./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2077499792 <...> 4 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./300/file1") = 0 [pid 6888] <... mount resumed>) = 0 [pid 6887] <... write resumed>) = 524288 [pid 5075] newfstatat(4, "", [pid 5074] <... ioctl resumed>) = 0 [pid 5073] getdents64(3, [pid 6888] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6888] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5073] close(3 [pid 6888] chdir("./file1" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 6888] <... chdir resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] rmdir("./300" [pid 5071] getdents64(3, [pid 6888] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6887] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6888] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6887] <... munmap resumed>) = 0 [ 235.617343][ T6888] loop1: detected capacity change from 0 to 1024 [pid 6888] truncate("./file1", 0 [pid 6887] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] close(4 [pid 5074] <... close resumed>) = 0 [pid 5071] close(3 [pid 6887] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6887] close(4 [pid 5073] mkdir("./301", 0777 [pid 5075] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 6887] <... close resumed>) = 0 [pid 5075] rmdir("./299/file1" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./300" [pid 5073] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6889 attached [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6889 [pid 6887] exit_group(0) = ? [pid 6889] set_robust_list(0x555583d53660, 24) = 0 [pid 6888] <... truncate resumed>) = 0 [pid 6887] +++ exited with 0 +++ [pid 6889] chdir("./301" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6887, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6889] <... chdir resumed>) = 0 [pid 6888] memfd_create("syzkaller", 0 [pid 6889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6888] <... memfd_create resumed>) = 4 [pid 6889] setpgid(0, 0) = 0 [pid 6888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./296", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6888] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./301", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./296", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(3 [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] rmdir("./299" [pid 5076] umount2("./296/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6889] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 6889] write(3, "1000", 4 [pid 5076] newfstatat(AT_FDCWD, "./296/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6889] <... write resumed>) = 4 [pid 5076] unlink("./296/binderfs" [pid 6889] close(3) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] mkdir("./300", 0777 [pid 6889] symlink("/dev/binderfs", "./binderfs" [pid 6888] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./296/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 6889] <... symlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6889] memfd_create("syzkaller", 0 [pid 6888] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 6889] <... memfd_create resumed>) = 3 [pid 6888] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./296/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5073] <... ioctl resumed>) = 0 [pid 6888] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6889] <... mmap resumed>) = 0x7f943d000000 [pid 6889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(AT_FDCWD, "./296/file1", [pid 5073] close(3 [pid 6888] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6888] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] umount2("./296/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./296/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6888] <... close resumed>) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6890 [pid 5076] close(4) = 0 [pid 5076] rmdir("./296/file1") = 0 ./strace-static-x86_64: Process 6890 attached [pid 5076] getdents64(3, [pid 6890] set_robust_list(0x555583d53660, 24 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6890] <... set_robust_list resumed>) = 0 [pid 5076] close(3 [pid 6890] chdir("./301" [pid 6889] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 5071] close(3 [pid 6888] exit_group(0 [pid 5075] <... ioctl resumed>) = 0 [pid 6888] <... exit_group resumed>) = ? [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6890] <... chdir resumed>) = 0 [pid 5076] rmdir("./296") = 0 [pid 6890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] mkdir("./297", 0777 [pid 6890] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6891 attached [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6891 [pid 6891] set_robust_list(0x555583d53660, 24) = 0 [pid 6891] chdir("./301") = 0 [pid 6888] +++ exited with 0 +++ [pid 6890] setpgid(0, 0 [pid 6891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6891] setpgid(0, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6891] <... setpgid resumed>) = 0 [pid 6891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6890] <... setpgid resumed>) = 0 [pid 6891] <... openat resumed>) = 3 [pid 6890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6888, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6891] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6891] <... write resumed>) = 4 [pid 6890] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6891] close(3 [pid 6890] write(3, "1000", 4 [pid 5076] <... openat resumed>) = 3 [pid 6890] <... write resumed>) = 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6892 attached [pid 6891] <... close resumed>) = 0 [pid 6890] close(3 [pid 5072] <... openat resumed>) = 3 [pid 6892] set_robust_list(0x555583d53660, 24 [pid 6891] symlink("/dev/binderfs", "./binderfs" [pid 6892] <... set_robust_list resumed>) = 0 [pid 6891] <... symlink resumed>) = 0 [pid 6892] chdir("./300") = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6892 [pid 5072] newfstatat(3, "", [pid 6892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6891] memfd_create("syzkaller", 0 [pid 6892] <... prctl resumed>) = 0 [pid 6891] <... memfd_create resumed>) = 3 [pid 6892] setpgid(0, 0 [pid 6891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6892] <... setpgid resumed>) = 0 [pid 6891] <... mmap resumed>) = 0x7f943d000000 [pid 6892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6890] <... close resumed>) = 0 [pid 6889] munmap(0x7f943d000000, 138412032 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6890] symlink("/dev/binderfs", "./binderfs" [pid 5072] getdents64(3, [pid 6892] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6890] <... symlink resumed>) = 0 [pid 5072] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6892] write(3, "1000", 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6890] memfd_create("syzkaller", 0 [pid 5072] newfstatat(AT_FDCWD, "./299/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6889] <... munmap resumed>) = 0 [pid 6892] <... write resumed>) = 4 [pid 6890] <... memfd_create resumed>) = 3 [pid 6889] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] unlink("./299/binderfs" [pid 6892] close(3 [pid 6890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6889] <... openat resumed>) = 4 [pid 6892] <... close resumed>) = 0 [pid 6890] <... mmap resumed>) = 0x7f943d000000 [pid 6889] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... unlink resumed>) = 0 [pid 6892] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6892] memfd_create("syzkaller", 0) = 3 [pid 6892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6891] <... write resumed>) = 524288 [pid 6891] munmap(0x7f943d000000, 138412032 [pid 6890] <... write resumed>) = 524288 [pid 6891] <... munmap resumed>) = 0 [pid 6891] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6891] ioctl(4, LOOP_SET_FD, 3 [pid 6889] <... ioctl resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6892] <... write resumed>) = 524288 [pid 6890] munmap(0x7f943d000000, 138412032 [pid 6889] close(3) = 0 [pid 6892] munmap(0x7f943d000000, 138412032) = 0 [pid 6889] close(4) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6892] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 235.820286][ T6889] loop3: detected capacity change from 0 to 1024 [ 235.849577][ T6891] loop0: detected capacity change from 0 to 1024 [pid 6892] ioctl(4, LOOP_SET_FD, 3 [pid 6890] <... munmap resumed>) = 0 [pid 6889] mkdir("./file1", 0777 [pid 5076] close(3 [pid 5072] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6890] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5076] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6890] ioctl(4, LOOP_SET_FD, 3 [pid 6889] <... mkdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] newfstatat(AT_FDCWD, "./299/file1", [pid 6891] <... ioctl resumed>) = 0 [pid 6891] close(3) = 0 [pid 6891] close(4) = 0 [pid 6891] mkdir("./file1", 0777) = 0 [pid 6891] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6893 attached [pid 6889] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6893 [pid 5072] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6893] set_robust_list(0x555583d53660, 24) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6893] chdir("./297" [pid 5072] openat(AT_FDCWD, "./299/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6893] <... chdir resumed>) = 0 [pid 6891] <... mount resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 6893] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6892] <... ioctl resumed>) = 0 [pid 6891] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] newfstatat(4, "", [pid 6893] <... prctl resumed>) = 0 [pid 6892] close(3 [pid 6891] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6893] setpgid(0, 0 [pid 6892] <... close resumed>) = 0 [pid 6891] chdir("./file1" [pid 5072] getdents64(4, [pid 6893] <... setpgid resumed>) = 0 [pid 6892] close(4 [pid 6891] <... chdir resumed>) = 0 [pid 6890] <... ioctl resumed>) = 0 [pid 6889] <... mount resumed>) = 0 [pid 6893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6892] <... close resumed>) = 0 [pid 6891] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 235.868057][ T6892] loop4: detected capacity change from 0 to 1024 [ 235.879822][ T6890] loop2: detected capacity change from 0 to 1024 [pid 6890] close(3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6893] <... openat resumed>) = 3 [pid 6892] mkdir("./file1", 0777 [pid 6891] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6890] <... close resumed>) = 0 [pid 6889] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] getdents64(4, [pid 6893] write(3, "1000", 4 [pid 6892] <... mkdir resumed>) = 0 [pid 6891] truncate("./file1", 0 [pid 6890] close(4 [pid 6889] <... openat resumed>) = 3 [pid 6893] <... write resumed>) = 4 [pid 6892] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6893] close(3 [pid 6890] <... close resumed>) = 0 [pid 6889] chdir("./file1" [pid 5072] close(4 [pid 6893] <... close resumed>) = 0 [pid 6890] mkdir("./file1", 0777 [pid 6889] <... chdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6893] symlink("/dev/binderfs", "./binderfs" [pid 5072] rmdir("./299/file1" [pid 6893] <... symlink resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6893] memfd_create("syzkaller", 0 [pid 6889] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] getdents64(3, [pid 6893] <... memfd_create resumed>) = 3 [pid 6891] <... truncate resumed>) = 0 [pid 6890] <... mkdir resumed>) = 0 [pid 6889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6891] memfd_create("syzkaller", 0 [pid 6890] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6889] truncate("./file1", 0 [pid 5072] close(3 [pid 6893] <... mmap resumed>) = 0x7f943d000000 [pid 6891] <... memfd_create resumed>) = 4 [pid 6893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... close resumed>) = 0 [pid 6891] <... mmap resumed>) = 0x7f943d000000 [pid 5072] rmdir("./299" [pid 6891] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./300", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6892] <... mount resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6892] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6889] <... truncate resumed>) = 0 [pid 6892] chdir("./file1" [pid 6891] <... write resumed>) = 524288 [pid 6890] <... mount resumed>) = 0 [pid 6889] memfd_create("syzkaller", 0 [pid 6891] munmap(0x7f943d000000, 138412032 [pid 6893] <... write resumed>) = 524288 [pid 6892] <... chdir resumed>) = 0 [pid 6890] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6889] <... memfd_create resumed>) = 4 [pid 6893] munmap(0x7f943d000000, 138412032 [pid 6892] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6891] <... munmap resumed>) = 0 [pid 6890] <... openat resumed>) = 3 [pid 6889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6891] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6891] close(4 [pid 6893] <... munmap resumed>) = 0 [pid 6892] truncate("./file1", 0 [pid 6890] chdir("./file1" [pid 6889] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6890] <... chdir resumed>) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6890] truncate("./file1", 0 [pid 6893] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6893] ioctl(4, LOOP_SET_FD, 3 [pid 6890] <... truncate resumed>) = 0 [pid 6892] <... truncate resumed>) = 0 [pid 6891] <... close resumed>) = 0 [pid 6890] memfd_create("syzkaller", 0) = 4 [pid 6889] <... write resumed>) = 524288 [pid 6891] exit_group(0) = ? [pid 6890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6892] memfd_create("syzkaller", 0 [pid 6889] munmap(0x7f943d000000, 138412032 [pid 6893] <... ioctl resumed>) = 0 [pid 6892] <... memfd_create resumed>) = 4 [pid 6891] +++ exited with 0 +++ [pid 6890] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... ioctl resumed>) = 0 [pid 6893] close(3 [pid 6892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6889] <... munmap resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6891, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6893] <... close resumed>) = 0 [pid 6892] <... mmap resumed>) = 0x7f943d000000 [pid 5072] close(3 [pid 6893] close(4 [pid 5072] <... close resumed>) = 0 [pid 6893] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6893] mkdir("./file1", 0777 [pid 5071] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6893] <... mkdir resumed>) = 0 [pid 6890] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6889] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6892] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6893] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6889] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6889] close(4 [pid 5071] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6890] <... write resumed>) = 524288 [pid 6889] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6894 attached [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6894 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6894] set_robust_list(0x555583d53660, 24 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./301/binderfs", [pid 6894] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6894] chdir("./300" [pid 5071] unlink("./301/binderfs" [pid 6894] <... chdir resumed>) = 0 [pid 6890] munmap(0x7f943d000000, 138412032 [pid 6892] <... write resumed>) = 524288 [pid 5071] <... unlink resumed>) = 0 [pid 6894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6892] munmap(0x7f943d000000, 138412032 [pid 6890] <... munmap resumed>) = 0 [ 236.026107][ T6893] loop5: detected capacity change from 0 to 1024 [pid 5071] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6894] <... prctl resumed>) = 0 [pid 6893] <... mount resumed>) = 0 [pid 6894] setpgid(0, 0 [pid 6893] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6892] <... munmap resumed>) = 0 [pid 6890] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6894] <... setpgid resumed>) = 0 [pid 6892] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6890] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6889] exit_group(0 [pid 6894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6893] <... openat resumed>) = 3 [pid 6892] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6890] close(4 [pid 6889] <... exit_group resumed>) = ? [pid 6894] <... openat resumed>) = 3 [pid 6893] chdir("./file1" [pid 6892] close(4 [pid 6889] +++ exited with 0 +++ [pid 6894] write(3, "1000", 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6889, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6893] <... chdir resumed>) = 0 [pid 6894] <... write resumed>) = 4 [pid 6893] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6894] close(3 [pid 6893] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6894] <... close resumed>) = 0 [pid 6893] truncate("./file1", 0 [pid 5074] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 6894] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6890] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6894] <... symlink resumed>) = 0 [pid 6890] exit_group(0 