir resumed>) = 0 [pid 6998] <... write resumed>) = 524288 [pid 6999] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6998] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] close(3 [pid 5073] close(3 [pid 5071] newfstatat(4, "", [pid 6999] <... prctl resumed>) = 0 [pid 6998] <... munmap resumed>) = 0 [pid 6999] setpgid(0, 0 [pid 6998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6999] <... setpgid resumed>) = 0 [pid 6998] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 6999] <... openat resumed>) = 3 [pid 6998] ioctl(4, LOOP_SET_FD, 3 [pid 6999] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] getdents64(4, [pid 6999] <... write resumed>) = 4 [pid 6999] close(3) = 0 [pid 6999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6999] memfd_create("syzkaller", 0) = 3 [pid 6999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7001 [pid 5071] getdents64(4, [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7000 ./strace-static-x86_64: Process 7001 attached ./strace-static-x86_64: Process 7000 attached [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7001] set_robust_list(0x555583d53660, 24 [pid 5071] <... close resumed>) = 0 [pid 7000] set_robust_list(0x555583d53660, 24 [pid 5071] rmdir("./318/file1" [pid 7001] <... set_robust_list resumed>) = 0 [pid 7000] <... set_robust_list resumed>) = 0 [pid 7001] chdir("./318") = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5075] rmdir("./316/file1" [pid 7000] chdir("./318" [pid 7001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7000] <... chdir resumed>) = 0 [pid 7001] <... prctl resumed>) = 0 [pid 7000] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7001] setpgid(0, 0 [pid 5071] close(3 [pid 7000] <... prctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./318" [pid 7000] setpgid(0, 0 [pid 7001] <... setpgid resumed>) = 0 [pid 6998] <... ioctl resumed>) = 0 [pid 5075] getdents64(3, [pid 7000] <... setpgid resumed>) = 0 [pid 7001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6998] close(3 [pid 7000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7001] <... openat resumed>) = 3 [pid 6998] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5071] mkdir("./319", 0777 [pid 7000] <... openat resumed>) = 3 [pid 7001] write(3, "1000", 4 [pid 6999] <... write resumed>) = 524288 [pid 6998] close(4 [pid 7000] write(3, "1000", 4 [pid 7001] <... write resumed>) = 4 [pid 7001] close(3 [pid 6998] <... close resumed>) = 0 [pid 7000] <... write resumed>) = 4 [pid 7001] <... close resumed>) = 0 [pid 6998] mkdir("./file1", 0777 [pid 7000] close(3 [pid 7001] symlink("/dev/binderfs", "./binderfs" [pid 7000] <... close resumed>) = 0 [pid 6998] <... mkdir resumed>) = 0 [pid 7000] symlink("/dev/binderfs", "./binderfs" [pid 7001] <... symlink resumed>) = 0 [pid 7000] <... symlink resumed>) = 0 [pid 7001] memfd_create("syzkaller", 0 [pid 7000] memfd_create("syzkaller", 0) = 3 [pid 7001] <... memfd_create resumed>) = 3 [pid 6998] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7000] <... mmap resumed>) = 0x7f943d000000 [pid 7001] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... close resumed>) = 0 [pid 7001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6999] munmap(0x7f943d000000, 138412032 [ 245.059854][ T6998] loop1: detected capacity change from 0 to 1024 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6999] <... munmap resumed>) = 0 [pid 5075] rmdir("./316" [pid 5071] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5075] mkdir("./317", 0777 [pid 6999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7001] <... write resumed>) = 524288 [pid 6999] <... openat resumed>) = 4 [pid 6998] <... mount resumed>) = 0 [pid 7001] munmap(0x7f943d000000, 138412032 [pid 6999] ioctl(4, LOOP_SET_FD, 3 [pid 6998] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 7001] <... munmap resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7000] <... write resumed>) = 524288 [pid 6999] <... ioctl resumed>) = 0 [pid 6998] <... openat resumed>) = 3 [pid 6998] chdir("./file1" [pid 7000] munmap(0x7f943d000000, 138412032 [pid 7001] <... openat resumed>) = 4 [pid 6999] close(3) = 0 [pid 6998] <... chdir resumed>) = 0 [pid 6999] close(4 [pid 6998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7001] ioctl(4, LOOP_SET_FD, 3 [pid 6999] <... close resumed>) = 0 [pid 6998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6999] mkdir("./file1", 0777 [pid 6998] truncate("./file1", 0 [pid 6999] <... mkdir resumed>) = 0 [pid 6998] <... truncate resumed>) = 0 [pid 7000] <... munmap resumed>) = 0 [pid 6999] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6998] memfd_create("syzkaller", 0) = 4 [pid 7000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7000] <... openat resumed>) = 4 [pid 6999] <... mount resumed>) = 0 [pid 6998] <... mmap resumed>) = 0x7f943d000000 [pid 6999] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6998] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6999] chdir("./file1" [pid 5071] <... ioctl resumed>) = 0 [pid 7000] ioctl(4, LOOP_SET_FD, 3 [pid 6999] <... chdir resumed>) = 0 [pid 6999] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6999] truncate("./file1", 0) = 0 [pid 6999] memfd_create("syzkaller", 0 [pid 5071] close(3 [pid 7001] <... ioctl resumed>) = 0 [pid 6999] <... memfd_create resumed>) = 4 [pid 6999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [ 245.138215][ T6999] loop5: detected capacity change from 0 to 1024 [ 245.154320][ T7001] loop2: detected capacity change from 0 to 1024 [pid 6999] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7000] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7001] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7001] <... close resumed>) = 0 [pid 7001] close(4 [pid 6998] <... write resumed>) = 524288 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7002 [pid 7001] <... close resumed>) = 0 [pid 7001] mkdir("./file1", 0777 [pid 5075] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7002 attached [pid 7001] <... mkdir resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7002] set_robust_list(0x555583d53660, 24 [pid 6998] munmap(0x7f943d000000, 138412032 [pid 7002] <... set_robust_list resumed>) = 0 [pid 7002] chdir("./319" [pid 6998] <... munmap resumed>) = 0 [pid 7002] <... chdir resumed>) = 0 [pid 7001] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7002] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 7003 attached ) = 0 [pid 7000] close(3 [pid 6998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7003 [pid 7003] set_robust_list(0x555583d53660, 24 [pid 7002] setpgid(0, 0 [pid 7000] <... close resumed>) = 0 [pid 6998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7003] <... set_robust_list resumed>) = 0 [pid 7002] <... setpgid resumed>) = 0 [pid 7000] close(4 [pid 6998] close(4 [pid 7003] chdir("./317" [pid 7002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7000] <... close resumed>) = 0 [pid 6999] <... write resumed>) = 524288 [pid 6998] <... close resumed>) = 0 [pid 7002] <... openat resumed>) = 3 [pid 7000] mkdir("./file1", 0777 [pid 6999] munmap(0x7f943d000000, 138412032 [pid 7003] <... chdir resumed>) = 0 [pid 7000] <... mkdir resumed>) = 0 [pid 7003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7002] write(3, "1000", 4 [pid 7000] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6999] <... munmap resumed>) = 0 [pid 7003] <... prctl resumed>) = 0 [pid 7003] setpgid(0, 0 [pid 7002] <... write resumed>) = 4 [pid 7000] <... mount resumed>) = 0 [pid 7001] <... mount resumed>) = 0 [pid 6999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7003] <... setpgid resumed>) = 0 [pid 7002] close(3 [pid 7001] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7002] <... close resumed>) = 0 [pid 7000] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7003] <... openat resumed>) = 3 [pid 7002] symlink("/dev/binderfs", "./binderfs" [pid 7000] <... openat resumed>) = 3 [pid 7001] <... openat resumed>) = 3 [pid 6999] close(4 [pid 6998] exit_group(0 [pid 7003] write(3, "1000", 4 [pid 7002] <... symlink resumed>) = 0 [ 245.184132][ T7000] loop3: detected capacity change from 0 to 1024 [pid 7000] chdir("./file1" [pid 7001] chdir("./file1" [pid 6999] <... close resumed>) = 0 [pid 7003] <... write resumed>) = 4 [pid 7002] memfd_create("syzkaller", 0 [pid 7000] <... chdir resumed>) = 0 [pid 7001] <... chdir resumed>) = 0 [pid 6998] <... exit_group resumed>) = ? [pid 7003] close(3 [pid 7001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7003] <... close resumed>) = 0 [pid 7003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7002] <... memfd_create resumed>) = 3 [pid 7000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7001] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6998] +++ exited with 0 +++ [pid 7003] memfd_create("syzkaller", 0 [pid 7002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7002] <... mmap resumed>) = 0x7f943d000000 [pid 7000] truncate("./file1", 0 [pid 7001] truncate("./file1", 0 [pid 7002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7000] <... truncate resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6998, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7003] <... memfd_create resumed>) = 3 [pid 7000] memfd_create("syzkaller", 0 [pid 6999] exit_group(0 [pid 7000] <... memfd_create resumed>) = 4 [pid 6999] <... exit_group resumed>) = ? [pid 7003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6999] +++ exited with 0 +++ [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7003] <... mmap resumed>) = 0x7f943d000000 [pid 7000] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6999, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7002] <... write resumed>) = 524288 [pid 7001] <... truncate resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7001] memfd_create("syzkaller", 0 [pid 5072] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7001] <... memfd_create resumed>) = 4 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7003] <... write resumed>) = 524288 [pid 7002] munmap(0x7f943d000000, 138412032 [pid 7001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... openat resumed>) = 3 [pid 7002] <... munmap resumed>) = 0 [pid 7001] <... mmap resumed>) = 0x7f943d000000 [pid 5072] newfstatat(3, "", [pid 5076] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7002] ioctl(4, LOOP_SET_FD, 3 [pid 7001] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7003] munmap(0x7f943d000000, 138412032 [pid 7000] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 5076] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5072] newfstatat(AT_FDCWD, "./317/binderfs", [pid 7000] munmap(0x7f943d000000, 138412032 [pid 7003] <... munmap resumed>) = 0 [pid 7000] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./317/binderfs" [pid 5076] getdents64(3, [pid 7000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... unlink resumed>) = 0 [pid 7003] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] <... openat resumed>) = 4 [pid 7002] <... ioctl resumed>) = 0 [pid 7000] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7003] ioctl(4, LOOP_SET_FD, 3 [pid 7002] close(3) = 0 [pid 7002] close(4 [pid 5072] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7002] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./314/binderfs", [pid 7002] mkdir("./file1", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7002] <... mkdir resumed>) = 0 [pid 5076] unlink("./314/binderfs" [pid 7002] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7000] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7000] exit_group(0 [pid 5076] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] <... exit_group resumed>) = ? [pid 7000] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7000, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7003] <... ioctl resumed>) = 0 [pid 7001] <... write resumed>) = 524288 [pid 5074] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] close(3 [pid 7002] <... mount resumed>) = 0 [pid 7001] munmap(0x7f943d000000, 138412032 [pid 5072] <... umount2 resumed>) = 0 [pid 7003] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7001] <... munmap resumed>) = 0 [pid 7002] <... openat resumed>) = 3 [pid 7002] chdir("./file1") = 0 [pid 7002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7002] truncate("./file1", 0 [pid 7001] close(4 [pid 7003] close(4 [pid 5074] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] <... close resumed>) = 0 [ 245.295583][ T7002] loop0: detected capacity change from 0 to 1024 [ 245.320770][ T7003] loop4: detected capacity change from 0 to 1024 [pid 5074] <... openat resumed>) = 3 [pid 7003] mkdir("./file1", 0777 [pid 7002] <... truncate resumed>) = 0 [pid 7001] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] memfd_create("syzkaller", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7003] <... mkdir resumed>) = 0 [pid 7002] <... memfd_create resumed>) = 4 [pid 5076] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./317/file1", [pid 7002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7002] <... mmap resumed>) = 0x7f943d000000 [pid 5076] newfstatat(AT_FDCWD, "./314/file1", [pid 5074] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7002] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7001] exit_group(0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./318/binderfs", [pid 7001] <... exit_group resumed>) = ? [pid 5076] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7001] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./318/binderfs" [pid 5072] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7001, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] newfstatat(4, "", [pid 5074] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5073] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7002] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(3, "", [pid 7003] <... mount resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 7003] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] getdents64(4, [pid 5076] getdents64(4, [pid 5073] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7003] <... openat resumed>) = 3 [pid 7003] chdir("./file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7003] <... chdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./318/binderfs", [pid 7003] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(4 [pid 7003] truncate("./file1", 0 [pid 5076] getdents64(4, [pid 5073] unlink("./318/binderfs" [pid 5072] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] rmdir("./317/file1" [pid 7003] <... truncate resumed>) = 0 [pid 5076] close(4 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 7003] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 7002] munmap(0x7f943d000000, 138412032 [pid 5074] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 7003] <... memfd_create resumed>) = 4 [pid 5076] rmdir("./314/file1" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7002] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./318/file1", [pid 5072] close(3 [pid 7003] <... mmap resumed>) = 0x7f943d000000 [pid 7002] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 7003] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7002] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5072] rmdir("./317" [pid 7002] close(4 [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] rmdir("./314") = 0 [pid 5072] mkdir("./318", 0777 [pid 5076] mkdir("./315", 0777 [pid 5072] <... mkdir resumed>) = 0 [pid 7002] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7003] <... write resumed>) = 524288 [pid 7002] exit_group(0 [pid 5074] getdents64(4, [pid 5073] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] munmap(0x7f943d000000, 138412032 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./318/file1", [pid 7002] <... exit_group resumed>) = ? [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7003] <... munmap resumed>) = 0 [pid 7002] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7002, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7003] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] rmdir("./318/file1" [pid 5073] <... openat resumed>) = 4 [pid 7003] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7003] close(4 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5071] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5071] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5071] newfstatat(3, "", [pid 5074] rmdir("./318" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] close(4 [pid 7003] <... close resumed>) = 0 [pid 5074] mkdir("./319", 0777 [pid 5073] <... close resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] getdents64(3, [pid 5074] <... mkdir resumed>) = 0 [pid 5073] rmdir("./318/file1" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 5071] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(AT_FDCWD, "./319/binderfs", [pid 7003] exit_group(0 [pid 5076] <... ioctl resumed>) = 0 [pid 7003] <... exit_group resumed>) = ? [pid 5073] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./319/binderfs" [pid 7003] +++ exited with 0 +++ [pid 5073] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5073] rmdir("./318" [pid 5071] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7003, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... rmdir resumed>) = 0 [pid 5072] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3./strace-static-x86_64: Process 7004 attached [pid 5073] mkdir("./319", 0777 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7004 [pid 7004] set_robust_list(0x555583d53660, 24 [pid 5076] <... close resumed>) = 0 [pid 5071] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] <... set_robust_list resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] chdir("./318" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./319/file1", [pid 5075] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7004] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(3, "", [pid 7004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] <... prctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7004] setpgid(0, 0 [pid 5071] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7004] <... setpgid resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 7004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] getdents64(3, [pid 5071] newfstatat(4, "", ./strace-static-x86_64: Process 7005 attached [pid 7004] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7005 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7004] write(3, "1000", 4 [pid 5075] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 7004] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(AT_FDCWD, "./317/binderfs", [pid 7005] set_robust_list(0x555583d53660, 24 [pid 7004] close(3 [pid 5071] getdents64(4, [pid 7004] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7004] symlink("/dev/binderfs", "./binderfs" [pid 5071] close(4 [pid 7005] <... set_robust_list resumed>) = 0 [pid 7004] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 7005] chdir("./315" [pid 5075] unlink("./317/binderfs" [pid 7005] <... chdir resumed>) = 0 [pid 7004] memfd_create("syzkaller", 0 [pid 5071] rmdir("./319/file1" [pid 7005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... unlink resumed>) = 0 [pid 7005] <... prctl resumed>) = 0 [pid 5075] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 7005] setpgid(0, 0 [pid 7004] <... memfd_create resumed>) = 3 [pid 7004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] getdents64(3, [pid 7005] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3) = 0 [pid 5071] rmdir("./319") = 0 [pid 7005] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 5075] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7005] write(3, "1000", 4 [pid 7004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] mkdir("./320", 0777 [pid 7005] <... write resumed>) = 4 [pid 7004] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(3 [pid 7005] close(3./strace-static-x86_64: Process 7006 attached ) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7005] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7006 [pid 5073] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./317/file1", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7005] <... symlink resumed>) = 0 [pid 7006] set_robust_list(0x555583d53660, 24 [pid 7005] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7007 [pid 7006] <... set_robust_list resumed>) = 0 [pid 7005] <... memfd_create resumed>) = 3 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7006] chdir("./319" [pid 7005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7006] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7007 attached [pid 7006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7005] <... mmap resumed>) = 0x7f943d000000 [pid 5075] getdents64(4, [pid 7007] set_robust_list(0x555583d53660, 24 [pid 7006] <... prctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7007] <... set_robust_list resumed>) = 0 [pid 5075] getdents64(4, [pid 7007] chdir("./319" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7006] setpgid(0, 0 [pid 7005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(4 [pid 7007] <... chdir resumed>) = 0 [pid 7006] <... setpgid resumed>) = 0 [pid 7004] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 7007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7007] <... prctl resumed>) = 0 [pid 7006] <... openat resumed>) = 3 [pid 7004] <... munmap resumed>) = 0 [pid 7007] setpgid(0, 0 [pid 7006] write(3, "1000", 4 [pid 7007] <... setpgid resumed>) = 0 [pid 7006] <... write resumed>) = 4 [pid 7007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7006] close(3 [pid 7004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] rmdir("./317/file1" [pid 7006] <... close resumed>) = 0 [pid 7006] symlink("/dev/binderfs", "./binderfs" [pid 7007] <... openat resumed>) = 3 [pid 7004] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 7005] <... write resumed>) = 524288 [pid 7004] ioctl(4, LOOP_SET_FD, 3 [pid 7006] <... symlink resumed>) = 0 [pid 7005] munmap(0x7f943d000000, 138412032 [pid 5071] <... ioctl resumed>) = 0 [pid 7007] write(3, "1000", 4 [pid 5075] getdents64(3, [pid 7006] memfd_create("syzkaller", 0 [pid 7007] <... write resumed>) = 4 [pid 7006] <... memfd_create resumed>) = 3 [pid 7005] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 7007] close(3 [pid 7006] <... mmap resumed>) = 0x7f943d000000 [pid 7005] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 7007] <... close resumed>) = 0 [pid 5075] rmdir("./317" [pid 7007] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 7007] <... symlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7008 ./strace-static-x86_64: Process 7008 attached [pid 7007] memfd_create("syzkaller", 0 [pid 5075] mkdir("./318", 0777 [pid 7005] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... mkdir resumed>) = 0 [pid 7007] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7007] <... mmap resumed>) = 0x7f943d000000 [pid 7008] set_robust_list(0x555583d53660, 24) = 0 [pid 7007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7008] chdir("./320" [pid 7004] <... ioctl resumed>) = 0 [pid 7004] close(3) = 0 [pid 7004] close(4) = 0 [pid 7004] mkdir("./file1", 0777) = 0 [pid 7004] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7008] <... chdir resumed>) = 0 [pid 7006] <... write resumed>) = 524288 [pid 7008] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7008] setpgid(0, 0) = 0 [pid 7008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7008] write(3, "1000", 4 [pid 7007] <... write resumed>) = 524288 [pid 7005] <... ioctl resumed>) = 0 [pid 7008] <... write resumed>) = 4 [pid 7008] close(3 [pid 7005] close(3 [pid 7008] <... close resumed>) = 0 [pid 7006] munmap(0x7f943d000000, 138412032 [pid 7005] <... close resumed>) = 0 [pid 7008] symlink("/dev/binderfs", "./binderfs" [pid 7005] close(4 [pid 7008] <... symlink resumed>) = 0 [pid 7006] <... munmap resumed>) = 0 [pid 7005] <... close resumed>) = 0 [pid 7004] <... mount resumed>) = 0 [pid 7005] mkdir("./file1", 0777 [pid 7004] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7008] memfd_create("syzkaller", 0 [pid 7004] <... openat resumed>) = 3 [pid 7004] chdir("./file1" [pid 7008] <... memfd_create resumed>) = 3 [ 245.625433][ T7004] loop1: detected capacity change from 0 to 1024 [ 245.641077][ T7005] loop5: detected capacity change from 0 to 1024 [pid 7006] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7005] <... mkdir resumed>) = 0 [pid 7004] <... chdir resumed>) = 0 [pid 7008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7007] munmap(0x7f943d000000, 138412032 [pid 7006] <... openat resumed>) = 4 [pid 7005] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7008] <... mmap resumed>) = 0x7f943d000000 [pid 7006] ioctl(4, LOOP_SET_FD, 3 [pid 7008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7007] <... munmap resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 7004] truncate("./file1", 0 [pid 7007] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7007] ioctl(4, LOOP_SET_FD, 3 [pid 7004] <... truncate resumed>) = 0 [pid 7004] memfd_create("syzkaller", 0 [pid 5075] close(3) = 0 [pid 7004] <... memfd_create resumed>) = 4 [pid 7004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7008] <... write resumed>) = 524288 [pid 7005] <... mount resumed>) = 0 [pid 7004] <... mmap resumed>) = 0x7f943d000000 [pid 7005] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7005] chdir("./file1") = 0 [pid 7005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7005] truncate("./file1", 0 [pid 7006] <... ioctl resumed>) = 0 [pid 7006] close(3) = 0 [pid 7006] close(4) = 0 [pid 7006] mkdir("./file1", 0777) = 0 [pid 7008] munmap(0x7f943d000000, 138412032 [pid 7004] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7006] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7007] <... ioctl resumed>) = 0 [pid 7008] <... munmap resumed>) = 0 [ 245.691477][ T7006] loop3: detected capacity change from 0 to 1024 [ 245.708090][ T7007] loop2: detected capacity change from 0 to 1024 [pid 7007] close(3./strace-static-x86_64: Process 7009 attached [pid 7008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7007] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7009 [pid 7009] set_robust_list(0x555583d53660, 24 [pid 7008] <... openat resumed>) = 4 [pid 7007] close(4 [pid 7005] <... truncate resumed>) = 0 [pid 7009] <... set_robust_list resumed>) = 0 [pid 7008] ioctl(4, LOOP_SET_FD, 3 [pid 7007] <... close resumed>) = 0 [pid 7005] memfd_create("syzkaller", 0 [pid 7009] chdir("./318") = 0 [pid 7007] mkdir("./file1", 0777 [pid 7009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7005] <... memfd_create resumed>) = 4 [pid 7009] <... prctl resumed>) = 0 [pid 7005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7005] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7009] setpgid(0, 0 [pid 7007] <... mkdir resumed>) = 0 [pid 7009] <... setpgid resumed>) = 0 [pid 7009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7009] write(3, "1000", 4) = 4 [pid 7009] close(3) = 0 [pid 7007] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7009] symlink("/dev/binderfs", "./binderfs" [pid 7006] <... mount resumed>) = 0 [pid 7009] <... symlink resumed>) = 0 [pid 7009] memfd_create("syzkaller", 0) = 3 [pid 7009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7006] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7009] <... mmap resumed>) = 0x7f943d000000 [pid 7008] <... ioctl resumed>) = 0 [pid 7006] <... openat resumed>) = 3 [pid 7009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7008] close(3 [pid 7007] <... mount resumed>) = 0 [pid 7006] chdir("./file1" [pid 7004] <... write resumed>) = 524288 [pid 7008] <... close resumed>) = 0 [pid 7007] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7006] <... chdir resumed>) = 0 [pid 7005] <... write resumed>) = 524288 [pid 7004] munmap(0x7f943d000000, 138412032 [pid 7008] close(4 [pid 7007] <... openat resumed>) = 3 [pid 7006] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7008] <... close resumed>) = 0 [pid 7007] chdir("./file1" [pid 7006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7007] <... chdir resumed>) = 0 [pid 7006] truncate("./file1", 0 [pid 7007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7008] mkdir("./file1", 0777 [pid 7007] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7004] <... munmap resumed>) = 0 [pid 7008] <... mkdir resumed>) = 0 [pid 7007] truncate("./file1", 0 [pid 7008] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [ 245.733680][ T7008] loop0: detected capacity change from 0 to 1024 [pid 7004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7009] <... write resumed>) = 524288 [pid 7006] <... truncate resumed>) = 0 [pid 7004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7004] close(4 [pid 7007] <... truncate resumed>) = 0 [pid 7006] memfd_create("syzkaller", 0 [pid 7005] munmap(0x7f943d000000, 138412032 [pid 7006] <... memfd_create resumed>) = 4 [pid 7005] <... munmap resumed>) = 0 [pid 7007] memfd_create("syzkaller", 0 [pid 7006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7007] <... memfd_create resumed>) = 4 [pid 7006] <... mmap resumed>) = 0x7f943d000000 [pid 7005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7005] close(4 [pid 7007] <... mmap resumed>) = 0x7f943d000000 [pid 7005] <... close resumed>) = 0 [pid 7008] <... mount resumed>) = 0 [pid 7008] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7006] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7008] <... openat resumed>) = 3 [pid 7008] chdir("./file1") = 0 [pid 7009] munmap(0x7f943d000000, 138412032 [pid 7008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7007] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7004] <... close resumed>) = 0 [pid 7009] <... munmap resumed>) = 0 [pid 7008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7008] truncate("./file1", 0 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7004] exit_group(0 [pid 7009] <... openat resumed>) = 4 [pid 7008] <... truncate resumed>) = 0 [pid 7005] exit_group(0 [pid 7004] <... exit_group resumed>) = ? [pid 7009] ioctl(4, LOOP_SET_FD, 3 [pid 7008] memfd_create("syzkaller", 0) = 4 [pid 7007] <... write resumed>) = 524288 [pid 7005] <... exit_group resumed>) = ? [pid 7006] <... write resumed>) = 524288 [pid 7005] +++ exited with 0 +++ [pid 7004] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7004, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7008] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7006] munmap(0x7f943d000000, 138412032 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7005, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", [pid 7006] <... munmap resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7009] <... ioctl resumed>) = 0 [pid 7006] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7009] close(3 [pid 7006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] <... close resumed>) = 0 [pid 7006] close(4 [pid 5076] <... openat resumed>) = 3 [pid 7009] close(4 [pid 7007] munmap(0x7f943d000000, 138412032 [pid 5076] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(AT_FDCWD, "./318/binderfs", [pid 7009] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] mkdir("./file1", 0777) = 0 [pid 7006] <... close resumed>) = 0 [pid 7009] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7007] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5072] unlink("./318/binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7009] <... mount resumed>) = 0 [pid 7007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7007] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7009] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7008] <... write resumed>) = 524288 [pid 7007] close(4 [pid 5076] newfstatat(AT_FDCWD, "./315/binderfs", [pid 7009] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] chdir("./file1" [pid 7006] exit_group(0 [pid 5072] <... umount2 resumed>) = 0 [pid 7009] <... chdir resumed>) = 0 [pid 7008] munmap(0x7f943d000000, 138412032 [pid 7006] <... exit_group resumed>) = ? [ 245.825234][ T7009] loop4: detected capacity change from 0 to 1024 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7008] <... munmap resumed>) = 0 [pid 7006] +++ exited with 0 +++ [pid 7009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7006, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7009] truncate("./file1", 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(3, [pid 5072] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7008] close(4 [pid 5074] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./315/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./319/binderfs", [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] <... truncate resumed>) = 0 [pid 7007] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./318/file1", [pid 7009] memfd_create("syzkaller", 0 [pid 7007] exit_group(0 [pid 5076] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] unlink("./319/binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] <... memfd_create resumed>) = 4 [pid 7007] <... exit_group resumed>) = ? [pid 7009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7008] <... close resumed>) = 0 [pid 7007] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 5072] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7007, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7009] <... mmap resumed>) = 0x7f943d000000 [pid 7008] exit_group(0 [pid 5074] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... restart_syscall resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7009] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7008] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5073] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(4, "", [pid 7008] +++ exited with 0 +++ [pid 5076] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./319/binderfs", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(AT_FDCWD, "./315/file1", [pid 5073] unlink("./319/binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7008, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, [pid 5071] <... restart_syscall resumed>) = 0 [pid 5076] close(4) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./315/file1" [pid 5072] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./318/file1" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] close(3) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5074] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5076] rmdir("./315" [pid 5073] newfstatat(AT_FDCWD, "./319/file1", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(3 [pid 5071] getdents64(3, [pid 5073] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7009] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] rmdir("./318" [pid 5071] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] munmap(0x7f943d000000, 138412032 [pid 5074] newfstatat(AT_FDCWD, "./319/file1", [pid 5073] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./316", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./320/binderfs", [pid 7009] <... munmap resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] mkdir("./319", 0777 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 5071] unlink("./320/binderfs" [pid 7009] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5073] close(4 [pid 5071] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./319/file1" [pid 5074] newfstatat(4, "", [pid 5073] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5073] close(3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] close(4 [pid 5073] rmdir("./319" [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./319/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./320", 0777 [pid 7009] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7009] exit_group(0 [pid 5074] getdents64(3, [pid 5073] <... mkdir resumed>) = 0 [pid 5071] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7009] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7009, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./320/file1", [pid 5074] rmdir("./319" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", [pid 5075] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] mkdir("./320", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5071] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./320/file1" [pid 5074] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./318/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7010 attached [pid 5072] close(3 [pid 5071] getdents64(3, [pid 7010] set_robust_list(0x555583d53660, 24 [pid 5075] unlink("./318/binderfs" [pid 7010] <... set_robust_list resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7010] chdir("./316" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7010 [pid 5075] <... unlink resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7010] <... chdir resumed>) = 0 [pid 5071] close(3) = 0 [pid 7010] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 7011 attached ) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7011 [pid 7011] set_robust_list(0x555583d53660, 24 [pid 7010] setpgid(0, 0 [pid 5075] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./320" [pid 7011] <... set_robust_list resumed>) = 0 [pid 7010] <... setpgid resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7011] chdir("./319" [pid 5071] mkdir("./321", 0777 [pid 7011] <... chdir resumed>) = 0 [pid 7010] <... openat resumed>) = 3 [pid 7010] write(3, "1000", 4) = 4 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7010] close(3 [pid 5075] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7011] setpgid(0, 0 [pid 7010] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7011] <... setpgid resumed>) = 0 [pid 7010] symlink("/dev/binderfs", "./binderfs" [pid 5075] newfstatat(AT_FDCWD, "./318/file1", [pid 7011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7010] <... symlink resumed>) = 0 [pid 5075] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7011] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7011] write(3, "1000", 4) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 7011] close(3 [pid 7010] memfd_create("syzkaller", 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7011] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 7011] symlink("/dev/binderfs", "./binderfs" [pid 7010] <... memfd_create resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7011] <... symlink resumed>) = 0 [pid 7010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(4, [pid 5074] close(3 [pid 5073] close(3 [pid 7010] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7012 [pid 5075] close(4 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7013 ./strace-static-x86_64: Process 7012 attached [pid 7012] set_robust_list(0x555583d53660, 24./strace-static-x86_64: Process 7013 attached ) = 0 [pid 7011] memfd_create("syzkaller", 0 [pid 7010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... close resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7013] set_robust_list(0x555583d53660, 24 [pid 7011] <... memfd_create resumed>) = 3 [pid 5075] rmdir("./318/file1" [pid 7012] chdir("./320") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7013] <... set_robust_list resumed>) = 0 [pid 7012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 7013] chdir("./320" [pid 7012] <... prctl resumed>) = 0 [pid 7011] <... mmap resumed>) = 0x7f943d000000 [pid 7012] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7013] <... chdir resumed>) = 0 [pid 7012] <... setpgid resumed>) = 0 [pid 7011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(3 [pid 7012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3) = 0 [pid 5075] <... close resumed>) = 0 [pid 7013] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] rmdir("./318" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7012] <... openat resumed>) = 3 [pid 7012] write(3, "1000", 4) = 4 [pid 7012] close(3) = 0 [pid 7012] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7013] <... prctl resumed>) = 0 [pid 7012] memfd_create("syzkaller", 0) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7014 [pid 7012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7014 attached [pid 7014] set_robust_list(0x555583d53660, 24) = 0 [pid 7013] setpgid(0, 0 [pid 5075] mkdir("./319", 0777 [pid 7010] <... write resumed>) = 524288 [pid 7014] chdir("./321" [pid 7013] <... setpgid resumed>) = 0 [pid 7012] <... write resumed>) = 524288 [pid 7011] <... write resumed>) = 524288 [pid 7014] <... chdir resumed>) = 0 [pid 7010] munmap(0x7f943d000000, 138412032 [pid 5075] <... mkdir resumed>) = 0 [pid 7013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7013] <... openat resumed>) = 3 [pid 7010] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7014] <... prctl resumed>) = 0 [pid 7013] write(3, "1000", 4 [pid 7010] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7014] setpgid(0, 0 [pid 7013] <... write resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 7014] <... setpgid resumed>) = 0 [pid 7013] close(3 [pid 7010] <... openat resumed>) = 4 [pid 7014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7013] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7014] <... openat resumed>) = 3 [pid 7013] symlink("/dev/binderfs", "./binderfs" [pid 7010] ioctl(4, LOOP_SET_FD, 3 [pid 7013] <... symlink resumed>) = 0 [pid 7014] write(3, "1000", 4) = 4 [pid 7014] close(3) = 0 [pid 7014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7014] memfd_create("syzkaller", 0 [pid 7012] munmap(0x7f943d000000, 138412032 [pid 7013] memfd_create("syzkaller", 0 [pid 7014] <... memfd_create resumed>) = 3 [pid 7014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7013] <... memfd_create resumed>) = 3 [pid 7012] <... munmap resumed>) = 0 [pid 7011] munmap(0x7f943d000000, 138412032 [pid 7014] <... mmap resumed>) = 0x7f943d000000 [pid 7014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7011] <... munmap resumed>) = 0 [pid 7010] <... ioctl resumed>) = 0 [pid 7013] <... mmap resumed>) = 0x7f943d000000 [pid 7011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7010] close(3 [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7011] <... openat resumed>) = 4 [pid 7010] <... close resumed>) = 0 [pid 7012] <... openat resumed>) = 4 [pid 7011] ioctl(4, LOOP_SET_FD, 3 [pid 7010] close(4 [pid 7012] ioctl(4, LOOP_SET_FD, 3 [pid 7010] <... close resumed>) = 0 [pid 7010] mkdir("./file1", 0777 [pid 7011] <... ioctl resumed>) = 0 [pid 7012] <... ioctl resumed>) = 0 [pid 7014] <... write resumed>) = 524288 [pid 7013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7010] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 7012] close(3 [pid 7011] close(3 [pid 7010] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] close(3 [pid 7014] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 7014] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7012] <... close resumed>) = 0 [pid 7012] close(4 [pid 7014] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7012] <... close resumed>) = 0 ./strace-static-x86_64: Process 7015 attached [pid 7014] <... openat resumed>) = 4 [pid 7012] mkdir("./file1", 0777 [pid 7011] <... close resumed>) = 0 [ 246.161044][ T7010] loop5: detected capacity change from 0 to 1024 [ 246.186930][ T7012] loop3: detected capacity change from 0 to 1024 [ 246.194394][ T7011] loop1: detected capacity change from 0 to 1024 [pid 7015] set_robust_list(0x555583d53660, 24 [pid 7014] ioctl(4, LOOP_SET_FD, 3 [pid 7012] <... mkdir resumed>) = 0 [pid 7011] close(4 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7015 [pid 7015] <... set_robust_list resumed>) = 0 [pid 7014] <... ioctl resumed>) = 0 [pid 7012] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7015] chdir("./319") = 0 [pid 7015] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7011] <... close resumed>) = 0 [pid 7015] <... prctl resumed>) = 0 [pid 7013] <... write resumed>) = 524288 [pid 7011] mkdir("./file1", 0777 [pid 7015] setpgid(0, 0) = 0 [pid 7015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7011] <... mkdir resumed>) = 0 [pid 7015] <... openat resumed>) = 3 [pid 7015] write(3, "1000", 4 [pid 7013] munmap(0x7f943d000000, 138412032 [pid 7011] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7015] <... write resumed>) = 4 [pid 7015] close(3) = 0 [pid 7015] symlink("/dev/binderfs", "./binderfs" [pid 7013] <... munmap resumed>) = 0 [pid 7010] <... mount resumed>) = 0 [pid 7015] <... symlink resumed>) = 0 [pid 7012] <... mount resumed>) = 0 [pid 7010] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7010] <... openat resumed>) = 3 [pid 7012] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7015] memfd_create("syzkaller", 0 [pid 7013] <... openat resumed>) = 4 [pid 7012] <... openat resumed>) = 3 [pid 7010] chdir("./file1" [pid 7015] <... memfd_create resumed>) = 3 [pid 7014] close(3 [pid 7013] ioctl(4, LOOP_SET_FD, 3 [pid 7012] chdir("./file1" [pid 7010] <... chdir resumed>) = 0 [pid 7015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7014] <... close resumed>) = 0 [ 246.234304][ T7014] loop0: detected capacity change from 0 to 1024 [pid 7015] <... mmap resumed>) = 0x7f943d000000 [pid 7014] close(4 [pid 7012] <... chdir resumed>) = 0 [pid 7010] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7014] <... close resumed>) = 0 [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7014] mkdir("./file1", 0777 [pid 7012] truncate("./file1", 0 [pid 7010] truncate("./file1", 0 [pid 7014] <... mkdir resumed>) = 0 [pid 7014] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7012] <... truncate resumed>) = 0 [pid 7011] <... mount resumed>) = 0 [pid 7012] memfd_create("syzkaller", 0) = 4 [pid 7012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7011] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7010] <... truncate resumed>) = 0 [pid 7012] <... mmap resumed>) = 0x7f943d000000 [pid 7010] memfd_create("syzkaller", 0 [pid 7012] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7011] <... openat resumed>) = 3 [pid 7010] <... memfd_create resumed>) = 4 [pid 7013] <... ioctl resumed>) = 0 [pid 7010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7015] <... write resumed>) = 524288 [pid 7013] close(3 [pid 7011] chdir("./file1" [pid 7010] <... mmap resumed>) = 0x7f943d000000 [pid 7013] <... close resumed>) = 0 [pid 7011] <... chdir resumed>) = 0 [pid 7013] close(4 [pid 7011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7015] munmap(0x7f943d000000, 138412032 [pid 7014] <... mount resumed>) = 0 [pid 7013] <... close resumed>) = 0 [pid 7011] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7014] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7011] truncate("./file1", 0 [pid 7014] <... openat resumed>) = 3 [pid 7015] <... munmap resumed>) = 0 [pid 7014] chdir("./file1") = 0 [pid 7013] mkdir("./file1", 0777 [pid 7010] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7015] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7014] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7013] <... mkdir resumed>) = 0 [pid 7012] <... write resumed>) = 524288 [pid 7015] <... openat resumed>) = 4 [pid 7014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 246.274872][ T7013] loop2: detected capacity change from 0 to 1024 [pid 7013] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7014] truncate("./file1", 0 [pid 7015] ioctl(4, LOOP_SET_FD, 3 [pid 7011] <... truncate resumed>) = 0 [pid 7011] memfd_create("syzkaller", 0) = 4 [pid 7010] <... write resumed>) = 524288 [pid 7014] <... truncate resumed>) = 0 [pid 7012] munmap(0x7f943d000000, 138412032 [pid 7011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7014] memfd_create("syzkaller", 0 [pid 7012] <... munmap resumed>) = 0 [pid 7011] <... mmap resumed>) = 0x7f943d000000 [pid 7014] <... memfd_create resumed>) = 4 [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7014] <... mmap resumed>) = 0x7f943d000000 [pid 7012] close(4 [pid 7011] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7013] <... mount resumed>) = 0 [pid 7013] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7013] chdir("./file1" [pid 7010] munmap(0x7f943d000000, 138412032 [pid 7013] <... chdir resumed>) = 0 [pid 7012] <... close resumed>) = 0 [pid 7014] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7011] <... write resumed>) = 524288 [pid 7010] <... munmap resumed>) = 0 [pid 7015] <... ioctl resumed>) = 0 [pid 7013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7012] exit_group(0 [pid 7015] close(3 [pid 7013] truncate("./file1", 0 [pid 7012] <... exit_group resumed>) = ? [pid 7012] +++ exited with 0 +++ [pid 7010] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7012, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7015] <... close resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7015] close(4 [pid 5074] <... restart_syscall resumed>) = 0 [pid 7015] <... close resumed>) = 0 [pid 7011] munmap(0x7f943d000000, 138412032 [pid 7010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7015] mkdir("./file1", 0777) = 0 [pid 7010] close(4 [pid 7015] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7011] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7013] <... truncate resumed>) = 0 [pid 7011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 7014] <... write resumed>) = 524288 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7014] munmap(0x7f943d000000, 138412032 [pid 7013] memfd_create("syzkaller", 0 [pid 7011] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 246.340575][ T7015] loop4: detected capacity change from 0 to 1024 [pid 5074] getdents64(3, [pid 7014] <... munmap resumed>) = 0 [pid 7013] <... memfd_create resumed>) = 4 [pid 7011] close(4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7015] <... mount resumed>) = 0 [pid 7013] <... mmap resumed>) = 0x7f943d000000 [pid 5074] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7015] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7014] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7010] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7015] <... openat resumed>) = 3 [pid 7014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./320/binderfs", [pid 7015] chdir("./file1") = 0 [pid 7014] close(4 [pid 7015] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7014] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7013] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7011] <... close resumed>) = 0 [pid 7010] exit_group(0 [pid 7015] truncate("./file1", 0 [pid 5074] unlink("./320/binderfs" [pid 7010] <... exit_group resumed>) = ? [pid 5074] <... unlink resumed>) = 0 [pid 7014] exit_group(0 [pid 5074] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7014] <... exit_group resumed>) = ? [pid 7011] exit_group(0 [pid 7010] +++ exited with 0 +++ [pid 7015] <... truncate resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7010, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7015] memfd_create("syzkaller", 0) = 4 [pid 7011] <... exit_group resumed>) = ? [pid 7015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7011] +++ exited with 0 +++ [pid 5076] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7014] +++ exited with 0 +++ [pid 7013] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 7015] <... mmap resumed>) = 0x7f943d000000 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7011, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7014, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(3, "", [pid 5071] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 7013] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(3, "", [pid 7013] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./320/file1", [pid 5072] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(3, "", [pid 5071] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7015] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5074] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./319/binderfs", [pid 5071] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] unlink("./319/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5072] <... unlink resumed>) = 0 [pid 7013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 4 [pid 5072] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7013] close(4 [pid 5074] newfstatat(4, "", [pid 5071] unlink("./321/binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] getdents64(4, [pid 5076] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./316/binderfs", [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4 [pid 5076] unlink("./316/binderfs" [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./320/file1") = 0 [pid 5072] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7013] <... close resumed>) = 0 [pid 5074] close(3) = 0 [pid 5072] newfstatat(AT_FDCWD, "./319/file1", [pid 7013] exit_group(0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] rmdir("./320" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7013] <... exit_group resumed>) = ? [pid 5074] <... rmdir resumed>) = 0 [pid 5072] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] mkdir("./321", 0777 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7015] <... write resumed>) = 524288 [pid 7013] +++ exited with 0 +++ [pid 5076] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7013, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5072] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./321/file1", [pid 5073] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(4, "", [pid 5071] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] getdents64(4, [pid 5071] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... openat resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] getdents64(4, [pid 5071] newfstatat(4, "", [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(4 [pid 5071] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./319/file1" [pid 5071] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 7015] munmap(0x7f943d000000, 138412032 [pid 5073] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7015] <... munmap resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./321/file1") = 0 [pid 5074] <... close resumed>) = 0 [pid 7015] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] getdents64(3, [pid 5071] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(3 [pid 5071] close(3 [pid 7015] close(4 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5072] rmdir("./319" [pid 5071] rmdir("./321" [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5072] mkdir("./320", 0777 [pid 5071] mkdir("./322", 0777 [pid 7015] <... close resumed>) = 0 [pid 5076] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7016 [pid 5073] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7016 attached [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7016] set_robust_list(0x555583d53660, 24 [pid 5076] newfstatat(AT_FDCWD, "./316/file1", [pid 5073] unlink("./320/binderfs" [pid 5071] <... openat resumed>) = 3 [pid 7016] <... set_robust_list resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7016] chdir("./321" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7016] <... chdir