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6893] <... truncate resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5071] newfstatat(AT_FDCWD, "./301/file1", [pid 6894] memfd_create("syzkaller", 0 [pid 6893] memfd_create("syzkaller", 0 [pid 6892] <... close resumed>) = 0 [pid 6890] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 6893] <... memfd_create resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6894] <... memfd_create resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6893] <... mmap resumed>) = 0x7f943d000000 [pid 6892] exit_group(0 [pid 5074] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6894] <... mmap resumed>) = 0x7f943d000000 [pid 6890] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 4 [pid 6892] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./301/binderfs", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6890, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] newfstatat(4, "", [pid 5073] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] unlink("./301/binderfs" [pid 5073] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 6893] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(3, "", [pid 5071] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5071] close(4 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... close resumed>) = 0 [pid 6892] +++ exited with 0 +++ [pid 5071] rmdir("./301/file1" [pid 6894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6893] <... write resumed>) = 524288 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6892, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5075] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 6894] <... write resumed>) = 524288 [pid 6893] munmap(0x7f943d000000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 6894] munmap(0x7f943d000000, 138412032 [pid 5075] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./301/binderfs", [pid 6894] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6894] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6893] <... munmap resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] newfstatat(AT_FDCWD, "./301/file1", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] close(3 [pid 6894] <... openat resumed>) = 4 [pid 6893] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./301/binderfs" [pid 5071] <... close resumed>) = 0 [pid 6894] ioctl(4, LOOP_SET_FD, 3 [pid 6893] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 5074] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./301" [pid 5073] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6893] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 6893] <... close resumed>) = 0 [pid 5075] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5071] mkdir("./302", 0777) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6894] <... ioctl resumed>) = 0 [pid 6893] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(4, "", [pid 5071] <... openat resumed>) = 3 [pid 6894] close(3 [pid 6893] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./300/binderfs", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6894] <... close resumed>) = 0 [pid 6893] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6894] close(4 [pid 5075] unlink("./300/binderfs" [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6893, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./301/file1", [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6894] <... close resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6894] mkdir("./file1", 0777 [pid 5074] getdents64(4, [pid 5073] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6894] <... mkdir resumed>) = 0 [pid 5076] umount2("./297", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5074] close(4 [pid 5073] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./301/file1" [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6894] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] openat(AT_FDCWD, "./297", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 5073] getdents64(4, [pid 5076] newfstatat(3, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(AT_FDCWD, "./300/file1", [pid 5074] close(3 [pid 5073] getdents64(4, [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] rmdir("./301" [pid 5073] close(4 [pid 5076] umount2("./297/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./300/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./297/binderfs", [pid 5074] mkdir("./302", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] rmdir("./301/file1" [pid 5076] unlink("./297/binderfs" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5073] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./300/file1" [pid 5073] close(3) = 0 [pid 5075] <... rmdir resumed>) = 0 [ 236.161855][ T6894] loop1: detected capacity change from 0 to 1024 [pid 5073] rmdir("./301") = 0 [pid 6894] <... mount resumed>) = 0 [pid 5076] umount2("./297/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 6894] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] mkdir("./302", 0777 [pid 6894] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 6894] chdir("./file1" [pid 5075] <... close resumed>) = 0 [pid 6894] <... chdir resumed>) = 0 [pid 5075] rmdir("./300" [pid 6894] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] mkdir("./301", 0777) = 0 [pid 6894] truncate("./file1", 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6894] <... truncate resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6894] memfd_create("syzkaller", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6894] <... memfd_create resumed>) = 4 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] close(3 [pid 5076] umount2("./297/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] newfstatat(AT_FDCWD, "./297/file1", [pid 6894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6895 attached [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6895 [pid 6895] set_robust_list(0x555583d53660, 24 [pid 5076] umount2("./297/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6895] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6894] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "./297/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6895] chdir("./302") = 0 [pid 6894] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [pid 5074] close(3 [pid 6895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6895] <... prctl resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 6895] setpgid(0, 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6895] <... setpgid resumed>) = 0 [pid 6895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6895] <... openat resumed>) = 3 [pid 5076] close(4) = 0 [pid 5076] rmdir("./297/file1" [pid 6895] write(3, "1000", 4./strace-static-x86_64: Process 6896 attached [pid 6894] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 6896] set_robust_list(0x555583d53660, 24) = 0 [pid 6896] chdir("./302" [pid 5075] <... ioctl resumed>) = 0 [pid 6896] <... chdir resumed>) = 0 [pid 6894] munmap(0x7f943d000000, 138412032 [pid 6896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6895] <... write resumed>) = 4 [pid 6894] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6896 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6896] <... prctl resumed>) = 0 [pid 6895] close(3 [pid 6894] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 6895] <... close resumed>) = 0 [pid 5075] close(3 [pid 6896] setpgid(0, 0 [pid 6895] symlink("/dev/binderfs", "./binderfs" [pid 6894] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] close(3 [pid 6896] <... setpgid resumed>) = 0 [pid 6895] <... symlink resumed>) = 0 [pid 6894] close(4 [pid 5073] <... close resumed>) = 0 [pid 6896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] rmdir("./297" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6894] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6896] <... openat resumed>) = 3 [pid 6896] write(3, "1000", 4) = 4 [pid 6896] close(3) = 0 [pid 6896] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6897 [pid 6896] memfd_create("syzkaller", 0) = 3 [pid 6896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 6897 attached [pid 6897] set_robust_list(0x555583d53660, 24 [pid 6896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6895] memfd_create("syzkaller", 0 [pid 5076] mkdir("./298", 0777 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6898 [pid 6897] <... set_robust_list resumed>) = 0 [pid 6897] chdir("./302" [pid 5076] <... mkdir resumed>) = 0 [pid 6897] <... chdir resumed>) = 0 [pid 6897] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6898 attached ) = 0 [pid 6898] set_robust_list(0x555583d53660, 24 [pid 6897] setpgid(0, 0 [pid 6895] <... memfd_create resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6898] <... set_robust_list resumed>) = 0 [pid 6897] <... setpgid resumed>) = 0 [pid 6894] exit_group(0 [pid 5076] <... openat resumed>) = 3 [pid 6898] chdir("./301" [pid 6897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6894] <... exit_group resumed>) = ? [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6897] <... openat resumed>) = 3 [pid 6895] <... mmap resumed>) = 0x7f943d000000 [pid 6894] +++ exited with 0 +++ [pid 6898] <... chdir resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6894, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- [pid 6898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6897] write(3, "1000", 4 [pid 6896] <... write resumed>) = 524288 [pid 6895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6898] <... prctl resumed>) = 0 [pid 6897] <... write resumed>) = 4 [pid 6897] close(3 [pid 6898] setpgid(0, 0 [pid 6897] <... close resumed>) = 0 [pid 5072] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6898] <... setpgid resumed>) = 0 [pid 6897] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6897] <... symlink resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6897] memfd_create("syzkaller", 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 6898] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6898] write(3, "1000", 4 [pid 6897] <... memfd_create resumed>) = 3 [pid 6898] <... write resumed>) = 4 [pid 6897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6896] munmap(0x7f943d000000, 138412032 [pid 5072] getdents64(3, [pid 6898] close(3 [pid 6897] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6898] <... close resumed>) = 0 [pid 6897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6898] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6898] <... symlink resumed>) = 0 [pid 6896] <... munmap resumed>) = 0 [pid 6895] <... write resumed>) = 524288 [pid 6898] memfd_create("syzkaller", 0 [pid 6896] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] newfstatat(AT_FDCWD, "./300/binderfs", [pid 6896] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6898] <... memfd_create resumed>) = 3 [pid 6896] ioctl(4, LOOP_SET_FD, 3 [pid 5072] unlink("./300/binderfs" [pid 6898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... unlink resumed>) = 0 [pid 6898] <... mmap resumed>) = 0x7f943d000000 [pid 5072] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6897] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 6898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6895] munmap(0x7f943d000000, 138412032) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6895] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./300/file1", [pid 6895] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6895] ioctl(4, LOOP_SET_FD, 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6899 attached [pid 6896] <... ioctl resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./300/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6898] <... write resumed>) = 524288 [pid 6897] munmap(0x7f943d000000, 138412032 [pid 6896] close(3 [pid 5072] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6899 [pid 6899] set_robust_list(0x555583d53660, 24 [pid 6896] <... close resumed>) = 0 [pid 6896] close(4 [pid 6897] <... munmap resumed>) = 0 [pid 6896] <... close resumed>) = 0 [pid 6899] <... set_robust_list resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 6896] mkdir("./file1", 0777) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6899] chdir("./298" [pid 6898] munmap(0x7f943d000000, 138412032 [pid 6897] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] getdents64(4, [pid 6899] <... chdir resumed>) = 0 [pid 6898] <... munmap resumed>) = 0 [pid 6897] <... openat resumed>) = 4 [pid 6896] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6899] prctl(PR_SET_PDEATHSIG, SIGKILL [ 236.362848][ T6896] loop3: detected capacity change from 0 to 1024 [ 236.390636][ T6895] loop0: detected capacity change from 0 to 1024 [pid 6897] ioctl(4, LOOP_SET_FD, 3 [pid 6899] <... prctl resumed>) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6899] setpgid(0, 0) = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6895] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6898] <... openat resumed>) = 4 [pid 6895] close(3 [pid 5072] rmdir("./300/file1" [pid 6899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6898] ioctl(4, LOOP_SET_FD, 3 [pid 6895] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6899] <... openat resumed>) = 3 [pid 6895] close(4 [pid 6896] <... mount resumed>) = 0 [pid 6895] <... close resumed>) = 0 [pid 6896] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6895] mkdir("./file1", 0777 [pid 6896] <... openat resumed>) = 3 [pid 6895] <... mkdir resumed>) = 0 [pid 6896] chdir("./file1" [pid 6895] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6899] write(3, "1000", 4 [pid 6896] <... chdir resumed>) = 0 [pid 6895] <... mount resumed>) = 0 [pid 5072] getdents64(3, [pid 6896] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6895] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6895] <... openat resumed>) = 3 [pid 6896] truncate("./file1", 0 [pid 6895] chdir("./file1") = 0 [pid 6895] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6899] <... write resumed>) = 4 [pid 6895] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(3 [pid 6899] close(3 [pid 6897] <... ioctl resumed>) = 0 [pid 6895] truncate("./file1", 0 [pid 6899] <... close resumed>) = 0 [pid 6897] close(3 [pid 6896] <... truncate resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6899] symlink("/dev/binderfs", "./binderfs" [pid 6898] <... ioctl resumed>) = 0 [pid 6897] <... close resumed>) = 0 [pid 6896] memfd_create("syzkaller", 0 [pid 5072] rmdir("./300" [pid 6899] <... symlink resumed>) = 0 [pid 6898] close(3 [pid 6897] close(4 [pid 6896] <... memfd_create resumed>) = 4 [pid 6898] <... close resumed>) = 0 [pid 6897] <... close resumed>) = 0 [pid 6896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6898] close(4 [pid 6897] mkdir("./file1", 0777 [pid 6896] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... rmdir resumed>) = 0 [pid 6899] memfd_create("syzkaller", 0 [pid 6898] <... close resumed>) = 0 [pid 6897] <... mkdir resumed>) = 0 [pid 6896] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6895] <... truncate resumed>) = 0 [pid 6898] mkdir("./file1", 0777 [pid 6897] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6899] <... memfd_create resumed>) = 3 [pid 6895] memfd_create("syzkaller", 0 [pid 6899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] mkdir("./301", 0777 [pid 6899] <... mmap resumed>) = 0x7f943d000000 [pid 6898] <... mkdir resumed>) = 0 [pid 6895] <... memfd_create resumed>) = 4 [pid 5072] <... mkdir resumed>) = 0 [pid 6895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [ 236.410771][ T6897] loop2: detected capacity change from 0 to 1024 [ 236.421675][ T6898] loop4: detected capacity change from 0 to 1024 [pid 6898] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6896] <... write resumed>) = 524288 [pid 6895] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6897] <... mount resumed>) = 0 [pid 6897] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6897] chdir("./file1" [pid 6899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6897] <... chdir resumed>) = 0 [pid 6897] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6897] truncate("./file1", 0) = 0 [pid 6897] memfd_create("syzkaller", 0) = 4 [pid 6898] <... mount resumed>) = 0 [pid 6897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6898] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6897] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6899] <... write resumed>) = 524288 [pid 6898] <... openat resumed>) = 3 [pid 6895] <... write resumed>) = 524288 [pid 6898] chdir("./file1") = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6898] truncate("./file1", 0) = 0 [pid 6896] munmap(0x7f943d000000, 138412032 [pid 6898] memfd_create("syzkaller", 0 [pid 6896] <... munmap resumed>) = 0 [pid 6898] <... memfd_create resumed>) = 4 [pid 6896] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6896] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6898] <... mmap resumed>) = 0x7f943d000000 [pid 6896] close(4 [pid 6899] munmap(0x7f943d000000, 138412032 [pid 