resumed>) = 0 [pid 5076] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 7016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7016] <... prctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7016] setpgid(0, 0) = 0 [pid 7016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7015] exit_group(0 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 7016] write(3, "1000", 4 [pid 7015] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(AT_FDCWD, "./320/file1", [pid 5076] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7016] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7016] close(3 [pid 5076] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7016] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7016] symlink("/dev/binderfs", "./binderfs" [pid 5076] rmdir("./316/file1" [pid 5073] <... openat resumed>) = 4 [pid 7016] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7015] +++ exited with 0 +++ [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7016] memfd_create("syzkaller", 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7015, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7016] <... memfd_create resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 7016] <... mmap resumed>) = 0x7f943d000000 [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] close(4 [pid 5075] newfstatat(3, "", [pid 5073] <... close resumed>) = 0 [pid 5076] rmdir("./316" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] rmdir("./320/file1" [pid 7016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5076] mkdir("./317", 0777 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./319/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5075] unlink("./319/binderfs" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] rmdir("./320" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./321", 0777 [pid 7016] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7016] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... mkdir resumed>) = 0 [pid 5072] close(3 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7016] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./319/file1", [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7017 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 7018 attached ./strace-static-x86_64: Process 7017 attached [pid 7016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7017] set_robust_list(0x555583d53660, 24 [pid 7018] set_robust_list(0x555583d53660, 24 [pid 7017] <... set_robust_list resumed>) = 0 [pid 7016] <... openat resumed>) = 4 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7018 [pid 7018] <... set_robust_list resumed>) = 0 [pid 7017] chdir("./322" [pid 7016] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7018] chdir("./320") = 0 [pid 7018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] close(3 [pid 7018] setpgid(0, 0 [pid 5076] <... close resumed>) = 0 [pid 7018] <... setpgid resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7018] write(3, "1000", 4 [pid 7016] <... ioctl resumed>) = 0 [pid 7018] <... write resumed>) = 4 [pid 7018] close(3) = 0 [pid 7018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7016] close(3 [pid 5075] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7019 attached [pid 7018] memfd_create("syzkaller", 0 [pid 7017] <... chdir resumed>) = 0 [pid 7019] set_robust_list(0x555583d53660, 24 [pid 7018] <... memfd_create resumed>) = 3 [pid 7017] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7016] <... close resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 7019] <... set_robust_list resumed>) = 0 [pid 7018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7016] close(4 [pid 7019] chdir("./317" [pid 7018] <... mmap resumed>) = 0x7f943d000000 [pid 7017] <... prctl resumed>) = 0 [pid 7016] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7019] <... chdir resumed>) = 0 [pid 7017] setpgid(0, 0 [pid 7016] mkdir("./file1", 0777 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7019 [pid 5075] getdents64(4, [pid 7019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7019] setpgid(0, 0) = 0 [pid 7016] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7017] <... setpgid resumed>) = 0 [pid 5075] getdents64(4, [pid 7019] <... openat resumed>) = 3 [pid 7018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 7016] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7019] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 7019] <... write resumed>) = 4 [pid 5075] rmdir("./319/file1" [pid 7019] close(3) = 0 [pid 7019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7018] <... write resumed>) = 524288 [pid 7017] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 7019] memfd_create("syzkaller", 0) = 3 [pid 7019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7017] write(3, "1000", 4 [pid 5075] getdents64(3, [pid 7017] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7017] close(3 [pid 5075] close(3 [pid 7017] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7017] symlink("/dev/binderfs", "./binderfs" [pid 5075] rmdir("./319" [pid 7018] munmap(0x7f943d000000, 138412032 [pid 7017] <... symlink resumed>) = 0 [pid 7016] <... mount resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7017] memfd_create("syzkaller", 0 [pid 7016] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] mkdir("./320", 0777 [pid 7018] <... munmap resumed>) = 0 [pid 7017] <... memfd_create resumed>) = 3 [pid 7016] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 7017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 246.676650][ T7016] loop3: detected capacity change from 0 to 1024 [pid 7016] chdir("./file1" [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7018] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7017] <... mmap resumed>) = 0x7f943d000000 [pid 7016] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] close(3 [pid 7019] <... write resumed>) = 524288 [pid 7018] <... openat resumed>) = 4 [pid 7016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7019] munmap(0x7f943d000000, 138412032 [pid 7016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7019] <... munmap resumed>) = 0 [pid 7018] ioctl(4, LOOP_SET_FD, 3 [pid 7016] truncate("./file1", 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7019] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 7019] <... openat resumed>) = 4 [pid 7017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7019] ioctl(4, LOOP_SET_FD, 3 [pid 7017] <... write resumed>) = 524288 [pid 7016] <... truncate resumed>) = 0 [pid 7016] memfd_create("syzkaller", 0) = 4 [pid 7017] munmap(0x7f943d000000, 138412032 [pid 7016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7020 [pid 7016] <... mmap resumed>) = 0x7f943d000000 [pid 7017] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 7020 attached [pid 7017] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7020] set_robust_list(0x555583d53660, 24 [pid 7017] <... openat resumed>) = 4 [pid 7017] ioctl(4, LOOP_SET_FD, 3 [pid 7020] <... set_robust_list resumed>) = 0 [pid 7018] <... ioctl resumed>) = 0 [pid 7020] chdir("./321" [pid 7018] close(3) = 0 [pid 7018] close(4) = 0 [pid 7018] mkdir("./file1", 0777) = 0 [pid 7018] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7016] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7019] <... ioctl resumed>) = 0 [pid 7019] close(3) = 0 [pid 7020] <... chdir resumed>) = 0 [pid 7019] close(4 [pid 7020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7019] <... close resumed>) = 0 [pid 7020] <... prctl resumed>) = 0 [pid 7019] mkdir("./file1", 0777 [pid 7020] setpgid(0, 0 [pid 7019] <... mkdir resumed>) = 0 [pid 7018] <... mount resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 7018] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7018] chdir("./file1") = 0 [pid 7020] <... setpgid resumed>) = 0 [pid 7016] <... write resumed>) = 524288 [pid 7019] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7018] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] close(3 [pid 7018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... close resumed>) = 0 [pid 7020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7018] truncate("./file1", 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7020] <... openat resumed>) = 3 [pid 7020] write(3, "1000", 4 [pid 7017] <... ioctl resumed>) = 0 [pid 7020] <... write resumed>) = 4 [pid 7017] close(3 [pid 7020] close(3 [pid 7019] <... mount resumed>) = 0 [pid 7018] <... truncate resumed>) = 0 [pid 7017] <... close resumed>) = 0 [pid 7016] munmap(0x7f943d000000, 138412032 [pid 7020] <... close resumed>) = 0 [ 246.747467][ T7018] loop1: detected capacity change from 0 to 1024 [ 246.764987][ T7019] loop5: detected capacity change from 0 to 1024 [ 246.777987][ T7017] loop0: detected capacity change from 0 to 1024 [pid 7019] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7018] memfd_create("syzkaller", 0 [pid 7017] close(4./strace-static-x86_64: Process 7021 attached [pid 7020] symlink("/dev/binderfs", "./binderfs" [pid 7019] <... openat resumed>) = 3 [pid 7018] <... memfd_create resumed>) = 4 [pid 7017] <... close resumed>) = 0 [pid 7016] <... munmap resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7021 [pid 7021] set_robust_list(0x555583d53660, 24 [pid 7020] <... symlink resumed>) = 0 [pid 7019] chdir("./file1" [pid 7018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7017] mkdir("./file1", 0777 [pid 7021] <... set_robust_list resumed>) = 0 [pid 7020] memfd_create("syzkaller", 0 [pid 7019] <... chdir resumed>) = 0 [pid 7018] <... mmap resumed>) = 0x7f943d000000 [pid 7016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7021] chdir("./320" [pid 7020] <... memfd_create resumed>) = 3 [pid 7019] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7017] <... mkdir resumed>) = 0 [pid 7020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7019] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7017] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7021] <... chdir resumed>) = 0 [pid 7020] <... mmap resumed>) = 0x7f943d000000 [pid 7019] truncate("./file1", 0 [pid 7021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7016] close(4 [pid 7021] <... prctl resumed>) = 0 [pid 7021] setpgid(0, 0) = 0 [pid 7018] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7018] <... write resumed>) = 524288 [pid 7021] <... openat resumed>) = 3 [pid 7021] write(3, "1000", 4) = 4 [pid 7021] close(3) = 0 [pid 7016] <... close resumed>) = 0 [pid 7021] symlink("/dev/binderfs", "./binderfs" [pid 7019] <... truncate resumed>) = 0 [pid 7021] <... symlink resumed>) = 0 [pid 7020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7019] memfd_create("syzkaller", 0 [pid 7021] memfd_create("syzkaller", 0 [pid 7019] <... memfd_create resumed>) = 4 [pid 7021] <... memfd_create resumed>) = 3 [pid 7019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7018] munmap(0x7f943d000000, 138412032 [pid 7019] <... mmap resumed>) = 0x7f943d000000 [pid 7021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7019] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7021] <... mmap resumed>) = 0x7f943d000000 [pid 7018] <... munmap resumed>) = 0 [pid 7021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7016] exit_group(0) = ? [pid 7018] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7017] <... mount resumed>) = 0 [pid 7018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7018] close(4) = 0 [pid 7017] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7016] +++ exited with 0 +++ [pid 7017] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7016, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7017] chdir("./file1" [pid 7020] <... write resumed>) = 524288 [pid 7019] <... write resumed>) = 524288 [pid 7017] <... chdir resumed>) = 0 [pid 7020] munmap(0x7f943d000000, 138412032 [pid 7017] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7017] truncate("./file1", 0 [pid 5074] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 7018] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7021] <... write resumed>) = 524288 [pid 7018] <... exit_group resumed>) = ? [pid 5074] getdents64(3, [pid 7020] <... munmap resumed>) = 0 [pid 7018] +++ exited with 0 +++ [pid 7017] <... truncate resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7017] memfd_create("syzkaller", 0) = 4 [pid 5074] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7018, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7020] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7020] <... openat resumed>) = 4 [pid 7017] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5072] <... restart_syscall resumed>) = 0 [pid 7020] ioctl(4, LOOP_SET_FD, 3 [pid 7021] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7021] <... munmap resumed>) = 0 [pid 7021] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7019] munmap(0x7f943d000000, 138412032 [pid 7021] <... openat resumed>) = 4 [pid 7019] <... munmap resumed>) = 0 [pid 7021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5072] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7019] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7019] close(4) = 0 [pid 5074] unlink("./321/binderfs" [pid 5072] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7020] <... ioctl resumed>) = 0 [pid 7017] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5074] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7019] exit_group(0) = ? [pid 7020] close(3 [pid 7019] +++ exited with 0 +++ [pid 7017] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 7020] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7019, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7020] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7021] close(3 [pid 7020] <... close resumed>) = 0 [pid 7021] <... close resumed>) = 0 [pid 7020] mkdir("./file1", 0777 [pid 5074] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 7021] close(4 [pid 7020] <... mkdir resumed>) = 0 [ 246.909527][ T7020] loop2: detected capacity change from 0 to 1024 [ 246.914544][ T7021] loop4: detected capacity change from 0 to 1024 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7021] <... close resumed>) = 0 [pid 7020] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7017] munmap(0x7f943d000000, 138412032 [pid 5072] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] mkdir("./file1", 0777 [pid 7017] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7021] <... mkdir resumed>) = 0 [pid 7017] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./321/file1", [pid 5072] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(3, "", [pid 5074] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 5072] unlink("./320/binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7017] close(4 [pid 5074] <... openat resumed>) = 4 [pid 5072] <... unlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5072] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./317/binderfs", [pid 5074] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./317/binderfs" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./321/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./321") = 0 [pid 7020] <... mount resumed>) = 0 [pid 7020] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7017] <... close resumed>) = 0 [pid 5074] mkdir("./322", 0777 [pid 5072] <... umount2 resumed>) = 0 [pid 7021] <... mount resumed>) = 0 [pid 7020] <... openat resumed>) = 3 [pid 7017] exit_group(0 [pid 5074] <... mkdir resumed>) = 0 [pid 7020] chdir("./file1" [pid 7017] <... exit_group resumed>) = ? [pid 7021] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7020] <... chdir resumed>) = 0 [pid 7017] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7020] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 7021] <... openat resumed>) = 3 [pid 7020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7017, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7021] chdir("./file1" [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7021] <... chdir resumed>) = 0 [pid 7020] truncate("./file1", 0 [pid 5076] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... restart_syscall resumed>) = 0 [pid 7021] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./317/file1", [pid 7021] truncate("./file1", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7020] <... truncate resumed>) = 0 [pid 5076] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./320/file1", [pid 7020] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] <... truncate resumed>) = 0 [pid 7020] <... memfd_create resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7021] memfd_create("syzkaller", 0 [pid 7020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7021] <... memfd_create resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5072] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 7021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 7021] <... mmap resumed>) = 0x7f943d000000 [pid 7020] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(4, [pid 5072] newfstatat(4, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7021] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7020] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7020] <... write resumed>) = 524288 [pid 5072] getdents64(4, [pid 7020] munmap(0x7f943d000000, 138412032 [pid 7021] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] munmap(0x7f943d000000, 138412032 [pid 5076] close(4 [pid 5072] close(4 [pid 7020] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./322/binderfs", [pid 5076] rmdir("./317/file1" [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./320/file1" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7020] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... rmdir resumed>) = 0 [pid 5071] unlink("./322/binderfs" [pid 7020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7022 attached [pid 7021] <... munmap resumed>) = 0 [pid 5072] getdents64(3, [pid 7022] set_robust_list(0x555583d53660, 24 [pid 5076] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7022] <... set_robust_list resumed>) = 0 [pid 7021] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7020] close(4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7022 [pid 5072] close(3 [pid 7022] chdir("./322" [pid 7021] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] close(3 [pid 5072] <... close resumed>) = 0 [pid 7022] <... chdir resumed>) = 0 [pid 7021] close(4 [pid 5076] <... close resumed>) = 0 [pid 5072] rmdir("./320" [pid 7022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7021] <... close resumed>) = 0 [pid 7020] <... close resumed>) = 0 [pid 5076] rmdir("./317" [pid 5072] <... rmdir resumed>) = 0 [pid 7022] <... prctl resumed>) = 0 [pid 7022] setpgid(0, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7022] <... setpgid resumed>) = 0 [pid 7021] exit_group(0 [pid 7020] exit_group(0 [pid 5072] mkdir("./321", 0777 [pid 5071] <... umount2 resumed>) = 0 [pid 7022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7020] <... exit_group resumed>) = ? [pid 5072] <... mkdir resumed>) = 0 [pid 5071] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7022] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7022] write(3, "1000", 4 [pid 7021] <... exit_group resumed>) = ? [pid 5076] mkdir("./318", 0777 [pid 5072] <... openat resumed>) = 3 [pid 7022] <... write resumed>) = 4 [pid 7021] +++ exited with 0 +++ [pid 7020] +++ exited with 0 +++ [pid 5076] <... mkdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7021, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7020, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7022] close(3 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 7022] <... close resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 7022] symlink("/dev/binderfs", "./binderfs" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7022] <... symlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./322/file1", [pid 5073] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7022] memfd_create("syzkaller", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 7022] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7022] <... mmap resumed>) = 0x7f943d000000 [pid 5075] newfstatat(3, "", [pid 5073] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] getdents64(3, [pid 5073] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 7022] <... write resumed>) = 524288 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(3 [pid 7022] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5072] <... close resumed>) = 0 [pid 7022] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(4, "", [pid 5075] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5073] unlink("./321/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] unlink("./320/binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7023 attached [pid 7022] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 7023] set_robust_list(0x555583d53660, 24 [pid 7022] <... openat resumed>) = 4 [pid 7023] <... set_robust_list resumed>) = 0 [pid 7022] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7023 [pid 7023] chdir("./321" [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7023] <... chdir resumed>) = 0 [pid 7023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(4, [pid 7023] <... prctl resumed>) = 0 [pid 7023] setpgid(0, 0) = 0 [pid 7023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7023] <... openat resumed>) = 3 [pid 7023] write(3, "1000", 4) = 4 [pid 7023] close(3) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./322/file1" [pid 5076] close(3) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7023] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./321/file1", [pid 5071] getdents64(3, [pid 7023] <... symlink resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./320/file1", [pid 5073] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 7022] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7022] close(3 [pid 5075] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./322" [pid 7022] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7024 ./strace-static-x86_64: Process 7024 attached [pid 7023] memfd_create("syzkaller", 0 [pid 7022] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 5071] <... rmdir resumed>) = 0 [pid 7024] set_robust_list(0x555583d53660, 24 [pid 7023] <... memfd_create resumed>) = 3 [pid 7022] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7024] <... set_robust_list resumed>) = 0 [pid 7023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7024] chdir("./318" [pid 7023] <... mmap resumed>) = 0x7f943d000000 [pid 5073] getdents64(4, [pid 7022] mkdir("./file1", 0777 [pid 5075] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7024] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(4, [pid 7024] <... prctl resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7024] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] close(4 [pid 7022] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] mkdir("./323", 0777 [pid 7022] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] rmdir("./321/file1" [pid 5075] getdents64(4, [pid 7024] <... setpgid resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] close(4 [pid 7024] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 247.163470][ T7022] loop3: detected capacity change from 0 to 1024 [pid 7024] write(3, "1000", 4 [pid 5075] rmdir("./320/file1" [pid 7024] <... write resumed>) = 4 [pid 7022] <... mount resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7022] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7024] close(3 [pid 5075] getdents64(3, [pid 5073] close(3 [pid 7024] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 7024] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(3 [pid 5073] rmdir("./321" [pid 7024] <... symlink resumed>) = 0 [pid 7022] chdir("./file1" [pid 5075] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7022] <... chdir resumed>) = 0 [pid 7024] memfd_create("syzkaller", 0 [pid 7022] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] rmdir("./320" [pid 7022] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 7024] <... memfd_create resumed>) = 3 [pid 7022] truncate("./file1", 0 [pid 5073] mkdir("./322", 0777 [pid 7024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] mkdir("./321", 0777 [pid 5073] <... mkdir resumed>) = 0 [pid 7024] <... mmap resumed>) = 0x7f943d000000 [pid 7023] <... write resumed>) = 524288 [pid 7022] <... truncate resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 7022] memfd_create("syzkaller", 0 [pid 7024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7022] <... memfd_create resumed>) = 4 [pid 7022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7023] munmap(0x7f943d000000, 138412032 [pid 7022] <... mmap resumed>) = 0x7f943d000000 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 7023] <... munmap resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7022] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7023] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7023] ioctl(4, LOOP_SET_FD, 3 [pid 7022] <... write resumed>) = 524288 [pid 7023] <... ioctl resumed>) = 0 [pid 7022] munmap(0x7f943d000000, 138412032 [pid 5071] <... ioctl resumed>) = 0 [pid 7024] <... write resumed>) = 524288 [pid 7024] munmap(0x7f943d000000, 138412032 [pid 7022] <... munmap resumed>) = 0 [pid 5071] close(3 [pid 7023] close(3) = 0 [pid 7023] close(4 [pid 7022] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7023] <... close resumed>) = 0 [pid 7024] <... munmap resumed>) = 0 [pid 7023] mkdir("./file1", 0777 [pid 7022] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 7024] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7024] <... openat resumed>) = 4 [pid 7023] <... mkdir resumed>) = 0 [pid 7022] close(4 [pid 7023] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7024] ioctl(4, LOOP_SET_FD, 3 [pid 7022] <... close resumed>) = 0 [ 247.251509][ T7023] loop1: detected capacity change from 0 to 1024 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7022] exit_group(0) = ? ./strace-static-x86_64: Process 7025 attached [pid 7022] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7025 [pid 7025] set_robust_list(0x555583d53660, 24 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7022, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] close(3 [pid 7025] <... set_robust_list resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7025] chdir("./323" [pid 5075] close(3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7025] <... chdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7025] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7026 attached [pid 7025] <... prctl resumed>) = 0 [pid 7024] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7027 attached [pid 7026] set_robust_list(0x555583d53660, 24 [pid 7025] setpgid(0, 0 [pid 7024] close(3 [pid 5074] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7026 [pid 7027] set_robust_list(0x555583d53660, 24 [pid 7026] <... set_robust_list resumed>) = 0 [pid 7025] <... setpgid resumed>) = 0 [pid 7024] <... close resumed>) = 0 [pid 7027] <... set_robust_list resumed>) = 0 [pid 7026] chdir("./322" [pid 7025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7024] close(4 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7027 [pid 5074] <... openat resumed>) = 3 [pid 7026] <... chdir resumed>) = 0 [pid 7027] chdir("./321" [pid 7026] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7025] <... openat resumed>) = 3 [pid 7024] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 7026] <... prctl resumed>) = 0 [pid 7024] mkdir("./file1", 0777 [pid 7027] <... chdir resumed>) = 0 [pid 7023] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7024] <... mkdir resumed>) = 0 [pid 7023] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] getdents64(3, [pid 7027] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7026] setpgid(0, 0 [pid 7023] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7027] <... prctl resumed>) = 0 [pid 7026] <... setpgid resumed>) = 0 [pid 7025] write(3, "1000", 4 [pid 7024] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7023] chdir("./file1" [pid 7027] setpgid(0, 0 [pid 7026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7025] <... write resumed>) = 4 [pid 7023] <... chdir resumed>) = 0 [pid 5074] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7027] <... setpgid resumed>) = 0 [pid 7025] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7026] <... openat resumed>) = 3 [pid 7025] <... close resumed>) = 0 [pid 7023] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./322/binderfs", [pid 7027] <... openat resumed>) = 3 [pid 7026] write(3, "1000", 4 [pid 7025] symlink("/dev/binderfs", "./binderfs" [pid 7023] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7027] write(3, "1000", 4 [pid 7023] truncate("./file1", 0 [pid 5074] unlink("./322/binderfs" [pid 7027] <... write resumed>) = 4 [pid 7026] <... write resumed>) = 4 [pid 7025] <... symlink resumed>) = 0 [pid 7024] <... mount resumed>) = 0 [pid 7023] <... truncate resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7027] close(3 [pid 7026] close(3 [pid 7025] memfd_create("syzkaller", 0 [pid 7024] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7023] memfd_create("syzkaller", 0 [pid 7026] <... close resumed>) = 0 [pid 7027] <... close resumed>) = 0 [pid 7026] symlink("/dev/binderfs", "./binderfs" [pid 7024] <... openat resumed>) = 3 [pid 7023] <... memfd_create resumed>) = 4 [pid 5074] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7027] symlink("/dev/binderfs", "./binderfs" [pid 7026] <... symlink resumed>) = 0 [pid 7025] <... memfd_create resumed>) = 3 [pid 7024] chdir("./file1" [pid 7023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7027] <... symlink resumed>) = 0 [pid 7025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7024] <... chdir resumed>) = 0 [pid 7023] <... mmap resumed>) = 0x7f943d000000 [ 247.292917][ T7024] loop5: detected capacity change from 0 to 1024 [pid 7027] memfd_create("syzkaller", 0 [pid 7025] <... mmap resumed>) = 0x7f943d000000 [pid 7024] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7023] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7027] <... memfd_create resumed>) = 3 [pid 7026] memfd_create("syzkaller", 0 [pid 7024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7026] <... memfd_create resumed>) = 3 [pid 7026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7024] truncate("./file1", 0 [pid 7027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7026] <... mmap resumed>) = 0x7f943d000000 [pid 7025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7024] <... truncate resumed>) = 0 [pid 7027] <... mmap resumed>) = 0x7f943d000000 [pid 7024] memfd_create("syzkaller", 0 [pid 7027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7024] <... memfd_create resumed>) = 4 [pid 7023] <... write resumed>) = 524288 [pid 5074] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./322/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7026] <... write resumed>) = 524288 [pid 7024] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 4 [pid 7025] <... write resumed>) = 524288 [pid 7026] munmap(0x7f943d000000, 138412032 [pid 5074] newfstatat(4, "", [pid 7025] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7027] <... write resumed>) = 524288 [pid 7025] <... munmap resumed>) = 0 [pid 5074] getdents64(4, [pid 7026] <... munmap resumed>) = 0 [pid 7025] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7026] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7025] <... openat resumed>) = 4 [pid 5074] getdents64(4, [pid 7026] <... openat resumed>) = 4 [pid 7025] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7026] ioctl(4, LOOP_SET_FD, 3 [pid 7024] <... write resumed>) = 524288 [pid 7023] munmap(0x7f943d000000, 138412032 [pid 7027] munmap(0x7f943d000000, 138412032 [pid 7023] <... munmap resumed>) = 0 [pid 7027] <... munmap resumed>) = 0 [pid 7023] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] close(4 [pid 7023] close(4 [pid 7024] munmap(0x7f943d000000, 138412032 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./322/file1" [pid 7027] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7026] <... ioctl resumed>) = 0 [pid 7024] <... munmap resumed>) = 0 [pid 7023] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7027] ioctl(4, LOOP_SET_FD, 3 [pid 7024] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] getdents64(3, [pid 7026] close(3) = 0 [pid 7024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7023] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7026] close(4 [pid 7024] close(4 [pid 7023] <... exit_group resumed>) = ? [pid 5074] close(3 [pid 7026] <... close resumed>) = 0 [pid 7023] +++ exited with 0 +++ [pid 5074] <... close resumed>) = 0 [pid 7025] <... ioctl resumed>) = 0 [pid 5074] rmdir("./322" [pid 7026] mkdir("./file1", 0777 [pid 7025] close(3 [pid 7026] <... mkdir resumed>) = 0 [pid 7025] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7023, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] mkdir("./323", 0777 [pid 7026] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7025] close(4) = 0 [pid 7024] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./321/binderfs", [pid 7027] <... ioctl resumed>) = 0 [pid 7025] mkdir("./file1", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 247.401977][ T7025] loop0: detected capacity change from 0 to 1024 [ 247.408884][ T7026] loop2: detected capacity change from 0 to 1024 [ 247.429601][ T7027] loop4: detected capacity change from 0 to 1024 [pid 7027] close(3 [pid 7024] exit_group(0 [pid 5074] <... openat resumed>) = 3 [pid 5072] unlink("./321/binderfs" [pid 7025] <... mkdir resumed>) = 0 [pid 7026] <... mount resumed>) = 0 [pid 7025] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7024] <... exit_group resumed>) = ? [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... unlink resumed>) = 0 [pid 7026] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7027] <... close resumed>) = 0 [pid 7026] <... openat resumed>) = 3 [pid 7024] +++ exited with 0 +++ [pid 5072] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7026] chdir("./file1") = 0 [pid 7027] close(4 [pid 7026] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7025] <... mount resumed>) = 0 [pid 7027] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7024, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7027] mkdir("./file1", 0777 [pid 7026] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7025] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7027] <... mkdir resumed>) = 0 [pid 7026] truncate("./file1", 0 [pid 7025] <... openat resumed>) = 3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7027] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7025] chdir("./file1" [pid 7026] <... truncate resumed>) = 0 [pid 7025] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7026] memfd_create("syzkaller", 0 [pid 7025] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7026] <... memfd_create resumed>) = 4 [pid 7025] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5072] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./321/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./318/binderfs", [pid 5072] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] unlink("./318/binderfs" [pid 5072] getdents64(4, [pid 5076] <... unlink resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5076] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./321/file1") = 0 [pid 7026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7025] truncate("./file1", 0 [pid 7027] <... mount resumed>) = 0 [pid 5072] getdents64(3, [pid 7027] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7027] <... openat resumed>) = 3 [pid 5072] close(3) = 0 [pid 5072] rmdir("./321" [pid 7026] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... rmdir resumed>) = 0 [pid 7027] chdir("./file1" [pid 5072] mkdir("./322", 0777 [pid 7027] <... chdir resumed>) = 0 [pid 7025] <... truncate resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7027] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7026] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7025] memfd_create("syzkaller", 0 [pid 5074] close(3 [pid 7027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7025] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 7027] truncate("./file1", 0 [pid 7025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7027] <... truncate resumed>) = 0 [pid 7026] <... write resumed>) = 524288 [pid 7025] <... mmap resumed>) = 0x7f943d000000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... openat resumed>) = 3 [pid 7027] memfd_create("syzkaller", 0 [pid 5076] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7027] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./318/file1", [pid 