6898] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6897] <... write resumed>) = 524288 [pid 6896] <... close resumed>) = 0 [pid 6895] munmap(0x7f943d000000, 138412032) = 0 [pid 6895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6895] close(4 [pid 6899] <... munmap resumed>) = 0 [pid 6895] <... close resumed>) = 0 [pid 6899] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... ioctl resumed>) = 0 [pid 6899] <... openat resumed>) = 4 [pid 6899] ioctl(4, LOOP_SET_FD, 3 [pid 5072] close(3) = 0 [pid 6898] <... write resumed>) = 524288 [pid 6897] munmap(0x7f943d000000, 138412032) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6897] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6896] exit_group(0 [pid 6895] exit_group(0 [pid 6897] close(4 [pid 6896] <... exit_group resumed>) = ? [pid 6895] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6900 attached [pid 6899] <... ioctl resumed>) = 0 [pid 6898] munmap(0x7f943d000000, 138412032 [pid 6897] <... close resumed>) = 0 [pid 6896] +++ exited with 0 +++ [pid 6895] +++ exited with 0 +++ [pid 6900] set_robust_list(0x555583d53660, 24 [pid 6899] close(3 [pid 6898] <... munmap resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6896, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6900 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6895, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6900] <... set_robust_list resumed>) = 0 [pid 6899] <... close resumed>) = 0 [pid 6900] chdir("./301" [pid 6899] close(4 [pid 6900] <... chdir resumed>) = 0 [pid 6899] <... close resumed>) = 0 [pid 6898] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6899] mkdir("./file1", 0777 [pid 6898] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6897] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... prctl resumed>) = 0 [pid 6899] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6900] setpgid(0, 0 [pid 6898] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 6900] <... setpgid resumed>) = 0 [pid 6899] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] newfstatat(3, "", [pid 5071] newfstatat(3, "", [pid 6900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6900] <... openat resumed>) = 3 [pid 6897] <... exit_group resumed>) = ? [pid 5074] getdents64(3, [pid 5071] getdents64(3, [pid 6900] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6900] <... write resumed>) = 4 [pid 6897] +++ exited with 0 +++ [pid 5074] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [ 236.523104][ T6899] loop5: detected capacity change from 0 to 1024 [pid 6900] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... close resumed>) = 0 [pid 6899] <... mount resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./302/binderfs", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6897, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] newfstatat(AT_FDCWD, "./302/binderfs", [pid 6900] symlink("/dev/binderfs", "./binderfs" [pid 6899] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6898] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6900] <... symlink resumed>) = 0 [pid 6899] <... openat resumed>) = 3 [pid 5074] unlink("./302/binderfs" [pid 5073] <... restart_syscall resumed>) = 0 [pid 5071] unlink("./302/binderfs" [pid 6900] memfd_create("syzkaller", 0 [pid 6899] chdir("./file1" [pid 6898] exit_group(0 [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6900] <... memfd_create resumed>) = 3 [pid 6899] <... chdir resumed>) = 0 [pid 6898] <... exit_group resumed>) = ? [pid 5074] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6899] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6898] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... mmap resumed>) = 0x7f943d000000 [pid 6899] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6898, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6899] truncate("./file1", 0) = 0 [pid 5075] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6899] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6899] <... memfd_create resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5075] <... openat resumed>) = 3 [pid 6899] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] newfstatat(3, "", [pid 5075] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./301/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] unlink("./301/binderfs" [pid 5071] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5074] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./302/file1", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./302/file1", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./302/binderfs", [pid 5074] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6899] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./302/binderfs" [pid 5071] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6900] <... write resumed>) = 524288 [pid 5074] <... openat resumed>) = 4 [pid 5073] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 6900] munmap(0x7f943d000000, 138412032) = 0 [pid 5074] getdents64(4, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 6900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./301/file1", [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6900] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4 [pid 5071] close(4 [pid 6900] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./302/file1" [pid 5071] <... close resumed>) = 0 [pid 5075] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./302/file1" [pid 6899] munmap(0x7f943d000000, 138412032 [pid 5073] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6899] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./302/file1", [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 6899] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6899] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 6899] close(4 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./302/file1") = 0 [pid 6899] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5075] <... openat resumed>) = 4 [pid 5074] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5073] close(3 [pid 6900] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(3 [pid 5073] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6900] close(3 [pid 5071] rmdir("./302" [pid 6900] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5073] rmdir("./302" [pid 6900] close(4 [pid 5074] rmdir("./302" [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... rmdir resumed>) = 0 [pid 6900] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] mkdir("./303", 0777 [pid 6900] mkdir("./file1", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6900] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] mkdir("./303", 0777 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] mkdir("./303", 0777 [pid 6900] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6899] exit_group(0 [pid 5075] close(4 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... mkdir resumed>) = 0 [pid 6899] <... exit_group resumed>) = ? [pid 5075] rmdir("./301/file1" [pid 5074] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6900] <... mount resumed>) = 0 [pid 5075] close(3 [pid 6900] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] <... close resumed>) = 0 [pid 6900] chdir("./file1") = 0 [pid 6899] +++ exited with 0 +++ [pid 5075] rmdir("./301" [pid 6900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6899, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 6900] truncate("./file1", 0 [pid 5075] mkdir("./302", 0777 [pid 5076] umount2("./298", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6900] <... truncate resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./298", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6900] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6900] <... memfd_create resumed>) = 4 [pid 5076] newfstatat(3, "", [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6900] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [ 236.661811][ T6900] loop1: detected capacity change from 0 to 1024 [pid 6900] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./298/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./298/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./298/binderfs") = 0 [pid 5076] umount2("./298/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 6900] <... write resumed>) = 524288 [pid 5076] umount2("./298/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6900] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... munmap resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./298/file1", [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./298/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6900] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6900] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./298/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6900] close(4 [pid 5076] newfstatat(4, "", [pid 6900] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5073] close(3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./298/file1") = 0 ./strace-static-x86_64: Process 6901 attached [pid 6901] set_robust_list(0x555583d53660, 24 [pid 5071] close(3 [pid 6901] <... set_robust_list resumed>) = 0 [pid 5076] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 6901] chdir("./303") = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6901 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3 [pid 6901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6900] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 6901] <... prctl resumed>) = 0 [pid 6901] setpgid(0, 0 [pid 5076] rmdir("./298" [pid 6901] <... setpgid resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6900] <... exit_group resumed>) = ? [pid 6900] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6900, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] mkdir("./299", 0777 [pid 6901] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 6901] write(3, "1000", 4) = 4 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6902 ./strace-static-x86_64: Process 6902 attached [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6901] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6901] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6902] set_robust_list(0x555583d53660, 24 [pid 6901] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6902] <... set_robust_list resumed>) = 0 [pid 5074] close(3 [pid 6901] <... symlink resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 6901] memfd_create("syzkaller", 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6901] <... memfd_create resumed>) = 3 [pid 5072] getdents64(3, [pid 6901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6901] <... mmap resumed>) = 0x7f943d000000 [pid 5072] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6902] chdir("./303" [pid 6901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6902] <... chdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] newfstatat(AT_FDCWD, "./301/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./301/binderfs"./strace-static-x86_64: Process 6903 attached [pid 6902] <... prctl resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 6903] set_robust_list(0x555583d53660, 24 [pid 6902] setpgid(0, 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6903 [pid 5072] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6903] <... set_robust_list resumed>) = 0 [pid 6902] <... setpgid resumed>) = 0 [pid 6902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6903] chdir("./303" [pid 6902] write(3, "1000", 4 [pid 6903] <... chdir resumed>) = 0 [pid 6902] <... write resumed>) = 4 [pid 6903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6902] close(3 [pid 6903] <... prctl resumed>) = 0 [pid 6902] <... close resumed>) = 0 [pid 6903] setpgid(0, 0 [pid 6902] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(3 [pid 6903] <... setpgid resumed>) = 0 [pid 6902] <... symlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6901] <... write resumed>) = 524288 [pid 5072] <... umount2 resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6902] memfd_create("syzkaller", 0) = 3 [pid 5072] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./301/file1", [pid 6903] <... openat resumed>) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6904 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6904 attached [pid 5072] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6904] set_robust_list(0x555583d53660, 24 [pid 6902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6903] write(3, "1000", 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6902] <... mmap resumed>) = 0x7f943d000000 [pid 6903] <... write resumed>) = 4 [pid 6903] close(3) = 0 [pid 6904] <... set_robust_list resumed>) = 0 [pid 6903] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... ioctl resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6904] chdir("./302") = 0 [pid 5072] <... openat resumed>) = 4 [pid 6904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] newfstatat(4, "", [pid 6904] setpgid(0, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6904] <... setpgid resumed>) = 0 [pid 5072] getdents64(4, [pid 6904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6904] <... openat resumed>) = 3 [pid 6903] <... symlink resumed>) = 0 [pid 6902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5072] getdents64(4, [pid 6904] write(3, "1000", 4 [pid 6901] munmap(0x7f943d000000, 138412032 [pid 5076] <... close resumed>) = 0 [pid 6904] <... write resumed>) = 4 [pid 6903] memfd_create("syzkaller", 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6904] close(3 [pid 6903] <... memfd_create resumed>) = 3 [pid 6901] <... munmap resumed>) = 0 [pid 5072] close(4 [pid 6904] <... close resumed>) = 0 [pid 6903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6904] symlink("/dev/binderfs", "./binderfs" [pid 6903] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... close resumed>) = 0 [pid 6904] <... symlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6905 [pid 6904] memfd_create("syzkaller", 0 [pid 5072] rmdir("./301/file1") = 0 [pid 6904] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6905 attached [pid 6904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6902] <... write resumed>) = 524288 [pid 6901] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] getdents64(3, [pid 6905] set_robust_list(0x555583d53660, 24 [pid 6904] <... mmap resumed>) = 0x7f943d000000 [pid 6902] munmap(0x7f943d000000, 138412032 [pid 6901] <... openat resumed>) = 4 [pid 6905] <... set_robust_list resumed>) = 0 [pid 6904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6901] ioctl(4, LOOP_SET_FD, 3 [pid 6905] chdir("./299") = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] close(3 [pid 6905] setpgid(0, 0 [pid 5072] <... close resumed>) = 0 [pid 6905] <... setpgid resumed>) = 0 [pid 6905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] rmdir("./301" [pid 6905] <... openat resumed>) = 3 [pid 6905] write(3, "1000", 4 [pid 5072] <... rmdir resumed>) = 0 [pid 6905] <... write resumed>) = 4 [pid 6905] close(3 [pid 5072] mkdir("./302", 0777 [pid 6905] <... close resumed>) = 0 [pid 6903] <... write resumed>) = 524288 [pid 6902] <... munmap resumed>) = 0 [pid 6901] <... ioctl resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6905] symlink("/dev/binderfs", "./binderfs" [pid 6903] munmap(0x7f943d000000, 138412032 [pid 6902] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6905] <... symlink resumed>) = 0 [pid 6903] <... munmap resumed>) = 0 [pid 6902] <... openat resumed>) = 4 [pid 6905] memfd_create("syzkaller", 0 [pid 6902] ioctl(4, LOOP_SET_FD, 3 [pid 6905] <... memfd_create resumed>) = 3 [pid 6905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6905] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 3 [pid 6905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6903] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6901] close(3 [pid 6904] <... write resumed>) = 524288 [pid 6903] <... openat resumed>) = 4 [pid 6901] <... close resumed>) = 0 [pid 6903] ioctl(4, LOOP_SET_FD, 3 [pid 6901] close(4) = 0 [pid 6904] munmap(0x7f943d000000, 138412032 [pid 6905] <... write resumed>) = 524288 [pid 6902] <... ioctl resumed>) = 0 [pid 6901] mkdir("./file1", 0777 [pid 6905] munmap(0x7f943d000000, 138412032 [pid 6904] <... munmap resumed>) = 0 [pid 6902] close(3 [pid 6905] <... munmap resumed>) = 0 [pid 6903] <... ioctl resumed>) = 0 [pid 6901] <... mkdir resumed>) = 0 [pid 6901] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6903] close(3 [pid 6902] <... close resumed>) = 0 [pid 6905] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6904] <... openat resumed>) = 4 [pid 6903] <... close resumed>) = 0 [pid 6902] close(4 [pid 6905] <... openat resumed>) = 4 [pid 6904] ioctl(4, LOOP_SET_FD, 3 [pid 6903] close(4 [pid 6902] <... close resumed>) = 0 [ 236.899995][ T6901] loop2: detected capacity change from 0 to 1024 [ 236.917402][ T6902] loop0: detected capacity change from 0 to 1024 [ 236.934398][ T6903] loop3: detected capacity change from 0 to 1024 [pid 6905] ioctl(4, LOOP_SET_FD, 