7027] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7027] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7028 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4./strace-static-x86_64: Process 7028 attached [pid 7025] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./318/file1" [pid 7028] set_robust_list(0x555583d53660, 24 [pid 5076] <... rmdir resumed>) = 0 [pid 7026] munmap(0x7f943d000000, 138412032 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./318" [pid 7026] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7028] <... set_robust_list resumed>) = 0 [pid 5076] mkdir("./319", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 7028] chdir("./323" [pid 7026] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7028] <... chdir resumed>) = 0 [pid 7026] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7027] <... write resumed>) = 524288 [pid 7026] close(4 [pid 7028] <... prctl resumed>) = 0 [pid 7025] <... write resumed>) = 524288 [pid 5072] <... ioctl resumed>) = 0 [pid 7025] munmap(0x7f943d000000, 138412032 [pid 7028] setpgid(0, 0) = 0 [pid 7027] munmap(0x7f943d000000, 138412032 [pid 7025] <... munmap resumed>) = 0 [pid 7028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7027] <... munmap resumed>) = 0 [pid 5072] close(3) = 0 [pid 7028] <... openat resumed>) = 3 [pid 7025] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7028] write(3, "1000", 4) = 4 [pid 7028] close(3 [pid 7027] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7025] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7028] <... close resumed>) = 0 [pid 7027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7025] close(4 [pid 7028] symlink("/dev/binderfs", "./binderfs" [pid 7027] close(4 [pid 7025] <... close resumed>) = 0 [pid 7028] <... symlink resumed>) = 0 [pid 7026] <... close resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7029 ./strace-static-x86_64: Process 7029 attached [pid 7028] memfd_create("syzkaller", 0 [pid 7026] exit_group(0 [pid 7029] set_robust_list(0x555583d53660, 24 [pid 7028] <... memfd_create resumed>) = 3 [pid 7027] <... close resumed>) = 0 [pid 7026] <... exit_group resumed>) = ? [pid 7029] <... set_robust_list resumed>) = 0 [pid 7028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7029] chdir("./322") = 0 [pid 7029] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7028] <... mmap resumed>) = 0x7f943d000000 [pid 7027] exit_group(0 [pid 7029] <... prctl resumed>) = 0 [pid 7029] setpgid(0, 0) = 0 [pid 7027] <... exit_group resumed>) = ? [pid 7029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7025] exit_group(0 [pid 7029] <... openat resumed>) = 3 [pid 7027] +++ exited with 0 +++ [pid 7026] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 7029] write(3, "1000", 4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7027, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7029] <... write resumed>) = 4 [pid 7025] <... exit_group resumed>) = ? [pid 7025] +++ exited with 0 +++ [pid 7029] close(3) = 0 [pid 5075] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7029] symlink("/dev/binderfs", "./binderfs" [pid 7028] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7026, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7025, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7029] <... symlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7029] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 3 [pid 7029] <... memfd_create resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 7029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7029] <... mmap resumed>) = 0x7f943d000000 [pid 5075] getdents64(3, [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./321/binderfs") = 0 [pid 5075] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7028] munmap(0x7f943d000000, 138412032 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 5075] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7030 attached [pid 7028] <... munmap resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./321/file1", [pid 5073] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7030 [pid 5073] newfstatat(3, "", [pid 7028] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7030] set_robust_list(0x555583d53660, 24 [pid 7028] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 7030] <... set_robust_list resumed>) = 0 [pid 7029] <... write resumed>) = 524288 [pid 7028] ioctl(4, LOOP_SET_FD, 3 [pid 5075] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 5073] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5075] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./322/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7030] chdir("./319") = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./323/binderfs" [pid 7030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] getdents64(4, [pid 7030] <... prctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 7030] setpgid(0, 0 [pid 5073] unlink("./322/binderfs" [pid 7030] <... setpgid resumed>) = 0 [pid 5075] close(4 [pid 5071] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 7030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] rmdir("./321/file1" [pid 7029] munmap(0x7f943d000000, 138412032 [pid 7030] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7029] <... munmap resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7030] write(3, "1000", 4 [pid 5075] getdents64(3, [pid 7030] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7029] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] close(3 [pid 5071] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7029] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7029] ioctl(4, LOOP_SET_FD, 3 [pid 5075] rmdir("./321" [pid 7030] close(3 [pid 7028] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./323/file1", [pid 7030] <... close resumed>) = 0 [pid 7028] close(3 [pid 7030] symlink("/dev/binderfs", "./binderfs" [pid 7028] <... close resumed>) = 0 [pid 5075] mkdir("./322", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7028] close(4 [pid 7030] <... symlink resumed>) = 0 [pid 7028] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7028] mkdir("./file1", 0777 [pid 7030] memfd_create("syzkaller", 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7030] <... memfd_create resumed>) = 3 [pid 7028] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7028] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./323/file1" [pid 7030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 7029] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 7029] close(3 [pid 5073] newfstatat(AT_FDCWD, "./322/file1", [pid 5071] rmdir("./323" [pid 7029] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7029] close(4) = 0 [pid 5073] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] mkdir("./324", 0777 [pid 7029] mkdir("./file1", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7029] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 7029] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [ 247.705649][ T7028] loop3: detected capacity change from 0 to 1024 [ 247.737577][ T7029] loop1: detected capacity change from 0 to 1024 [pid 5073] close(4) = 0 [pid 7030] <... write resumed>) = 524288 [pid 7029] <... mount resumed>) = 0 [pid 7028] <... mount resumed>) = 0 [pid 7029] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... ioctl resumed>) = 0 [pid 5073] rmdir("./322/file1" [pid 7029] <... openat resumed>) = 3 [pid 7029] chdir("./file1") = 0 [pid 7029] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 7029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7029] truncate("./file1", 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 7028] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7030] munmap(0x7f943d000000, 138412032 [pid 7028] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 7029] <... truncate resumed>) = 0 [pid 7028] chdir("./file1" [pid 5073] rmdir("./322" [pid 7030] <... munmap resumed>) = 0 [pid 7028] <... chdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7029] memfd_create("syzkaller", 0 [pid 7028] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7029] <... memfd_create resumed>) = 4 [pid 7028] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 5073] mkdir("./323", 0777 [pid 7030] <... openat resumed>) = 4 [pid 7029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7028] truncate("./file1", 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 7029] <... mmap resumed>) = 0x7f943d000000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7029] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7032 attached [pid 7030] ioctl(4, LOOP_SET_FD, 3 [pid 7032] set_robust_list(0x555583d53660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7031 [pid 7032] <... set_robust_list resumed>) = 0 [pid 7032] chdir("./323" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7032 [pid 7032] <... chdir resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7031 attached [pid 7032] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7028] <... truncate resumed>) = 0 [pid 7031] set_robust_list(0x555583d53660, 24 [pid 7028] memfd_create("syzkaller", 0) = 4 [pid 7028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7031] <... set_robust_list resumed>) = 0 [pid 7031] chdir("./322" [pid 7032] <... prctl resumed>) = 0 [pid 7028] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7031] <... chdir resumed>) = 0 [pid 7031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7032] setpgid(0, 0 [pid 7031] <... prctl resumed>) = 0 [pid 7032] <... setpgid resumed>) = 0 [pid 7031] setpgid(0, 0) = 0 [pid 7032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7032] write(3, "1000", 4) = 4 [pid 7032] close(3 [pid 5071] close(3 [pid 7031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7032] <... close resumed>) = 0 [pid 7032] symlink("/dev/binderfs", "./binderfs" [pid 7029] <... write resumed>) = 524288 [pid 7028] <... write resumed>) = 524288 [pid 5071] <... close resumed>) = 0 [pid 7031] <... openat resumed>) = 3 [pid 7032] <... symlink resumed>) = 0 [pid 7031] write(3, "1000", 4 [pid 7030] <... ioctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7031] <... write resumed>) = 4 [pid 7030] close(3 [pid 7031] close(3 [pid 7032] memfd_create("syzkaller", 0 [pid 7030] <... close resumed>) = 0 [pid 7029] munmap(0x7f943d000000, 138412032 [pid 7031] <... close resumed>) = 0 [pid 7030] close(4 [pid 7029] <... munmap resumed>) = 0 [pid 7031] symlink("/dev/binderfs", "./binderfs" [pid 7030] <... close resumed>) = 0 [pid 7032] <... memfd_create resumed>) = 3 [pid 7031] <... symlink resumed>) = 0 [pid 7032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7030] mkdir("./file1", 0777 [pid 7029] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7031] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7033 attached [pid 7032] <... mmap resumed>) = 0x7f943d000000 [pid 7030] <... mkdir resumed>) = 0 [pid 7031] <... memfd_create resumed>) = 3 [pid 7029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7033] set_robust_list(0x555583d53660, 24 [pid 7031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7030] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [ 247.823592][ T7030] loop5: detected capacity change from 0 to 1024 [pid 7029] close(4 [pid 7031] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7033 [pid 7033] <... set_robust_list resumed>) = 0 [pid 7028] munmap(0x7f943d000000, 138412032) = 0 [pid 7033] chdir("./324" [pid 7031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7032] <... write resumed>) = 524288 [pid 7030] <... mount resumed>) = 0 [pid 7029] <... close resumed>) = 0 [pid 7028] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7029] exit_group(0 [pid 7028] close(4 [pid 7029] <... exit_group resumed>) = ? [pid 7028] <... close resumed>) = 0 [pid 7033] <... chdir resumed>) = 0 [pid 7030] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7029] +++ exited with 0 +++ [pid 7033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7030] <... openat resumed>) = 3 [pid 7033] <... prctl resumed>) = 0 [pid 7030] chdir("./file1" [pid 7033] setpgid(0, 0 [pid 7030] <... chdir resumed>) = 0 [pid 7033] <... setpgid resumed>) = 0 [pid 7030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7029, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7030] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7030] truncate("./file1", 0 [pid 7033] <... openat resumed>) = 3 [pid 7033] write(3, "1000", 4) = 4 [pid 5072] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7033] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7033] <... close resumed>) = 0 [pid 7030] <... truncate resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7033] symlink("/dev/binderfs", "./binderfs" [pid 7031] <... write resumed>) = 524288 [pid 7032] munmap(0x7f943d000000, 138412032 [pid 7030] memfd_create("syzkaller", 0 [pid 7032] <... munmap resumed>) = 0 [pid 7032] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7028] exit_group(0 [pid 5072] <... openat resumed>) = 3 [pid 7032] <... openat resumed>) = 4 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7032] ioctl(4, LOOP_SET_FD, 3 [pid 5072] newfstatat(AT_FDCWD, "./322/binderfs", [pid 7033] <... symlink resumed>) = 0 [pid 7031] munmap(0x7f943d000000, 138412032 [pid 7030] <... memfd_create resumed>) = 4 [pid 7028] <... exit_group resumed>) = ? [pid 7033] memfd_create("syzkaller", 0 [pid 7031] <... munmap resumed>) = 0 [pid 7030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7028] +++ exited with 0 +++ [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7033] <... memfd_create resumed>) = 3 [pid 7030] <... mmap resumed>) = 0x7f943d000000 [pid 5072] unlink("./322/binderfs" [pid 7031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7028, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] <... unlink resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5072] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... restart_syscall resumed>) = 0 [pid 5074] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7031] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7031] ioctl(4, LOOP_SET_FD, 3 [pid 5074] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7031] <... ioctl resumed>) = 0 [pid 7030] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5072] <... umount2 resumed>) = 0 [pid 7033] <... mmap resumed>) = 0x7f943d000000 [pid 7031] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./323/binderfs" [pid 7032] <... ioctl resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7031] <... close resumed>) = 0 [pid 7032] close(3 [pid 7031] close(4 [pid 7032] <... close resumed>) = 0 [pid 7032] close(4 [pid 5072] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7032] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7031] <... close resumed>) = 0 [pid 7032] mkdir("./file1", 0777 [pid 7031] mkdir("./file1", 0777 [pid 7032] <... mkdir resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./322/file1", [pid 7032] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7031] <... mkdir resumed>) = 0 [pid 7030] <... write resumed>) = 524288 [ 247.948093][ T7032] loop2: detected capacity change from 0 to 1024 [ 247.964445][ T7031] loop4: detected capacity change from 0 to 1024 [pid 5072] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7031] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7030] munmap(0x7f943d000000, 138412032 [pid 5072] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7030] <... munmap resumed>) = 0 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7031] <... mount resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7031] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7030] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7031] <... openat resumed>) = 3 [pid 5072] getdents64(4, [pid 5074] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(4 [pid 7031] chdir("./file1" [pid 5074] newfstatat(AT_FDCWD, "./323/file1", [pid 5072] <... close resumed>) = 0 [pid 7031] <... chdir resumed>) = 0 [pid 7032] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] rmdir("./322/file1" [pid 7033] <... write resumed>) = 524288 [pid 7031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7030] close(4 [pid 5074] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7032] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 7031] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7032] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 7032] chdir("./file1" [pid 5074] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7032] <... chdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 7031] truncate("./file1", 0 [pid 7032] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] close(3 [pid 7032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7032] truncate("./file1", 0 [pid 5074] getdents64(4, [pid 5072] rmdir("./322" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./323/file1" [pid 7030] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7033] munmap(0x7f943d000000, 138412032 [pid 7031] <... truncate resumed>) = 0 [pid 7030] exit_group(0 [pid 5072] mkdir("./323", 0777 [pid 7033] <... munmap resumed>) = 0 [pid 7031] memfd_create("syzkaller", 0 [pid 7032] <... truncate resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] <... mkdir resumed>) = 0 [pid 7031] <... memfd_create resumed>) = 4 [pid 7032] memfd_create("syzkaller", 0 [pid 7030] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7032] <... memfd_create resumed>) = 4 [pid 5074] close(3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7031] <... mmap resumed>) = 0x7f943d000000 [pid 7032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... close resumed>) = 0 [pid 7033] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 7032] <... mmap resumed>) = 0x7f943d000000 [pid 5074] rmdir("./323" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7033] ioctl(4, LOOP_SET_FD, 3 [pid 7031] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7030] +++ exited with 0 +++ [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./324", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7032] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7030, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7032] <... write resumed>) = 524288 [pid 7032] munmap(0x7f943d000000, 138412032 [pid 7033] <... ioctl resumed>) = 0 [pid 7031] <... write resumed>) = 524288 [pid 