3 [pid 6903] <... close resumed>) = 0 [pid 6902] mkdir("./file1", 0777 [pid 6904] <... ioctl resumed>) = 0 [pid 6903] mkdir("./file1", 0777 [pid 6902] <... mkdir resumed>) = 0 [pid 6901] <... mount resumed>) = 0 [pid 6903] <... mkdir resumed>) = 0 [pid 6901] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6903] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6901] chdir("./file1" [pid 5072] <... ioctl resumed>) = 0 [pid 6901] <... chdir resumed>) = 0 [pid 6901] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6902] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6903] <... mount resumed>) = 0 [pid 5072] close(3 [pid 6905] <... ioctl resumed>) = 0 [pid 6904] close(3 [pid 6903] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6901] truncate("./file1", 0 [pid 6905] close(3 [pid 6904] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6905] <... close resumed>) = 0 [pid 6904] close(4 [pid 6903] <... openat resumed>) = 3 [pid 6901] <... truncate resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6905] close(4 [pid 6904] <... close resumed>) = 0 [pid 6903] chdir("./file1" [pid 6901] memfd_create("syzkaller", 0 [pid 6905] <... close resumed>) = 0 [pid 6904] mkdir("./file1", 0777 [pid 6903] <... chdir resumed>) = 0 [pid 6902] <... mount resumed>) = 0 [pid 6901] <... memfd_create resumed>) = 4 [ 236.954694][ T6904] loop4: detected capacity change from 0 to 1024 [ 236.961414][ T6905] loop5: detected capacity change from 0 to 1024 [pid 6905] mkdir("./file1", 0777 [pid 6904] <... mkdir resumed>) = 0 [pid 6902] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6906 attached [pid 6905] <... mkdir resumed>) = 0 [pid 6903] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6903] truncate("./file1", 0 [pid 6901] <... mmap resumed>) = 0x7f943d000000 [pid 6906] set_robust_list(0x555583d53660, 24 [pid 6905] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6906] <... set_robust_list resumed>) = 0 [pid 6903] <... truncate resumed>) = 0 [pid 6902] <... openat resumed>) = 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6906 [pid 6906] chdir("./302" [pid 6904] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6902] chdir("./file1" [pid 6906] <... chdir resumed>) = 0 [pid 6902] <... chdir resumed>) = 0 [pid 6906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6902] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6906] setpgid(0, 0 [pid 6903] memfd_create("syzkaller", 0 [pid 6902] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6906] <... setpgid resumed>) = 0 [pid 6902] truncate("./file1", 0 [pid 6906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6903] <... memfd_create resumed>) = 4 [pid 6901] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6906] <... openat resumed>) = 3 [pid 6903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6906] write(3, "1000", 4 [pid 6903] <... mmap resumed>) = 0x7f943d000000 [pid 6902] <... truncate resumed>) = 0 [pid 6901] <... write resumed>) = 524288 [pid 6906] <... write resumed>) = 4 [pid 6902] memfd_create("syzkaller", 0 [pid 6906] close(3 [pid 6902] <... memfd_create resumed>) = 4 [pid 6906] <... close resumed>) = 0 [pid 6902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6906] symlink("/dev/binderfs", "./binderfs" [pid 6902] <... mmap resumed>) = 0x7f943d000000 [pid 6906] <... symlink resumed>) = 0 [pid 6906] memfd_create("syzkaller", 0 [pid 6903] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6902] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6906] <... memfd_create resumed>) = 3 [pid 6901] munmap(0x7f943d000000, 138412032 [pid 6906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6901] <... munmap resumed>) = 0 [pid 6906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6905] <... mount resumed>) = 0 [pid 6904] <... mount resumed>) = 0 [pid 6901] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6901] close(4 [pid 6905] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6904] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6905] <... openat resumed>) = 3 [pid 6904] <... openat resumed>) = 3 [pid 6905] chdir("./file1" [pid 6904] chdir("./file1" [pid 6905] <... chdir resumed>) = 0 [pid 6904] <... chdir resumed>) = 0 [pid 6903] <... write resumed>) = 524288 [pid 6902] <... write resumed>) = 524288 [pid 6901] <... close resumed>) = 0 [pid 6906] <... write resumed>) = 524288 [pid 6906] munmap(0x7f943d000000, 138412032 [pid 6905] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6903] munmap(0x7f943d000000, 138412032 [pid 6902] munmap(0x7f943d000000, 138412032 [pid 6901] exit_group(0 [pid 6906] <... munmap resumed>) = 0 [pid 6905] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6904] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6906] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6905] truncate("./file1", 0 [pid 6904] truncate("./file1", 0 [pid 6901] <... exit_group resumed>) = ? [pid 6903] <... munmap resumed>) = 0 [pid 6906] <... openat resumed>) = 4 [pid 6902] <... munmap resumed>) = 0 [pid 6906] ioctl(4, LOOP_SET_FD, 3 [pid 6904] <... truncate resumed>) = 0 [pid 6903] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6902] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6904] memfd_create("syzkaller", 0 [pid 6901] +++ exited with 0 +++ [pid 6905] <... truncate resumed>) = 0 [pid 6904] <... memfd_create resumed>) = 4 [pid 6903] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6902] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6905] memfd_create("syzkaller", 0 [pid 6904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6903] close(4 [pid 6902] close(4 [pid 6905] <... memfd_create resumed>) = 4 [pid 6904] <... mmap resumed>) = 0x7f943d000000 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6901, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6904] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6905] <... mmap resumed>) = 0x7f943d000000 [pid 6902] <... close resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6905] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6903] <... close resumed>) = 0 [pid 6902] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6902] <... exit_group resumed>) = ? [pid 5073] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 6903] exit_group(0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./303/binderfs", [pid 6905] <... write resumed>) = 524288 [pid 6903] <... exit_group resumed>) = ? [pid 6902] +++ exited with 0 +++ [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6906] <... ioctl resumed>) = 0 [pid 6906] close(3 [pid 5073] unlink("./303/binderfs" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6902, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6906] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6906] close(4 [pid 5073] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] <... close resumed>) = 0 [pid 6906] mkdir("./file1", 0777 [pid 5071] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 6904] <... write resumed>) = 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6903] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6903, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6904] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6906] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6904] <... munmap resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5074] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 237.112123][ T6906] loop1: detected capacity change from 0 to 1024 [pid 6904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] unlink("./303/binderfs" [pid 6904] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6905] munmap(0x7f943d000000, 138412032 [pid 6904] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5071] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6905] <... munmap resumed>) = 0 [pid 6904] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6905] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6905] close(4 [pid 5074] getdents64(3, [pid 6905] <... close resumed>) = 0 [pid 6904] exit_group(0) = ? [pid 6906] <... mount resumed>) = 0 [pid 6905] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 5074] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6906] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6905] <... exit_group resumed>) = ? [pid 6904] +++ exited with 0 +++ [pid 5074] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./303/file1", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6906] <... openat resumed>) = 3 [pid 6905] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6905, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6904, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6906] chdir("./file1" [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./303/file1", [pid 6906] <... chdir resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6906] truncate("./file1", 0 [pid 5076] umount2("./299", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] unlink("./303/binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./299", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 5071] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(3, "", [pid 5075] newfstatat(3, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5071] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 5075] getdents64(3, [pid 6906] <... truncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] newfstatat(4, "", [pid 6906] memfd_create("syzkaller", 0 [pid 5075] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 6906] <... memfd_create resumed>) = 4 [pid 5076] umount2("./299/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./302/binderfs", [pid 6906] <... mmap resumed>) = 0x7f943d000000 [pid 5076] newfstatat(AT_FDCWD, "./299/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] close(4 [pid 5071] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./302/binderfs" [pid 5076] unlink("./299/binderfs" [pid 5075] <... unlink resumed>) = 0 [pid 6906] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./303/file1" [pid 5075] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 5074] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./303/file1", [pid 5073] close(3 [pid 5071] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./303" [pid 5076] <... umount2 resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5071] rmdir("./303/file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5073] mkdir("./304", 0777 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./299/file1", [pid 5074] newfstatat(4, "", [pid 5073] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./299/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./299/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] rmdir("./303" [pid 5076] newfstatat(4, "", [pid 5074] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] close(4 [pid 5071] mkdir("./304", 0777 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] rmdir("./303/file1" [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./302/file1", [pid 5076] close(4 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6906] <... write resumed>) = 524288 [pid 5076] rmdir("./299/file1" [pid 5075] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 6906] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6906] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] <... openat resumed>) = 4 [pid 5074] close(3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] newfstatat(4, "", [pid 5074] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] rmdir("./303" [pid 5076] rmdir("./299" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5074] mkdir("./304", 0777 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./302/file1" [pid 5076] mkdir("./300", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./302") = 0 [pid 5075] mkdir("./303", 0777 [pid 6906] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 6906] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 6906] close(4 [pid 5071] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6906] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... ioctl resumed>) = 0 [pid 5071] close(3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] <... close resumed>) = 0 [pid 5073] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 6906] exit_group(0) = ? [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6909 attached [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6909 [pid 6909] set_robust_list(0x555583d53660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6910 [pid 6909] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6910 attached [pid 6909] chdir("./304" [pid 6910] set_robust_list(0x555583d53660, 24 [pid 6909] <... chdir resumed>) = 0 [pid 6910] <... set_robust_list resumed>) = 0 [pid 6909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6909] setpgid(0, 0) = 0 [pid 6910] chdir("./304") = 0 [pid 6910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6910] setpgid(0, 0) = 0 [pid 6910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6910] <... openat resumed>) = 3 [pid 6910] write(3, "1000", 4) = 4 [pid 6910] close(3) = 0 [pid 6910] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6906] +++ exited with 0 +++ [pid 6910] memfd_create("syzkaller", 0) = 3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6906, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6909] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6909] write(3, "1000", 4 [pid 5076] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6909] <... write resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(3 [pid 5072] newfstatat(3, "", [pid 6909] close(3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3 [pid 6909] <... close resumed>) = 0 [pid 6910] <... write resumed>) = 524288 [pid 6909] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6909] <... symlink resumed>) = 0 [pid 5072] getdents64(3, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6909] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 5072] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6911 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./302/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./302/binderfs") = 0 ./strace-static-x86_64: Process 6911 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6912 [pid 5072] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6913 attached [pid 6911] set_robust_list(0x555583d53660, 24 [pid 6909] <... memfd_create resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6913 [pid 6909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] set_robust_list(0x555583d53660, 24 [pid 6911] <... set_robust_list resumed>) = 0 [pid 6909] <... mmap resumed>) = 0x7f943d000000 ./strace-static-x86_64: Process 6912 attached [pid 6911] chdir("./300" [pid 6912] set_robust_list(0x555583d53660, 24) = 0 [pid 6912] chdir("./303") = 0 [pid 6912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6912] setpgid(0, 0 [pid 6909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6911] <... chdir resumed>) = 0 [pid 6913] <... set_robust_list resumed>) = 0 [pid 6912] <... setpgid resumed>) = 0 [pid 6911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6910] munmap(0x7f943d000000, 138412032 [pid 6911] <... prctl resumed>) = 0 [pid 6912] <... openat resumed>) = 3 [pid 6910] <... munmap resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6913] chdir("./304" [pid 6912] write(3, "1000", 4 [pid 6913] <... chdir resumed>) = 0 [pid 6912] <... write resumed>) = 4 [pid 6911] setpgid(0, 0 [pid 6910] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6913] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6912] close(3 [pid 6909] <... write resumed>) = 524288 [pid 6913] <... prctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6912] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./302/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6912] symlink("/dev/binderfs", "./binderfs" [pid 6911] <... setpgid resumed>) = 0 [pid 6913] setpgid(0, 0 [pid 6911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6913] <... setpgid resumed>) = 0 [pid 6913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6912] <... symlink resumed>) = 0 [pid 5072] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6913] <... openat resumed>) = 3 [pid 6913] write(3, "1000", 4) = 4 [pid 6913] close(3) = 0 [pid 6912] memfd_create("syzkaller", 0 [pid 6911] <... openat resumed>) = 3 [pid 6910] <... openat resumed>) = 4 [pid 6909] munmap(0x7f943d000000, 138412032 [pid 5072] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6913] symlink("/dev/binderfs", "./binderfs" [pid 6911] write(3, "1000", 4 [pid 6913] <... symlink resumed>) = 0 [pid 6912] <... memfd_create resumed>) = 3 [pid 6911] <... write resumed>) = 4 [pid 6910] ioctl(4, LOOP_SET_FD, 3 [pid 6909] <... munmap resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 6913] memfd_create("syzkaller", 0 [pid 6912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6911] close(3) = 0 [pid 6913] <... memfd_create resumed>) = 3 [pid 6911] symlink("/dev/binderfs", "./binderfs" [pid 6912] <... mmap resumed>) = 0x7f943d000000 [pid 6911] <... symlink resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 6913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6911] memfd_create("syzkaller", 0 [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6911] <... memfd_create resumed>) = 3 [pid 6911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] <... mmap resumed>) = 0x7f943d000000 [pid 6912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6911] <... mmap resumed>) = 0x7f943d000000 [pid 6909] <... openat resumed>) = 4 [pid 5072] getdents64(4, [pid 6913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6912] <... write resumed>) = 524288 [pid 6911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6910] <... ioctl resumed>) = 0 [pid 6909] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./302/file1") = 0 [ 237.462428][ T6910] loop2: detected capacity change from 0 to 1024 [pid 6912] munmap(0x7f943d000000, 138412032 [pid 6911] <... write resumed>) = 524288 [pid 6910] close(3 [pid 6909] <... ioctl resumed>) = 0 [pid 5072] getdents64(3, [pid 6910] <... close resumed>) = 0 [pid 6910] close(4) = 0 [pid 6912] <... munmap resumed>) = 0 [pid 6910] mkdir("./file1", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6910] <... mkdir resumed>) = 0 [pid 6910] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6909] close(3 [pid 6913] <... write resumed>) = 524288 [pid 6912] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6911] munmap(0x7f943d000000, 138412032 [pid 6910] <... mount resumed>) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./302" [pid 6912] <... openat resumed>) = 4 [pid 6909] <... close resumed>) = 0 [pid 6909] close(4) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6912] ioctl(4, LOOP_SET_FD, 3 [pid 5072] mkdir("./303", 0777 [pid 6910] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6909] mkdir("./file1", 0777 [pid 6910] chdir("./file1" [pid 6909] <... mkdir resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6911] <... munmap resumed>) = 0 [pid 6910] <... chdir resumed>) = 0 [pid 6910] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6911] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6910] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6909] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6911] <... openat resumed>) = 4 [pid 6910] truncate("./file1", 0 [pid 6911] ioctl(4, LOOP_SET_FD, 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6911] <... ioctl resumed>) = 0 [pid 6911] close(3) = 0 [pid 6910] <... truncate resumed>) = 0 [pid 6911] close(4 [pid 6910] memfd_create("syzkaller", 0 [pid 6911] <... close resumed>) = 0 [pid 6910] <... memfd_create resumed>) = 4 [pid 6911] mkdir("./file1", 0777 [pid 6910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] munmap(0x7f943d000000, 138412032 [pid 6912] <... ioctl resumed>) = 0 [pid 6911] <... mkdir resumed>) = 0 [pid 6910] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 3 [pid 6913] <... munmap resumed>) = 0 [pid 6912] close(3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6913] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6912] <... close resumed>) = 0 [pid 6911] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6909] <... mount resumed>) = 0 [pid 6913] <... openat resumed>) = 4 [ 237.504427][ T6909] loop0: detected capacity change from 0 to 1024 [ 237.537740][ T6912] loop4: detected capacity change from 0 to 1024 [ 237.543749][ T6911] loop5: detected capacity change from 0 to 1024 [pid 6912] close(4 [pid 6913] ioctl(4, LOOP_SET_FD, 3 [pid 6912] <... close resumed>) = 0 [pid 6909] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6912] mkdir("./file1", 0777 [pid 6909] <... openat resumed>) = 3 [pid 6910] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6909] chdir("./file1") = 0 [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6911] <... mount resumed>) = 0 [pid 6909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6911] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6909] truncate("./file1", 0 [pid 6912] <... mkdir resumed>) = 0 [pid 6911] <... openat resumed>) = 3 [pid 6912] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6910] <... write resumed>) = 524288 [pid 6911] chdir("./file1") = 0 [pid 6911] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6913] <... ioctl resumed>) = 0 [pid 6911] truncate("./file1", 0 [pid 6909] <... truncate resumed>) = 0 [pid 6913] close(3 [pid 6909] memfd_create("syzkaller", 0 [pid 6913] <... close resumed>) = 0 [pid 6909] <... memfd_create resumed>) = 4 [pid 6913] close(4 [pid 6912] <... mount resumed>) = 0 [pid 6911] <... truncate resumed>) = 0 [pid 6909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6911] memfd_create("syzkaller", 0 [pid 6909] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6911] <... memfd_create resumed>) = 4 [pid 6911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] <... close resumed>) = 0 [pid 6911] <... mmap resumed>) = 0x7f943d000000 [pid 6910] munmap(0x7f943d000000, 138412032 [pid 6912] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... ioctl resumed>) = 0 [pid 6913] mkdir("./file1", 0777 [pid 6911] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6910] <... munmap resumed>) = 0 [pid 6910] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6909] <... write resumed>) = 524288 [pid 6913] <... mkdir resumed>) = 0 [pid 6912] <... openat resumed>) = 3 [ 237.572284][ T6913] loop3: detected capacity change from 0 to 1024 [pid 6910] close(4 [pid 6913] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6912] chdir("./file1" [pid 6910] <... close resumed>) = 0 [pid 5072] close(3 [pid 6913] <... mount resumed>) = 0 [pid 6912] <... chdir resumed>) = 0 [pid 6911] <... write resumed>) = 524288 [pid 5072] <... close resumed>) = 0 [pid 6913] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6912] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6912] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6915 attached [pid 6913] <... openat resumed>) = 3 [pid 6912] truncate("./file1", 0 [pid 6910] exit_group(0 [pid 6909] munmap(0x7f943d000000, 138412032) = 0 [pid 6911] munmap(0x7f943d000000, 138412032 [pid 6910] <... exit_group resumed>) = ? [pid 6909] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6915 [pid 6913] chdir("./file1" [pid 6909] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6909] close(4 [pid 6915] set_robust_list(0x555583d53660, 24 [pid 6913] <... chdir resumed>) = 0 [pid 6912] <... truncate resumed>) = 0 [pid 6910] +++ exited with 0 +++ [pid 6913] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6912] memfd_create("syzkaller", 0 [pid 6915] <... set_robust_list resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6910, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 6915] chdir("./303" [pid 6913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6912] <... memfd_create resumed>) = 4 [pid 6911] <... munmap resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6913] truncate("./file1", 0 [pid 6912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6909] <... close resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6915] <... chdir resumed>) = 0 [pid 6912] <... mmap resumed>) = 0x7f943d000000 [pid 6915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6915] setpgid(0, 0 [pid 6909] exit_group(0) = ? [pid 6915] <... setpgid resumed>) = 0 [pid 6909] +++ exited with 0 +++ [pid 6912] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6909, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6911] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6911] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6911] close(4 [pid 6915] <... openat resumed>) = 3 [pid 5071] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6915] write(3, "1000", 4 [pid 5073] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6915] <... write resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 6915] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 6915] <... close resumed>) = 0 [pid 6911] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 6915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6911] exit_group(0 [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6915] memfd_create("syzkaller", 0 [pid 6913] <... truncate resumed>) = 0 [pid 6912] <... write resumed>) = 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6915] <... memfd_create resumed>) = 3 [pid 6913] memfd_create("syzkaller", 0 [pid 6915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6913] <... memfd_create resumed>) = 4 [pid 6911] <... exit_group resumed>) = ? [pid 5073] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6915] <... mmap resumed>) = 0x7f943d000000 [pid 6913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6911] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./304/binderfs", [pid 6913] <... mmap resumed>) = 0x7f943d000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6911, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6912] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./300", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6912] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./304/binderfs", [pid 5071] unlink("./304/binderfs" [pid 5076] openat(AT_FDCWD, "./300", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6913] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6912] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] newfstatat(3, "", [pid 6912] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6912] close(4 [pid 5076] getdents64(3, [pid 5073] unlink("./304/binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... unlink resumed>) = 0 [pid 5076] umount2("./300/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./300/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6912] <... close resumed>) = 0 [pid 5076] unlink("./300/binderfs") = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5071] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./304/file1", [pid 6915] <... write resumed>) = 524288 [pid 6913] <... write resumed>) = 524288 [pid 6912] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6912] <... exit_group resumed>) = ? [pid 5071] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6912] +++ exited with 0 +++ [pid 5073] newfstatat(AT_FDCWD, "./304/file1", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6912, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6913] munmap(0x7f943d000000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6915] munmap(0x7f943d000000, 138412032 [pid 6913] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 4 [pid 6915] <... munmap resumed>) = 0 [pid 5075] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6913] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5071] getdents64(4, [pid 6915] <... openat resumed>) = 4 [pid 5075] newfstatat(3, "", [pid 6915] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6915] <... ioctl resumed>) = 0 [pid 6913] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6913] close(4 [pid 5075] getdents64(3, [pid 5071] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 5076] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./300/file1", [pid 6913] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(4 [pid 5075] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./300/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./303/binderfs" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] rmdir("./304/file1" [pid 5076] openat(AT_FDCWD, "./300/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] getdents64(4, [pid 5075] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5073] close(4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] close(3 [pid 5076] close(4) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] rmdir("./300/file1") = 0 [pid 5076] getdents64(3, [pid 6915] close(3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6915] <... close resumed>) = 0 [pid 5076] close(3 [pid 6915] close(4 [pid 5076] <... close resumed>) = 0 [pid 6915] <... close resumed>) = 0 [pid 5076] rmdir("./300" [pid 6915] mkdir("./file1", 0777 [pid 5071] rmdir("./304" [pid 6915] <... mkdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] rmdir("./304/file1" [pid 5076] mkdir("./301", 0777) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] mkdir("./305", 0777 [pid 5073] getdents64(3, [pid 6915] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6913] exit_group(0 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6913] <... exit_group resumed>) = ? [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 6915] <... mount resumed>) = 0 [pid 6913] +++ exited with 0 +++ [pid 5075] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./304" [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6915] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6913, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... rmdir resumed>) = 0 [pid 6915] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./303/file1", [pid 5073] mkdir("./305", 0777 [pid 6915] chdir("./file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6915] <... chdir resumed>) = 0 [pid 5074] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [ 237.775450][ T6915] loop1: detected capacity change from 0 to 1024 [pid 6915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 6915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6915] truncate("./file1", 0 [pid 5074] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5075] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5074] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5074] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6915] <... truncate resumed>) = 0 [pid 6915] memfd_create("syzkaller", 0) = 4 [pid 6915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] newfstatat(AT_FDCWD, "./304/binderfs", [pid 5071] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6916 attached [pid 6915] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] rmdir("./303/file1" [pid 5074] unlink("./304/binderfs" [pid 6916] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6916 [pid 5071] close(3 [pid 6916] <... set_robust_list resumed>) = 0 [pid 6915] <... write resumed>) = 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6916] chdir("./301" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6916] <... chdir resumed>) = 0 [pid 6916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6917 ./strace-static-x86_64: Process 6917 attached [pid 6917] set_robust_list(0x555583d53660, 24 [pid 6916] setpgid(0, 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6917] <... set_robust_list resumed>) = 0 [pid 6917] chdir("./305") = 0 [pid 6917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6917] setpgid(0, 0) = 0 [pid 6917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6916] <... setpgid resumed>) = 0 [pid 6915] munmap(0x7f943d000000, 138412032 [pid 5075] getdents64(3, [pid 5074] <... umount2 resumed>) = 0 [pid 6917] write(3, "1000", 4 [pid 6916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6915] <... munmap resumed>) = 0 [pid 6917] <... write resumed>) = 4 [pid 6916] <... openat resumed>) = 3 [pid 5073] close(3 [pid 6917] close(3 [pid 6916] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6917] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6916] <... write resumed>) = 4 [pid 5075] close(3) = 0 [pid 5074] newfstatat(AT_FDCWD, "./304/file1", [pid 6916] close(3 [pid 5075] rmdir("./303" [pid 6917] symlink("/dev/binderfs", "./binderfs" [pid 6916] <... close resumed>) = 0 [pid 6915] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6917] <... symlink resumed>) = 0 [pid 6916] symlink("/dev/binderfs", "./binderfs" [pid 6915] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6918 attached [pid 6917] memfd_create("syzkaller", 0 [pid 6916] <... symlink resumed>) = 0 [pid 6915] close(4 [pid 5075] mkdir("./304", 0777 [pid 5074] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6918 [pid 6918] set_robust_list(0x555583d53660, 24 [pid 6916] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6918] <... set_robust_list resumed>) = 0 [pid 6916] <... memfd_create resumed>) = 3 [pid 6915] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6918] chdir("./305") = 0 [pid 6917] <... memfd_create resumed>) = 3 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 4 [pid 6917] <... mmap resumed>) = 0x7f943d000000 [pid 6916] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(4, "", [pid 6918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6918] <... prctl resumed>) = 0 [pid 6918] setpgid(0, 0) = 0 [pid 6918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] getdents64(4, [pid 6918] <... openat resumed>) = 3 [pid 6918] write(3, "1000", 4) = 4 [pid 6918] close(3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6918] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] getdents64(4, [pid 6918] symlink("/dev/binderfs", "./binderfs" [pid 6915] exit_group(0 [pid 6918] <... symlink resumed>) = 0 [pid 6915] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6918] memfd_create("syzkaller", 0 [pid 6916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... openat