5076] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7033] close(3 [pid 5076] newfstatat(AT_FDCWD, "./319/binderfs", [pid 7033] <... close resumed>) = 0 [pid 7031] munmap(0x7f943d000000, 138412032 [pid 7032] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7031] <... munmap resumed>) = 0 [pid 5076] unlink("./319/binderfs" [pid 7033] close(4 [pid 5076] <... unlink resumed>) = 0 [pid 7033] <... close resumed>) = 0 [pid 7031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7032] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7033] mkdir("./file1", 0777 [pid 7031] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 7033] <... mkdir resumed>) = 0 [pid 7031] close(4 [pid 7033] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7032] close(4 [pid 5076] <... umount2 resumed>) = 0 [pid 5072] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 248.080071][ T7033] loop0: detected capacity change from 0 to 1024 [pid 5076] newfstatat(AT_FDCWD, "./319/file1", [pid 5072] <... close resumed>) = 0 [pid 7031] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7032] <... close resumed>) = 0 [pid 7031] exit_group(0 [pid 5076] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3./strace-static-x86_64: Process 7034 attached [pid 7032] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 7031] <... exit_group resumed>) = ? [pid 7032] <... exit_group resumed>) = ? [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7031] +++ exited with 0 +++ [pid 7032] +++ exited with 0 +++ [pid 7034] set_robust_list(0x555583d53660, 24) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7034 [pid 7034] chdir("./323" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7034] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7032, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7034] setpgid(0, 0 [pid 5076] newfstatat(4, "", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7031, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7034] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7033] <... mount resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7034] <... openat resumed>) = 3 [pid 7033] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7034] write(3, "1000", 4 [pid 5076] getdents64(4, [pid 7034] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7035 attached [pid 7034] close(3 [pid 7033] <... openat resumed>) = 3 [pid 5076] close(4 [pid 7035] set_robust_list(0x555583d53660, 24 [pid 7034] <... close resumed>) = 0 [pid 7033] chdir("./file1" [pid 5076] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7035 [pid 7035] <... set_robust_list resumed>) = 0 [pid 7034] symlink("/dev/binderfs", "./binderfs" [pid 7033] <... chdir resumed>) = 0 [pid 5076] rmdir("./319/file1" [pid 5075] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7035] chdir("./324" [pid 7033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7035] <... chdir resumed>) = 0 [pid 7034] <... symlink resumed>) = 0 [pid 7033] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7034] memfd_create("syzkaller", 0 [pid 7033] truncate("./file1", 0 [pid 5076] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7035] <... prctl resumed>) = 0 [pid 7034] <... memfd_create resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 7035] setpgid(0, 0 [pid 7034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 7035] <... setpgid resumed>) = 0 [pid 7034] <... mmap resumed>) = 0x7f943d000000 [pid 7033] <... truncate resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] getdents64(3, [pid 7035] <... openat resumed>) = 3 [pid 5075] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7035] write(3, "1000", 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7035] <... write resumed>) = 4 [pid 5076] rmdir("./319" [pid 5075] newfstatat(AT_FDCWD, "./322/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7035] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./323/binderfs", [pid 7035] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] unlink("./322/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7035] symlink("/dev/binderfs", "./binderfs" [pid 7033] memfd_create("syzkaller", 0 [pid 5076] mkdir("./320", 0777 [pid 5075] <... unlink resumed>) = 0 [pid 5073] unlink("./323/binderfs" [pid 7035] <... symlink resumed>) = 0 [pid 7033] <... memfd_create resumed>) = 4 [pid 5075] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 7034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7033] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = 0 [pid 7035] memfd_create("syzkaller", 0 [pid 7034] <... write resumed>) = 524288 [pid 7033] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7035] <... memfd_create resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 3 [pid 7034] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./323/file1", [pid 7034] <... munmap resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7034] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7034] <... openat resumed>) = 4 [pid 7033] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7034] ioctl(4, LOOP_SET_FD, 3 [pid 5075] newfstatat(AT_FDCWD, "./322/file1", [pid 7035] <... write resumed>) = 524288 [pid 5073] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7034] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 7034] close(3 [pid 5075] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7034] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7034] close(4 [pid 5075] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7035] munmap(0x7f943d000000, 138412032 [pid 7034] <... close resumed>) = 0 [pid 7033] munmap(0x7f943d000000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7035] <... munmap resumed>) = 0 [pid 7034] mkdir("./file1", 0777 [pid 7033] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] getdents64(4, [pid 7033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7034] <... mkdir resumed>) = 0 [pid 7033] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(4, "", [pid 5073] getdents64(4, [pid 7035] <... openat resumed>) = 4 [pid 7034] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7033] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5073] close(4 [pid 7035] ioctl(4, LOOP_SET_FD, 3 [pid 7033] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 7034] <... mount resumed>) = 0 [pid 5073] rmdir("./323/file1" [pid 7034] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 7034] chdir("./file1" [pid 5075] getdents64(4, [pid 5073] getdents64(3, [pid 7034] <... chdir resumed>) = 0 [pid 7034] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5075] close(4 [pid 5073] <... close resumed>) = 0 [pid 7034] truncate("./file1", 0 [pid 5075] <... close resumed>) = 0 [pid 5073] rmdir("./323" [pid 7033] exit_group(0 [pid 5075] rmdir("./322/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 7033] <... exit_group resumed>) = ? [pid 5075] <... rmdir resumed>) = 0 [pid 5073] mkdir("./324", 0777 [pid 7033] +++ exited with 0 +++ [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7033, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./322" [pid 7034] <... truncate resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7034] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7034] <... memfd_create resumed>) = 4 [pid 5076] close(3 [pid 5075] mkdir("./323", 0777 [pid 5071] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 7035] <... ioctl resumed>) = 0 [pid 7034] <... mmap resumed>) = 0x7f943d000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7035] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7035] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7035] close(4 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] newfstatat(3, "", [pid 7035] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7035] mkdir("./file1", 0777 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] getdents64(3, [pid 7035] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7035] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7036 attached ) = -1 EINVAL (Invalid argument) [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7036 [pid 5071] newfstatat(AT_FDCWD, "./324/binderfs", [ 248.254890][ T7034] loop1: detected capacity change from 0 to 1024 [ 248.289268][ T7035] loop3: detected capacity change from 0 to 1024 [pid 7036] set_robust_list(0x555583d53660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7036] <... set_robust_list resumed>) = 0 [pid 5071] unlink("./324/binderfs") = 0 [pid 5071] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7036] chdir("./320") = 0 [pid 7035] <... mount resumed>) = 0 [pid 7034] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7035] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7036] <... prctl resumed>) = 0 [pid 7035] <... openat resumed>) = 3 [pid 7034] <... write resumed>) = 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7036] setpgid(0, 0 [pid 7035] chdir("./file1") = 0 [pid 7035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7037 attached [pid 7036] <... setpgid resumed>) = 0 [pid 7035] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(3 [pid 5071] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] set_robust_list(0x555583d53660, 24 [pid 7036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7035] truncate("./file1", 0 [pid 7034] munmap(0x7f943d000000, 138412032 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7037 [pid 5073] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7037] <... set_robust_list resumed>) = 0 [pid 7035] <... truncate resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./324/file1", [pid 7037] chdir("./323" [pid 7035] memfd_create("syzkaller", 0 [pid 7034] <... munmap resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7037] <... chdir resumed>) = 0 [pid 7036] <... openat resumed>) = 3 [pid 7035] <... memfd_create resumed>) = 4 [pid 7034] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7038 attached [pid 7037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7036] write(3, "1000", 4 [pid 7035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7034] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7038] set_robust_list(0x555583d53660, 24 [pid 7037] <... prctl resumed>) = 0 [pid 7036] <... write resumed>) = 4 [pid 7035] <... mmap resumed>) = 0x7f943d000000 [pid 7034] close(4 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7038 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7038] <... set_robust_list resumed>) = 0 [pid 7037] setpgid(0, 0 [pid 7036] close(3 [pid 7035] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7038] chdir("./324" [pid 7037] <... setpgid resumed>) = 0 [pid 7036] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7036] symlink("/dev/binderfs", "./binderfs" [pid 7038] <... chdir resumed>) = 0 [pid 7037] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 4 [pid 7038] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7037] write(3, "1000", 4 [pid 7036] <... symlink resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7038] <... prctl resumed>) = 0 [pid 7037] <... write resumed>) = 4 [pid 7038] setpgid(0, 0 [pid 7037] close(3 [pid 7036] memfd_create("syzkaller", 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7038] <... setpgid resumed>) = 0 [pid 7037] <... close resumed>) = 0 [pid 7038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7037] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(4, [pid 7038] <... openat resumed>) = 3 [pid 7037] <... symlink resumed>) = 0 [pid 7036] <... memfd_create resumed>) = 3 [pid 7035] <... write resumed>) = 524288 [pid 7034] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7037] memfd_create("syzkaller", 0 [pid 7034] exit_group(0 [pid 7036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] getdents64(4, [pid 7034] <... exit_group resumed>) = ? [pid 7036] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7038] write(3, "1000", 4 [pid 7037] <... memfd_create resumed>) = 3 [pid 7038] <... write resumed>) = 4 [pid 7037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7038] close(3 [pid 7037] <... mmap resumed>) = 0x7f943d000000 [pid 7038] <... close resumed>) = 0 [pid 7037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7034] +++ exited with 0 +++ [pid 5071] close(4 [pid 7038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... close resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7034, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] rmdir("./324/file1" [pid 7038] memfd_create("syzkaller", 0) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 7038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] getdents64(3, [pid 7038] <... mmap resumed>) = 0x7f943d000000 [pid 5072] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 5072] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7035] munmap(0x7f943d000000, 138412032 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 7035] <... munmap resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 5071] rmdir("./324" [pid 7036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7037] <... write resumed>) = 524288 [pid 7035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7035] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7038] <... write resumed>) = 524288 [pid 7035] close(4 [pid 5072] getdents64(3, [pid 5071] mkdir("./325", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... mkdir resumed>) = 0 [pid 5072] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7036] <... write resumed>) = 524288 [pid 5072] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5071] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7037] munmap(0x7f943d000000, 138412032) = 0 [pid 7035] <... close resumed>) = 0 [pid 5072] unlink("./323/binderfs" [pid 7037] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7035] exit_group(0 [pid 5072] <... unlink resumed>) = 0 [pid 7037] ioctl(4, LOOP_SET_FD, 3 [pid 7036] munmap(0x7f943d000000, 138412032 [pid 7035] <... exit_group resumed>) = ? [pid 7038] munmap(0x7f943d000000, 138412032 [pid 5072] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7038] <... munmap resumed>) = 0 [pid 7037] <... ioctl resumed>) = 0 [pid 7036] <... munmap resumed>) = 0 [pid 7035] +++ exited with 0 +++ [pid 7038] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7037] close(3 [pid 7036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7038] ioctl(4, LOOP_SET_FD, 3 [pid 7037] <... close resumed>) = 0 [pid 7036] <... openat resumed>) = 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7035, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7037] close(4) = 0 [pid 7037] mkdir("./file1", 0777) = 0 [pid 7038] <... ioctl resumed>) = 0 [pid 7036] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7037] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7038] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... ioctl resumed>) = 0 [pid 7038] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./323/file1", [pid 5074] newfstatat(3, "", [pid 7038] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 5072] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7038] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7038] mkdir("./file1", 0777 [pid 5072] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7038] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7036] <... ioctl resumed>) = 0 [pid 7038] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7037] <... mount resumed>) = 0 [pid 5074] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] close(3 [pid 7037] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7036] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 7036] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 7037] <... openat resumed>) = 3 [pid 7036] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7037] chdir("./file1" [pid 7036] <... close resumed>) = 0 [ 248.472687][ T7037] loop4: detected capacity change from 0 to 1024 [ 248.488261][ T7038] loop2: detected capacity change from 0 to 1024 [ 248.508102][ T7036] loop5: detected capacity change from 0 to 1024 [pid 5074] unlink("./324/binderfs" [pid 5072] <... close resumed>) = 0 [pid 7038] <... mount resumed>) = 0 [pid 7037] <... chdir resumed>) = 0 [pid 7036] mkdir("./file1", 0777 [pid 5072] rmdir("./323/file1" [pid 7037] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7037] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] truncate("./file1", 0 [pid 7038] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7036] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7039 attached [pid 7038] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7039 [pid 7039] set_robust_list(0x555583d53660, 24 [pid 7038] chdir("./file1" [pid 7036] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7039] <... set_robust_list resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 7039] chdir("./325") = 0 [pid 7039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7039] setpgid(0, 0 [pid 7038] <... chdir resumed>) = 0 [pid 7039] <... setpgid resumed>) = 0 [pid 7038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7038] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... close resumed>) = 0 [pid 7039] <... openat resumed>) = 3 [pid 7038] truncate("./file1", 0 [pid 7037] <... truncate resumed>) = 0 [pid 5072] rmdir("./323") = 0 [pid 7037] memfd_create("syzkaller", 0 [pid 5072] mkdir("./324", 0777 [pid 7039] write(3, "1000", 4 [pid 7037] <... memfd_create resumed>) = 4 [pid 7039] <... write resumed>) = 4 [pid 5072] <... mkdir resumed>) = 0 [pid 7039] close(3 [pid 7037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7039] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7039] symlink("/dev/binderfs", "./binderfs" [pid 7038] <... truncate resumed>) = 0 [pid 7037] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 3 [pid 7039] <... symlink resumed>) = 0 [pid 7038] memfd_create("syzkaller", 0 [pid 7036] <... mount resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7039] memfd_create("syzkaller", 0 [pid 7038] <... memfd_create resumed>) = 4 [pid 7036] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7039] <... memfd_create resumed>) = 3 [pid 7039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7036] <... openat resumed>) = 3 [pid 7039] <... mmap resumed>) = 0x7f943d000000 [pid 7038] <... mmap resumed>) = 0x7f943d000000 [pid 7036] chdir("./file1" [pid 7038] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7036] <... chdir resumed>) = 0 [pid 