resumed>) = 3 [pid 5074] close(4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... close resumed>) = 0 [pid 6918] <... memfd_create resumed>) = 3 [pid 6917] <... write resumed>) = 524288 [pid 6916] <... write resumed>) = 524288 [pid 6915] +++ exited with 0 +++ [pid 5074] rmdir("./304/file1" [pid 6918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6915, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 6918] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./304") = 0 [pid 5074] mkdir("./305", 0777 [pid 5072] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6917] munmap(0x7f943d000000, 138412032 [pid 5072] <... openat resumed>) = 3 [pid 6916] munmap(0x7f943d000000, 138412032 [pid 6918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6917] <... munmap resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 6917] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6917] <... openat resumed>) = 4 [pid 6917] ioctl(4, LOOP_SET_FD, 3 [pid 5072] getdents64(3, [pid 6918] <... write resumed>) = 524288 [pid 6916] <... munmap resumed>) = 0 [pid 6918] munmap(0x7f943d000000, 138412032 [pid 6917] <... ioctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6917] close(3 [pid 6916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6917] <... close resumed>) = 0 [pid 6916] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] close(4 [pid 6916] ioctl(4, LOOP_SET_FD, 3 [pid 5072] newfstatat(AT_FDCWD, "./303/binderfs", [pid 6918] <... munmap resumed>) = 0 [pid 6917] <... close resumed>) = 0 [pid 6916] <... ioctl resumed>) = 0 [pid 6918] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6917] mkdir("./file1", 0777 [pid 6918] ioctl(4, LOOP_SET_FD, 3 [pid 6916] close(3 [pid 6917] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5074] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6916] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6918] <... ioctl resumed>) = 0 [pid 6917] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6916] close(4 [pid 5072] unlink("./303/binderfs" [pid 6916] <... close resumed>) = 0 [pid 6916] mkdir("./file1", 0777 [pid 5072] <... unlink resumed>) = 0 [pid 6916] <... mkdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6919 ./strace-static-x86_64: Process 6919 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6920 ./strace-static-x86_64: Process 6920 attached [pid 6919] set_robust_list(0x555583d53660, 24 [pid 6916] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6920] set_robust_list(0x555583d53660, 24 [pid 6919] <... set_robust_list resumed>) = 0 [pid 6920] <... set_robust_list resumed>) = 0 [pid 6919] chdir("./305" [pid 6920] chdir("./304" [pid 6919] <... chdir resumed>) = 0 [pid 6920] <... chdir resumed>) = 0 [pid 6919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6919] <... prctl resumed>) = 0 [pid 6916] <... mount resumed>) = 0 [pid 6920] <... prctl resumed>) = 0 [pid 6919] setpgid(0, 0 [pid 6916] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6920] setpgid(0, 0 [pid 6919] <... setpgid resumed>) = 0 [pid 6918] close(3 [pid 6916] <... openat resumed>) = 3 [pid 5072] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6920] <... setpgid resumed>) = 0 [pid 6918] <... close resumed>) = 0 [pid 6920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6918] close(4 [pid 6916] chdir("./file1" [pid 6920] <... openat resumed>) = 3 [pid 6919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6916] <... chdir resumed>) = 0 [pid 6920] write(3, "1000", 4 [pid 6919] <... openat resumed>) = 3 [pid 6918] <... close resumed>) = 0 [pid 6916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6920] <... write resumed>) = 4 [pid 6918] mkdir("./file1", 0777 [pid 6916] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6920] close(3 [pid 6919] write(3, "1000", 4 [pid 6916] truncate("./file1", 0 [pid 6920] <... close resumed>) = 0 [pid 6919] <... write resumed>) = 4 [pid 6920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6919] close(3) = 0 [pid 6919] symlink("/dev/binderfs", "./binderfs" [pid 6918] <... mkdir resumed>) = 0 [pid 6920] memfd_create("syzkaller", 0 [pid 6918] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6919] <... symlink resumed>) = 0 [pid 6920] <... memfd_create resumed>) = 3 [pid 5072] <... umount2 resumed>) = 0 [pid 6920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6919] memfd_create("syzkaller", 0 [pid 6920] <... mmap resumed>) = 0x7f943d000000 [pid 6916] <... truncate resumed>) = 0 [pid 6916] memfd_create("syzkaller", 0 [pid 6919] <... memfd_create resumed>) = 3 [pid 6917] <... mount resumed>) = 0 [pid 6917] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6916] <... memfd_create resumed>) = 4 [pid 6919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6917] <... openat resumed>) = 3 [pid 6916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6919] <... mmap resumed>) = 0x7f943d000000 [ 237.986449][ T6917] loop0: detected capacity change from 0 to 1024 [ 237.995826][ T6916] loop5: detected capacity change from 0 to 1024 [ 238.010851][ T6918] loop2: detected capacity change from 0 to 1024 [pid 6916] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6916] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] newfstatat(AT_FDCWD, "./303/file1", [pid 6920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6918] <... mount resumed>) = 0 [pid 6917] chdir("./file1" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6918] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6917] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6917] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6917] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... openat resumed>) = 4 [pid 6918] <... openat resumed>) = 3 [pid 6919] <... write resumed>) = 524288 [pid 6917] truncate("./file1", 0 [pid 6916] <... write resumed>) = 524288 [pid 5072] newfstatat(4, "", [pid 6920] <... write resumed>) = 524288 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 6920] munmap(0x7f943d000000, 138412032 [pid 6918] chdir("./file1" [pid 6920] <... munmap resumed>) = 0 [pid 6918] <... chdir resumed>) = 0 [pid 6917] <... truncate resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6918] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] getdents64(4, [pid 6918] truncate("./file1", 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6917] memfd_create("syzkaller", 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./303/file1" [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6917] <... memfd_create resumed>) = 4 [pid 5072] <... rmdir resumed>) = 0 [pid 6917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6920] <... openat resumed>) = 4 [pid 5072] getdents64(3, [pid 6920] ioctl(4, LOOP_SET_FD, 3 [pid 6919] munmap(0x7f943d000000, 138412032 [pid 6916] munmap(0x7f943d000000, 138412032 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6919] <... munmap resumed>) = 0 [pid 6917] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6918] <... truncate resumed>) = 0 [pid 6918] memfd_create("syzkaller", 0) = 4 [pid 6919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6916] <... munmap resumed>) = 0 [pid 5072] close(3 [pid 6919] <... openat resumed>) = 4 [pid 6918] <... mmap resumed>) = 0x7f943d000000 [pid 6916] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 6916] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6916] close(4 [pid 5072] rmdir("./303" [pid 6919] ioctl(4, LOOP_SET_FD, 3 [pid 6918] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6916] <... close resumed>) = 0 [pid 6917] <... write resumed>) = 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./304", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6920] <... ioctl resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6920] close(3) = 0 [pid 6917] munmap(0x7f943d000000, 138412032 [pid 6920] close(4) = 0 [pid 6920] mkdir("./file1", 0777 [pid 6917] <... munmap resumed>) = 0 [pid 6920] <... mkdir resumed>) = 0 [pid 6920] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6917] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 238.102009][ T6920] loop4: detected capacity change from 0 to 1024 [ 238.120716][ T6919] loop3: detected capacity change from 0 to 1024 [pid 6916] exit_group(0 [pid 6919] <... ioctl resumed>) = 0 [pid 6918] <... write resumed>) = 524288 [pid 6917] close(4 [pid 6916] <... exit_group resumed>) = ? [pid 6919] close(3) = 0 [pid 6919] close(4) = 0 [pid 6919] mkdir("./file1", 0777 [pid 6918] munmap(0x7f943d000000, 138412032 [pid 6917] <... close resumed>) = 0 [pid 6916] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6916, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6919] <... mkdir resumed>) = 0 [pid 6918] <... munmap resumed>) = 0 [pid 6917] exit_group(0 [pid 5072] <... ioctl resumed>) = 0 [pid 6919] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6917] <... exit_group resumed>) = ? [pid 5076] umount2("./301", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./301", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6918] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] getdents64(3, [pid 6918] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./301/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] close(3 [pid 5076] newfstatat(AT_FDCWD, "./301/binderfs", [pid 5072] <... close resumed>) = 0 [pid 6918] close(4 [pid 6917] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6920] <... mount resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] unlink("./301/binderfs") = 0 [pid 5076] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6917, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6920] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6918] <... close resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 6920] <... openat resumed>) = 3 [pid 5071] <... restart_syscall resumed>) = 0 [pid 6920] chdir("./file1"./strace-static-x86_64: Process 6921 attached ) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6921] set_robust_list(0x555583d53660, 24 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6921 [pid 6921] <... set_robust_list resumed>) = 0 [pid 6921] chdir("./304" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6921] <... chdir resumed>) = 0 [pid 6920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6921] setpgid(0, 0) = 0 [pid 6921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6920] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6919] <... mount resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6921] <... openat resumed>) = 3 [pid 6920] <... truncate resumed>) = 0 [pid 6919] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] newfstatat(3, "", [pid 6921] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6921] <... write resumed>) = 4 [pid 6919] <... openat resumed>) = 3 [pid 6921] close(3) = 0 [pid 6921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6921] memfd_create("syzkaller", 0 [pid 6920] memfd_create("syzkaller", 0 [pid 6919] chdir("./file1" [pid 6918] exit_group(0 [pid 5076] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 6920] <... memfd_create resumed>) = 4 [pid 6919] <... chdir resumed>) = 0 [pid 6918] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./301/file1", [pid 5071] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./301/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./305/binderfs", [pid 6921] <... memfd_create resumed>) = 3 [pid 6918] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6920] <... mmap resumed>) = 0x7f943d000000 [pid 6919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6918, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] unlink("./305/binderfs" [pid 5076] openat(AT_FDCWD, "./301/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... unlink resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5071] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6919] truncate("./file1", 0 [pid 5076] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6921] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 6921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(3, "", [pid 5076] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 6919] <... truncate resumed>) = 0 [pid 5076] rmdir("./301/file1" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6920] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6919] memfd_create("syzkaller", 0 [pid 5073] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6919] <... memfd_create resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./305/binderfs", [pid 6919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6919] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] unlink("./305/binderfs" [pid 6919] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... unlink resumed>) = 0 [pid 5073] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./301") = 0 [pid 6921] <... write resumed>) = 524288 [pid 6920] <... write resumed>) = 524288 [pid 5071] <... umount2 resumed>) = 0 [pid 5076] mkdir("./302", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./305/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5073] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6921] munmap(0x7f943d000000, 138412032 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6919] <... write resumed>) = 524288 [pid 5071] getdents64(4, [pid 6921] <... munmap resumed>) = 0 [pid 6920] munmap(0x7f943d000000, 138412032 [pid 6919] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(AT_FDCWD, "./305/file1", [pid 5071] getdents64(4, [pid 6921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6921] <... openat resumed>) = 4 [pid 5073] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(4) = 0 [pid 6921] ioctl(4, LOOP_SET_FD, 3 [pid 5071] rmdir("./305/file1" [pid 6920] <... munmap resumed>) = 0 [pid 6919] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6920] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6920] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6919] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] close(3 [pid 6920] close(4 [pid 6919] close(4 [pid 5073] getdents64(4, [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./305") = 0 [pid 5071] mkdir("./306", 0777) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6920] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6921] <... ioctl resumed>) = 0 [pid 6920] exit_group(0 [pid 6919] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 6921] close(3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6921] <... close resumed>) = 0 [pid 6920] <... exit_group resumed>) = ? [pid 6919] exit_group(0 [pid 5073] close(4 [pid 6921] close(4 [pid 6920] +++ exited with 0 +++ [pid 6919] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 6921] <... close resumed>) = 0 [pid 6919] +++ exited with 0 +++ [pid 5073] rmdir("./305/file1" [pid 6921] mkdir("./file1", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6920, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5073] <... rmdir resumed>) = 0 [pid 6921] <... mkdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6919, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] getdents64(3, [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./305" [pid 6921] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... rmdir resumed>) = 0 [pid 5076] close(3 [pid 5075] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] mkdir("./306", 0777 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... mkdir resumed>) = 0 [ 238.313594][ T6921] loop1: detected capacity change from 0 to 1024 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] newfstatat(3, "", [pid 5074] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./304/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./305/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./304/binderfs" [pid 5074] unlink("./305/binderfs" [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6922 [pid 5075] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6922 attached [pid 5073] <... openat resumed>) = 3 [pid 5071] close(3 [pid 6922] set_robust_list(0x555583d53660, 24 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6922] <... set_robust_list resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6922] chdir("./302" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6921] <... mount resumed>) = 0 [pid 6921] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6921] chdir("./file1") = 0 [pid 6921] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6923 attached [pid 6922] <... chdir resumed>) = 0 [pid 6923] set_robust_list(0x555583d53660, 24 [pid 6922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6923 [pid 6923] <... set_robust_list resumed>) = 0 [pid 6922] <... prctl resumed>) = 0 [pid 5075] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] chdir("./306" [pid 6922] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 6923] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./304/file1", [pid 6923] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6922] <... setpgid resumed>) = 0 [pid 6921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] <... prctl resumed>) = 0 [pid 6921] truncate("./file1", 0 [pid 5075] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] setpgid(0, 0 [pid 6922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6923] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... openat resumed>) = 4 [pid 6923] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(4, "", [pid 6923] write(3, "1000", 4 [pid 6922] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./305/file1", [pid 6923] <... write resumed>) = 4 [pid 5075] getdents64(4, [pid 6923] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6923] <... close resumed>) = 0 [pid 6921] <... truncate resumed>) = 0 [pid 5075] getdents64(4, [pid 6923] symlink("/dev/binderfs", "./binderfs" [pid 6921] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] <... symlink resumed>) = 0 [pid 6922] write(3, "1000", 4 [pid 6921] <... memfd_create resumed>) = 4 [pid 5075] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6922] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6923] memfd_create("syzkaller", 0 [pid 6921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 6922] close(3 [pid 5074] <... openat resumed>) = 4 [pid 6921] <... mmap resumed>) = 0x7f943d000000 [pid 5075] rmdir("./304/file1" [pid 6923] <... memfd_create resumed>) = 3 [pid 6922] <... close resumed>) = 0 [pid 6921] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] <... ioctl resumed>) = 0 [pid 6922] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6922] <... symlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5075] close(3) = 0 [pid 5075] rmdir("./304") = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 6922] memfd_create("syzkaller", 0 [pid 6921] <... write resumed>) = 524288 [pid 5075] mkdir("./305", 0777 [pid 6923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5074] close(4 [pid 6922] <... memfd_create resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] rmdir("./305/file1" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6921] munmap(0x7f943d000000, 138412032./strace-static-x86_64: Process 6925 attached [pid 6923] <... write resumed>) = 524288 [pid 6922] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6925 [pid 6921] <... munmap resumed>) = 0 [pid 6923] munmap(0x7f943d000000, 138412032 [pid 6925] set_robust_list(0x555583d53660, 24 [pid 6923] <... munmap resumed>) = 0 [pid 6922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(3 [pid 6923] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6921] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6925] <... set_robust_list resumed>) = 0 [pid 6923] <... openat resumed>) = 4 [pid 6921] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6925] chdir("./306" [pid 5074] rmdir("./305" [pid 6925] <... chdir resumed>) = 0 [pid 6923] ioctl(4, LOOP_SET_FD, 3 [pid 6925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6922] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 6925] <... prctl resumed>) = 0 [pid 6921] close(4 [pid 6925] setpgid(0, 0 [pid 6921] <... close resumed>) = 0 [pid 5075] close(3 [pid 6925] <... setpgid resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] mkdir("./306", 0777 [pid 6925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6921] exit_group(0) = ? [pid 5074] <... mkdir resumed>) = 0 [pid 6925] <... openat resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6923] <... ioctl resumed>) = 0 [pid 6925] write(3, "1000", 4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6923] close(3./strace-static-x86_64: Process 6927 attached [pid 6925] <... write resumed>) = 4 [pid 6923] <... close resumed>) = 0 [pid 6922] munmap(0x7f943d000000, 138412032 [pid 6921] +++ exited with 0 +++ [pid 5074] <... openat resumed>) = 3 [pid 6925] close(3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6921, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6925] <... close resumed>) = 0 [pid 6922] <... munmap resumed>) = 0 [pid 6925] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6927 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6925] <... symlink resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 6925] memfd_create("syzkaller", 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6925] <... memfd_create resumed>) = 3 [pid 6922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] getdents64(3, [pid 6925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6922] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6925] <... mmap resumed>) = 0x7f943d000000 [pid 6922] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./304/binderfs", [pid 6927] set_robust_list(0x555583d53660, 24 [pid 6923] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6927] <... set_robust_list resumed>) = 0 [pid 6923] <... close resumed>) = 0 [pid 5072] unlink("./304/binderfs" [pid 6923] mkdir("./file1", 0777 [pid 5072] <... unlink resumed>) = 0 [pid 6923] <... mkdir resumed>) = 0 [pid 5072] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6927] chdir("./305") = 0 [pid 6923] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6927] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6923] <... mount resumed>) = 0 [pid 6922] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6927] <... prctl resumed>) = 0 [pid 6923] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6927] setpgid(0, 0 [pid 6923] <... openat resumed>) = 3 [pid 6922] close(3) = 0 [pid 6927] <... setpgid resumed>) = 0 [pid 6923] chdir("./file1" [pid 6922] close(4 [pid 6927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6923] <... chdir resumed>) = 0 [pid 6923] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6922] <... close resumed>) = 0 [pid 6927] <... openat resumed>) = 3 [pid 6923] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6922] mkdir("./file1", 0777 [pid 5072] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6923] truncate("./file1", 0 [pid 6927] write(3, "1000", 4 [pid 6922] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6927] <... write resumed>) = 4 [pid 6922] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] newfstatat(AT_FDCWD, "./304/file1", [pid 6927] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6927] <... close resumed>) = 0 [pid 5072] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6923] <... truncate resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6923] memfd_create("syzkaller", 0 [pid 5072] <... openat resumed>) = 4 [ 238.485654][ T6923] loop0: detected capacity change from 0 to 1024 [ 238.519391][ T6922] loop5: detected capacity change from 0 to 1024 [pid 6927] symlink("/dev/binderfs", "./binderfs" [pid 6923] <... memfd_create resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 6927] <... symlink resumed>) = 0 [pid 6923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6923] <... mmap resumed>) = 0x7f943d000000 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 6927] memfd_create("syzkaller", 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./304/file1" [pid 6927] <... memfd_create resumed>) = 3 [pid 6923] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 6927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] close(3 [pid 6925] <... write resumed>) = 524288 [pid 6922] <... mount resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6925] munmap(0x7f943d000000, 138412032 [pid 6922] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6925] <... munmap resumed>) = 0 [pid 6922] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5072] rmdir("./304" [pid 6925] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6922] chdir("./file1" [pid 5074] <... close resumed>) = 0 [pid 6925] <... openat resumed>) = 4 [pid 6922] <... chdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... rmdir resumed>) = 0 [pid 6922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] mkdir("./305", 0777 [pid 6922] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6922] truncate("./file1", 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 ./strace-static-x86_64: Process 6928 attached [pid 6925] ioctl(4, LOOP_SET_FD, 3 [pid 6922] <... truncate resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6922] memfd_create("syzkaller", 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6928 [pid 6928] set_robust_list(0x555583d53660, 24 [pid 6927] <... write resumed>) = 524288 [pid 6923] <... write resumed>) = 524288 [pid 6922] <... memfd_create resumed>) = 4 [pid 5072] <... ioctl resumed>) = 0 [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 6929 [pid 6923] munmap(0x7f943d000000, 138412032 [pid 6928] <... set_robust_list resumed>) = 0 [pid 6923] <... munmap resumed>) = 0 [pid 6922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 6929 attached [pid 6929] set_robust_list(0x555583d53660, 24) = 0 [pid 6929] chdir("./305") = 0 [pid 6929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6929] setpgid(0, 0) = 0 [pid 6929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6927] munmap(0x7f943d000000, 138412032 [pid 6923] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6929] <... openat resumed>) = 3 [pid 6928] chdir("./306" [pid 6927] <... munmap resumed>) = 0 [pid 6923] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6922] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6928] <... chdir resumed>) = 0 [pid 6928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6929] write(3, "1000", 4 [pid 6928] <... prctl resumed>) = 0 [pid 6929] <... write resumed>) = 4 [pid 6928] setpgid(0, 0 [pid 6923] close(4 [pid 6929] close(3 [pid 6927] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6923] <... close resumed>) = 0 [pid 6928] <... setpgid resumed>) = 0 [pid 6929] <... close resumed>) = 0 [pid 6927] <... openat resumed>) = 4 [pid 6929] symlink("/dev/binderfs", "./binderfs" [pid 6928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6927] ioctl(4, LOOP_SET_FD, 3 [pid 6925] <... ioctl resumed>) = 0 [pid 6929] <... symlink resumed>) = 0 [pid 6928] <... openat resumed>) = 3 [pid 6925] close(3 [pid 6922] <... write resumed>) = 524288 [pid 6925] <... close resumed>) = 0 [pid 6929] memfd_create("syzkaller", 0 [pid 6928] write(3, "1000", 4 [pid 6925] close(4 [pid 6922] munmap(0x7f943d000000, 138412032 [pid 6928] <... write resumed>) = 4 [pid 6925] <... close resumed>) = 0 [pid 6923] exit_group(0) = ? [pid 6928] close(3 [pid 6925] mkdir("./file1", 0777 [pid 6923] +++ exited with 0 +++ [pid 6922] <... munmap resumed>) = 0 [pid 6928] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6923, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 6928] symlink("/dev/binderfs", "./binderfs" [pid 6929] <... memfd_create resumed>) = 3 [pid 6929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6928] <... symlink resumed>) = 0 [pid 6925] <... mkdir resumed>) = 0 [pid 6922] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6929] <... mmap resumed>) = 0x7f943d000000 [pid 6928] memfd_create("syzkaller", 0 [pid 6922] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 238.606933][ T6925] loop2: detected capacity change from 0 to 1024 [ 238.636379][ T6927] loop4: detected capacity change from 0 to 1024 [pid 6929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6922] close(4 [pid 6928] <... memfd_create resumed>) = 3 [pid 6927] <... ioctl resumed>) = 0 [pid 6927] close(3) = 0 [pid 6927] close(4) = 0 [pid 6927] mkdir("./file1", 0777) = 0 [pid 6927] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6925] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6922] <... close resumed>) = 0 [pid 6928] <... mmap resumed>) = 0x7f943d000000 [pid 5071] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6929] <... write resumed>) = 524288 [pid 5071] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6922] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./306/binderfs", [pid 6927] <... mount resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./306/binderfs" [pid 6927] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... unlink resumed>) = 0 [pid 6927] <... openat resumed>) = 3 [pid 6925] <... mount resumed>) = 0 [pid 6922] <... exit_group resumed>) = ? [pid 5071] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6929] munmap(0x7f943d000000, 138412032 [pid 6927] chdir("./file1" [pid 6929] <... munmap resumed>) = 0 [pid 6927] <... chdir resumed>) = 0 [pid 6927] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6922] +++ exited with 0 +++ [pid 6927] truncate("./file1", 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6922, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6929] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6927] <... truncate resumed>) = 0 [pid 6925] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./302", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 6929] <... openat resumed>) = 4 [pid 6927] memfd_create("syzkaller", 0 [pid 6925] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6929] ioctl(4, LOOP_SET_FD, 3 [pid 6927] <... memfd_create resumed>) = 4 [pid 6928] <... write resumed>) = 524288 [pid 6927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6925] chdir("./file1" [pid 5076] openat(AT_FDCWD, "./302", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6925] <... chdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6928] munmap(0x7f943d000000, 138412032 [pid 5071] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6925] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] newfstatat(3, "", [pid 6927] <... mmap resumed>) = 0x7f943d000000 [pid 6925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6928] <... munmap resumed>) = 0 [pid 6925] truncate("./file1", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./302/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6927] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./306/file1", [pid 6928] <... openat resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./302/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6927] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] ioctl(4, LOOP_SET_FD, 3 [pid 5076] unlink("./302/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6929] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... unlink resumed>) = 0 [pid 6929] close(3 [pid 5071] <... openat resumed>) = 4 [pid 6929] <... close resumed>) = 0 [pid 6929] close(4) = 0 [pid 6929] mkdir("./file1", 0777) = 0 [pid 5076] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 6929] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6925] <... truncate resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6925] memfd_create("syzkaller", 0 [pid 5071] getdents64(4, [pid 6925] <... memfd_create resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6928] <... ioctl resumed>) = 0 [pid 6927] munmap(0x7f943d000000, 138412032 [pid 6925] <... mmap resumed>) = 0x7f943d000000 [pid 5071] getdents64(4, [pid 6928] close(3 [pid 6927] <... munmap resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6928] <... close resumed>) = 0 [pid 6927] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6925] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 238.758733][ T6929] loop1: detected capacity change from 0 to 1024 [ 238.789783][ T6928] loop3: detected capacity change from 0 to 1024 [pid 5071] close(4 [pid 6928] close(4 [pid 6927] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./306/file1" [pid 6927] close(4 [pid 5071] <... rmdir resumed>) = 0 [pid 6928] <... close resumed>) = 0 [pid 6927] <... close resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 6929] <... mount resumed>) = 0 [pid 6928] mkdir("./file1", 0777 [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] rmdir("./306" [pid 6928] <... mkdir resumed>) = 0 [pid 6929] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./307", 0777 [pid 6929] <... openat resumed>) = 3 [pid 6928] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... mkdir resumed>) = 0 [pid 6927] exit_group(0) = ? [pid 6927] +++ exited with 0 +++ [pid 6925] <... write resumed>) = 524288 [pid 5076] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6929] chdir("./file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./302/file1", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6927, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6929] <... chdir resumed>) = 0 [pid 6928] <... mount resumed>) = 0 [pid 6925] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./302/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6929] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6929] truncate("./file1", 0 [pid 6925] <... munmap resumed>) = 0 [pid 6928] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6925] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./302/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6928] <... openat resumed>) = 3 [pid 5071] close(3 [pid 5076] <... openat resumed>) = 4 [pid 5075] newfstatat(3, "", [pid 5071] <... close resumed>) = 0 [pid 6928] chdir("./file1" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6929] <... truncate resumed>) = 0 [pid 6925] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6929] memfd_create("syzkaller", 0 [pid 6925] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6929] <... memfd_create resumed>) = 4 [pid 