7036] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7036] truncate("./file1", 0 [pid 5074] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7038] <... write resumed>) = 524288 [pid 5074] newfstatat(AT_FDCWD, "./324/file1", [pid 7039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7039] <... write resumed>) = 524288 [pid 7037] <... write resumed>) = 524288 [pid 7036] <... truncate resumed>) = 0 [pid 5074] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] munmap(0x7f943d000000, 138412032 [pid 7036] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7036] <... memfd_create resumed>) = 4 [pid 7036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7037] <... munmap resumed>) = 0 [pid 7036] <... mmap resumed>) = 0x7f943d000000 [pid 5074] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7036] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 7038] munmap(0x7f943d000000, 138412032 [pid 7037] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7038] <... munmap resumed>) = 0 [pid 7037] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(4, [pid 7037] close(4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] getdents64(4, [pid 5072] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7038] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7038] close(4 [pid 5074] close(4 [pid 7037] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./324/file1") = 0 [pid 5072] close(3 [pid 7036] <... write resumed>) = 524288 [pid 5072] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7039] munmap(0x7f943d000000, 138412032 [pid 7037] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7039] <... munmap resumed>) = 0 [pid 7039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7038] <... close resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7040 [pid 5074] close(3) = 0 ./strace-static-x86_64: Process 7040 attached [pid 7039] ioctl(4, LOOP_SET_FD, 3 [pid 7038] exit_group(0 [pid 7037] <... exit_group resumed>) = ? [pid 5074] rmdir("./324" [pid 7040] set_robust_list(0x555583d53660, 24 [pid 7038] <... exit_group resumed>) = ? [pid 7037] +++ exited with 0 +++ [pid 7040] <... set_robust_list resumed>) = 0 [pid 7038] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7037, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... rmdir resumed>) = 0 [pid 7040] chdir("./324" [pid 7036] munmap(0x7f943d000000, 138412032 [pid 5074] mkdir("./325", 0777 [pid 7036] <... munmap resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7038, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] <... chdir resumed>) = 0 [pid 7036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7040] <... prctl resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 7040] setpgid(0, 0 [pid 5075] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 7040] <... setpgid resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 7040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7036] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 7036] close(4 [pid 7040] <... openat resumed>) = 3 [pid 7036] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] getdents64(3, [pid 7039] <... ioctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7039] close(3 [pid 5075] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] write(3, "1000", 4 [pid 5073] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7039] <... close resumed>) = 0 [pid 7039] close(4 [pid 7040] <... write resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7040] close(3) = 0 [pid 7039] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7039] mkdir("./file1", 0777) = 0 [pid 7039] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7040] symlink("/dev/binderfs", "./binderfs" [pid 5075] unlink("./323/binderfs" [pid 5073] newfstatat(AT_FDCWD, "./324/binderfs", [pid 7040] <... symlink resumed>) = 0 [pid 7040] memfd_create("syzkaller", 0) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] unlink("./324/binderfs") = 0 [pid 7040] <... mmap resumed>) = 0x7f943d000000 [pid 5073] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 7040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7039] <... mount resumed>) = 0 [pid 5075] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [ 248.658166][ T7039] loop0: detected capacity change from 0 to 1024 [pid 7039] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7036] exit_group(0 [pid 7039] <... openat resumed>) = 3 [pid 7036] <... exit_group resumed>) = ? [pid 7039] chdir("./file1" [pid 7036] +++ exited with 0 +++ [pid 7039] <... chdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7036, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7039] truncate("./file1", 0 [pid 5076] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./324/file1", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7040] <... write resumed>) = 524288 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] newfstatat(AT_FDCWD, "./323/file1", [pid 7040] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7040] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5073] newfstatat(4, "", [pid 7040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7039] <... truncate resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7040] <... openat resumed>) = 4 [pid 7039] memfd_create("syzkaller", 0 [pid 5076] unlink("./320/binderfs" [pid 5075] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 7040] ioctl(4, LOOP_SET_FD, 3 [pid 7039] <... memfd_create resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 7039] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7039] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(3 [pid 5073] close(4 [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] rmdir("./324/file1" [pid 5075] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7041 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 ./strace-static-x86_64: Process 7041 attached [pid 5075] <... openat resumed>) = 4 [pid 5073] rmdir("./324") = 0 [pid 7041] set_robust_list(0x555583d53660, 24 [pid 5075] newfstatat(4, "", [pid 7041] <... set_robust_list resumed>) = 0 [pid 5073] mkdir("./325", 0777 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 7041] chdir("./325" [pid 5075] getdents64(4, [pid 7041] <... chdir resumed>) = 0 [pid 7039] <... write resumed>) = 524288 [pid 5076] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7040] <... ioctl resumed>) = 0 [pid 7040] close(3 [pid 7041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7040] <... close resumed>) = 0 [pid 7040] close(4 [pid 7041] <... prctl resumed>) = 0 [pid 7040] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7040] mkdir("./file1", 0777 [pid 5073] <... openat resumed>) = 3 [pid 7041] setpgid(0, 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7041] <... setpgid resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7040] <... mkdir resumed>) = 0 [pid 7041] write(3, "1000", 4) = 4 [pid 7041] close(3) = 0 [pid 7041] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7041] memfd_create("syzkaller", 0 [pid 7040] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 7041] <... memfd_create resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./320/file1", [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(4 [pid 5076] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7039] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./323/file1" [pid 7041] <... mmap resumed>) = 0x7f943d000000 [pid 7039] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 7039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7039] close(4) = 0 [ 248.751804][ T7040] loop1: detected capacity change from 0 to 1024 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7040] <... mount resumed>) = 0 [pid 7039] exit_group(0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7039] <... exit_group resumed>) = ? [pid 5075] close(3 [pid 7040] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7039] +++ exited with 0 +++ [pid 5076] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7041] <... write resumed>) = 524288 [pid 7040] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] rmdir("./323" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7039, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7040] chdir("./file1" [pid 5076] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5071] umount2("./325", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] mkdir("./324", 0777 [pid 7040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] close(4 [pid 7041] munmap(0x7f943d000000, 138412032 [pid 5076] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7041] <... munmap resumed>) = 0 [pid 7040] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] rmdir("./320/file1" [pid 5075] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7040] truncate("./file1", 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5076] <... rmdir resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 5076] getdents64(3, [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7040] <... truncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] umount2("./325/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7041] <... openat resumed>) = 4 [pid 7040] <... memfd_create resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7041] ioctl(4, LOOP_SET_FD, 3 [pid 5076] rmdir("./320" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7042 [pid 5071] newfstatat(AT_FDCWD, "./325/binderfs", [pid 7040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./325/binderfs"./strace-static-x86_64: Process 7042 attached [pid 7040] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... unlink resumed>) = 0 [pid 7042] set_robust_list(0x555583d53660, 24 [pid 5071] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7042] <... set_robust_list resumed>) = 0 [pid 5076] mkdir("./321", 0777 [pid 7042] chdir("./325") = 0 [pid 7042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7042] setpgid(0, 0) = 0 [pid 7042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7042] write(3, "1000", 4) = 4 [pid 7042] close(3) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7042] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7042] <... symlink resumed>) = 0 [pid 7041] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7042] memfd_create("syzkaller", 0 [pid 7041] close(3 [pid 7040] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./325/file1", [pid 7042] <... memfd_create resumed>) = 3 [pid 7041] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7041] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7042] <... mmap resumed>) = 0x7f943d000000 [pid 7041] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7041] mkdir("./file1", 0777) = 0 [pid 5071] openat(AT_FDCWD, "./325/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", [pid 7041] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./325/file1") = 0 [pid 7041] <... mount resumed>) = 0 [pid 7040] <... write resumed>) = 524288 [pid 5071] getdents64(3, [pid 7041] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7041] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 7041] chdir("./file1") = 0 [pid 5071] close(3 [pid 7041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 7041] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] rmdir("./325") = 0 [pid 7041] truncate("./file1", 0) = 0 [pid 7041] memfd_create("syzkaller", 0 [pid 5071] mkdir("./326", 0777 [pid 7041] <... memfd_create resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [ 248.859046][ T7041] loop3: detected capacity change from 0 to 1024 [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7041] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7040] munmap(0x7f943d000000, 138412032 [pid 5075] close(3 [pid 5071] <... openat resumed>) = 3 [pid 7042] <... write resumed>) = 524288 [pid 7040] <... munmap resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7040] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7042] munmap(0x7f943d000000, 138412032 [pid 7040] close(4./strace-static-x86_64: Process 7043 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7043 [pid 7042] <... munmap resumed>) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7043] set_robust_list(0x555583d53660, 24 [pid 7042] ioctl(4, LOOP_SET_FD, 3 [pid 7041] <... write resumed>) = 524288 [pid 7040] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7043] <... set_robust_list resumed>) = 0 [pid 7042] <... ioctl resumed>) = 0 [pid 7041] munmap(0x7f943d000000, 138412032 [pid 7040] exit_group(0 [pid 7043] chdir("./324" [pid 7041] <... munmap resumed>) = 0 [pid 7040] <... exit_group resumed>) = ? [pid 7043] <... chdir resumed>) = 0 [pid 7042] close(3 [pid 7040] +++ exited with 0 +++ [pid 5076] close(3 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7043] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7040, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7043] <... prctl resumed>) = 0 [pid 7042] <... close resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7043] setpgid(0, 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7043] <... setpgid resumed>) = 0 [pid 7043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7042] close(4 [pid 7041] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7042] <... close resumed>) = 0 [pid 7041] close(4 [pid 7043] <... openat resumed>) = 3 [pid 5072] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7043] write(3, "1000", 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7043] <... write resumed>) = 4 [pid 7042] mkdir("./file1", 0777 [pid 5072] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7043] close(3 [pid 7042] <... mkdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7044 [pid 7043] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7044 attached [pid 7043] symlink("/dev/binderfs", "./binderfs" [pid 7042] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7041] <... close resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 7044] set_robust_list(0x555583d53660, 24 [pid 7043] <... symlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7044] <... set_robust_list resumed>) = 0 [pid 7043] memfd_create("syzkaller", 0 [pid 5072] getdents64(3, [ 248.940084][ T7042] loop2: detected capacity change from 0 to 1024 [pid 5071] close(3 [pid 7044] chdir("./321" [pid 7043] <... memfd_create resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... close resumed>) = 0 [pid 7043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7044] <... chdir resumed>) = 0 [pid 7043] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./324/binderfs", ./strace-static-x86_64: Process 7045 attached [pid 7044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7045 [pid 7044] <... prctl resumed>) = 0 [pid 5072] unlink("./324/binderfs") = 0 [pid 7045] set_robust_list(0x555583d53660, 24 [pid 7044] setpgid(0, 0 [pid 5072] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7045] <... set_robust_list resumed>) = 0 [pid 7044] <... setpgid resumed>) = 0 [pid 7045] chdir("./326" [pid 7044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7045] <... chdir resumed>) = 0 [pid 7045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7044] <... openat resumed>) = 3 [pid 7042] <... mount resumed>) = 0 [pid 7043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7042] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7041] exit_group(0 [pid 7045] setpgid(0, 0) = 0 [pid 7044] write(3, "1000", 4 [pid 7042] <... openat resumed>) = 3 [pid 7044] <... write resumed>) = 4 [pid 7042] chdir("./file1" [pid 7041] <... exit_group resumed>) = ? [pid 7045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7044] close(3 [pid 7042] <... chdir resumed>) = 0 [pid 7041] +++ exited with 0 +++ [pid 5072] <... umount2 resumed>) = 0 [pid 7044] <... close resumed>) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7045] <... openat resumed>) = 3 [pid 7044] symlink("/dev/binderfs", "./binderfs" [pid 7042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7041, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7044] <... symlink resumed>) = 0 [pid 7042] truncate("./file1", 0 [pid 5074] umount2("./325", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7044] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7042] <... truncate resumed>) = 0 [pid 5074] umount2("./325/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./324/file1", [pid 7044] <... memfd_create resumed>) = 3 [pid 7042] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7045] write(3, "1000", 4 [pid 7044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7042] <... memfd_create resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./325/binderfs", [pid 5072] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7045] <... write resumed>) = 4 [pid 7044] <... mmap resumed>) = 0x7f943d000000 [pid 7042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7042] <... mmap resumed>) = 0x7f943d000000 [pid 5074] unlink("./325/binderfs" [pid 5072] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7042] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7045] close(3 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5074] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7045] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 7045] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7045] <... symlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./324/file1") = 0 [pid 5072] getdents64(3, [pid 7044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7045] memfd_create("syzkaller", 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 7045] <... memfd_create resumed>) = 3 [pid 7043] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7043] munmap(0x7f943d000000, 138412032 [pid 7045] <... mmap resumed>) = 0x7f943d000000 [pid 7043] <... munmap resumed>) = 0 [pid 7042] <... write resumed>) = 524288 [pid 5072] rmdir("./324") = 0 [pid 5072] mkdir("./325", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] newfstatat(AT_FDCWD, "./325/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] openat(AT_FDCWD, "./325/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7043] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7043] ioctl(4, LOOP_SET_FD, 3 [pid 5074] getdents64(4, [pid 7042] munmap(0x7f943d000000, 138412032 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7042] <... munmap resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./325/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] rmdir("./325") = 0 [pid 7042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7042