6929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 6931 attached [pid 6925] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6931 [pid 6931] set_robust_list(0x555583d53660, 24) = 0 [pid 6931] chdir("./307") = 0 [pid 6931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6931] setpgid(0, 0 [pid 6928] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6931] <... setpgid resumed>) = 0 [pid 6928] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5075] newfstatat(AT_FDCWD, "./305/binderfs", [pid 6931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6929] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(4 [pid 5075] unlink("./305/binderfs" [pid 6931] <... openat resumed>) = 3 [pid 6929] <... write resumed>) = 524288 [pid 6928] truncate("./file1", 0 [pid 6925] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5076] rmdir("./302/file1" [pid 6931] write(3, "1000", 4 [pid 6928] <... truncate resumed>) = 0 [pid 6925] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] memfd_create("syzkaller", 0 [pid 6931] <... write resumed>) = 4 [pid 6931] close(3 [pid 6928] <... memfd_create resumed>) = 4 [pid 6925] +++ exited with 0 +++ [pid 6931] <... close resumed>) = 0 [pid 6931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6931] memfd_create("syzkaller", 0) = 3 [pid 6929] munmap(0x7f943d000000, 138412032) = 0 [pid 6931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6929] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6928] <... mmap resumed>) = 0x7f943d000000 [pid 6929] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6925, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6929] close(4 [pid 6928] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./302" [pid 5073] getdents64(3, [pid 6931] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6929] <... close resumed>) = 0 [pid 5076] mkdir("./303", 0777 [pid 5073] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./305/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5075] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(4, "", [pid 5073] unlink("./306/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6929] exit_group(0 [pid 5075] getdents64(4, [pid 6929] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6929] +++ exited with 0 +++ [pid 6928] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6929, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] rmdir("./305/file1" [pid 5073] <... umount2 resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6931] munmap(0x7f943d000000, 138412032 [pid 6928] munmap(0x7f943d000000, 138412032 [pid 5072] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 6931] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6928] <... munmap resumed>) = 0 [pid 6931] <... openat resumed>) = 4 [pid 5073] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(3, "", [pid 6931] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6931] <... ioctl resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./306/file1", [pid 5072] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] close(3 [pid 5073] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./305/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./305/binderfs" [pid 5073] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... unlink resumed>) = 0 [pid 5075] rmdir("./305" [pid 5073] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5072] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6928] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6931] close(3 [pid 6928] close(4 [pid 5072] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./306/file1" [pid 5075] mkdir("./306", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 6928] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5072] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] rmdir("./306" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6931] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./305/file1", [pid 6931] close(4 [pid 6928] exit_group(0 [pid 6931] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] mkdir("./307", 0777 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6931] mkdir("./file1", 0777) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6931] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", [pid 6928] <... exit_group resumed>) = ? [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 6931] <... mount resumed>) = 0 [pid 6928] +++ exited with 0 +++ [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6928, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [ 239.015243][ T6931] loop0: detected capacity change from 0 to 1024 [pid 6931] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... ioctl resumed>) = 0 [pid 6931] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 6931] chdir("./file1" [pid 5076] close(3 [pid 6931] <... chdir resumed>) = 0 [pid 6931] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 6931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./305/file1" [pid 5076] <... close resumed>) = 0 [pid 5075] close(3 [pid 5072] <... rmdir resumed>) = 0 [pid 6931] truncate("./file1", 0 [pid 5074] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] newfstatat(3, "", [pid 6931] <... truncate resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./305") = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6933 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6932 [pid 5072] mkdir("./306", 0777) = 0 [pid 6931] memfd_create("syzkaller", 0 [pid 5074] getdents64(3, [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6933 attached ./strace-static-x86_64: Process 6932 attached ) = 3 [pid 6933] set_robust_list(0x555583d53660, 24 [pid 5073] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6931] <... memfd_create resumed>) = 4 [pid 5074] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6932] set_robust_list(0x555583d53660, 24 [pid 6933] <... set_robust_list resumed>) = 0 [pid 6931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6933] chdir("./303" [pid 6931] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5073] <... close resumed>) = 0 [pid 6932] <... set_robust_list resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6932] chdir("./306" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6932] <... chdir resumed>) = 0 [pid 6933] <... chdir resumed>) = 0 [pid 6932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6932] <... prctl resumed>) = 0 [pid 6933] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6934 attached [pid 6932] setpgid(0, 0 [pid 6933] setpgid(0, 0 [pid 5074] unlink("./306/binderfs" [pid 6932] <... setpgid resumed>) = 0 [pid 6934] set_robust_list(0x555583d53660, 24 [pid 6932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6933] <... setpgid resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6934 [pid 6934] <... set_robust_list resumed>) = 0 [pid 6932] <... openat resumed>) = 3 [pid 6931] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6934] chdir("./307") = 0 [pid 6932] write(3, "1000", 4 [pid 6933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6934] setpgid(0, 0 [pid 6933] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = 0 [pid 6933] write(3, "1000", 4 [pid 5074] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6933] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] <... write resumed>) = 4 [pid 6933] close(3 [pid 5074] newfstatat(AT_FDCWD, "./306/file1", [pid 6932] close(3 [pid 6933] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6933] symlink("/dev/binderfs", "./binderfs" [pid 6934] <... setpgid resumed>) = 0 [pid 6932] <... close resumed>) = 0 [pid 6933] <... symlink resumed>) = 0 [pid 5074] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6932] symlink("/dev/binderfs", "./binderfs" [pid 6933] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6932] <... symlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6931] <... write resumed>) = 524288 [pid 5074] <... openat resumed>) = 4 [pid 5072] <... ioctl resumed>) = 0 [pid 6934] <... openat resumed>) = 3 [pid 6932] memfd_create("syzkaller", 0 [pid 6933] <... memfd_create resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 6933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6932] <... memfd_create resumed>) = 3 [pid 6933] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(4, [pid 6933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(4, [pid 6932] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6934] write(3, "1000", 4 [pid 6931] munmap(0x7f943d000000, 138412032 [pid 5074] close(4 [pid 6932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./306/file1" [pid 6934] <... write resumed>) = 4 [pid 6934] close(3 [pid 6931] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] close(3 [pid 6934] <... close resumed>) = 0 [pid 6931] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5074] close(3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6934] symlink("/dev/binderfs", "./binderfs" [pid 6931] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... close resumed>) = 0 [pid 6934] <... symlink resumed>) = 0 [pid 6931] close(4 [pid 5074] rmdir("./306" [pid 6934] memfd_create("syzkaller", 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./307", 0777 [pid 6934] <... memfd_create resumed>) = 3 [pid 6931] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6935 attached [pid 6934] <... mmap resumed>) = 0x7f943d000000 [pid 6935] set_robust_list(0x555583d53660, 24 [pid 6934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6933] <... write resumed>) = 524288 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6935 [pid 6935] <... set_robust_list resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6935] chdir("./306" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6935] <... chdir resumed>) = 0 [pid 6935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6935] setpgid(0, 0) = 0 [pid 6935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6934] <... write resumed>) = 524288 [pid 6931] exit_group(0 [pid 6935] write(3, "1000", 4 [pid 6933] munmap(0x7f943d000000, 138412032 [pid 6931] <... exit_group resumed>) = ? [pid 6935] <... write resumed>) = 4 [pid 6935] close(3 [pid 6933] <... munmap resumed>) = 0 [pid 6931] +++ exited with 0 +++ [pid 6935] <... close resumed>) = 0 [pid 6935] symlink("/dev/binderfs", "./binderfs" [pid 6933] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6931, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6935] <... symlink resumed>) = 0 [pid 6932] <... write resumed>) = 524288 [pid 6933] <... openat resumed>) = 4 [pid 6935] memfd_create("syzkaller", 0 [pid 6932] munmap(0x7f943d000000, 138412032 [pid 6933] ioctl(4, LOOP_SET_FD, 3 [pid 6934] munmap(0x7f943d000000, 138412032 [pid 6932] <... munmap resumed>) = 0 [pid 6934] <... munmap resumed>) = 0 [pid 6935] <... memfd_create resumed>) = 3 [pid 6935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6935] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 6935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6934] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6932] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6932] <... openat resumed>) = 4 [pid 5071] getdents64(3, [pid 6932] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6934] <... openat resumed>) = 4 [pid 6932] <... ioctl resumed>) = 0 [pid 6934] ioctl(4, LOOP_SET_FD, 3 [pid 5071] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6934] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./307/binderfs", [pid 6933] <... ioctl resumed>) = 0 [pid 6933] close(3) = 0 [pid 6933] close(4) = 0 [pid 6933] mkdir("./file1", 0777) = 0 [pid 6933] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6932] close(3 [pid 5074] close(3 [pid 6932] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6932] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6935] <... write resumed>) = 524288 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6932] <... close resumed>) = 0 [pid 6932] mkdir("./file1", 0777 [pid 5071] unlink("./307/binderfs" [pid 6933] <... mount resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6932] <... mkdir resumed>) = 0 [pid 6933] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6935] munmap(0x7f943d000000, 138412032 [pid 6933] <... openat resumed>) = 3 [pid 6935] <... munmap resumed>) = 0 [pid 6934] close(3 [pid 6932] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6933] chdir("./file1"./strace-static-x86_64: Process 6936 attached [pid 6934] <... close resumed>) = 0 [pid 6933] <... chdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6936 [pid 6936] set_robust_list(0x555583d53660, 24 [pid 6935] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6934] close(4 [pid 6933] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... umount2 resumed>) = 0 [pid 6936] <... set_robust_list resumed>) = 0 [ 239.229065][ T6933] loop5: detected capacity change from 0 to 1024 [ 239.245948][ T6932] loop4: detected capacity change from 0 to 1024 [ 239.255343][ T6934] loop2: detected capacity change from 0 to 1024 [pid 6935] <... openat resumed>) = 4 [pid 6934] <... close resumed>) = 0 [pid 6933] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6936] chdir("./307" [pid 6935] ioctl(4, LOOP_SET_FD, 3 [pid 6934] mkdir("./file1", 0777 [pid 6933] truncate("./file1", 0 [pid 6936] <... chdir resumed>) = 0 [pid 6934] <... mkdir resumed>) = 0 [pid 6936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6936] setpgid(0, 0) = 0 [pid 6936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6936] write(3, "1000", 4) = 4 [pid 6936] close(3 [pid 6935] <... ioctl resumed>) = 0 [pid 6936] <... close resumed>) = 0 [pid 6935] close(3 [pid 6936] symlink("/dev/binderfs", "./binderfs" [pid 6935] <... close resumed>) = 0 [pid 6934] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6932] <... mount resumed>) = 0 [pid 5071] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6936] <... symlink resumed>) = 0 [pid 6932] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6933] <... truncate resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6936] memfd_create("syzkaller", 0 [pid 6932] <... openat resumed>) = 3 [pid 6933] memfd_create("syzkaller", 0 [pid 6936] <... memfd_create resumed>) = 3 [pid 6932] chdir("./file1" [pid 6933] <... memfd_create resumed>) = 4 [pid 6936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6932] <... chdir resumed>) = 0 [pid 6933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6936] <... mmap resumed>) = 0x7f943d000000 [pid 6932] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6933] <... mmap resumed>) = 0x7f943d000000 [pid 6936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6935] close(4 [pid 6934] <... mount resumed>) = 0 [pid 6932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6933] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] newfstatat(AT_FDCWD, "./307/file1", [pid 6935] <... close resumed>) = 0 [pid 6932] truncate("./file1", 0 [pid 6934] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6935] mkdir("./file1", 0777 [pid 6934] <... openat resumed>) = 3 [pid 5071] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6935] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6935] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6934] chdir("./file1" [pid 5071] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6934] <... chdir resumed>) = 0 [pid 6934] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", [pid 6934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6932] <... truncate resumed>) = 0 [pid 6933] <... write resumed>) = 524288 [ 239.296997][ T6935] loop1: detected capacity change from 0 to 1024 [pid 6932] memfd_create("syzkaller", 0 [pid 6934] truncate("./file1", 0 [pid 5071] getdents64(4, [pid 6932] <... memfd_create resumed>) = 4 [pid 6932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6932] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] getdents64(4, [pid 6934] <... truncate resumed>) = 0 [pid 6934] memfd_create("syzkaller", 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6934] <... memfd_create resumed>) = 4 [pid 5071] close(4 [pid 6934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... close resumed>) = 0 [pid 6935] <... mount resumed>) = 0 [pid 6935] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6935] chdir("./file1") = 0 [pid 6935] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6935] truncate("./file1", 0 [pid 6934] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] rmdir("./307/file1" [pid 6936] <... write resumed>) = 524288 [pid 6933] munmap(0x7f943d000000, 138412032) = 0 [pid 6936] munmap(0x7f943d000000, 138412032 [pid 5071] <... rmdir resumed>) = 0 [pid 6935] <... truncate resumed>) = 0 [pid 5071] getdents64(3, [pid 6935] memfd_create("syzkaller", 0 [pid 6936] <... munmap resumed>) = 0 [pid 6935] <... memfd_create resumed>) = 4 [pid 6933] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] close(3 [pid 6935] <... mmap resumed>) = 0x7f943d000000 [pid 6932] <... write resumed>) = 524288 [pid 6933] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 6936] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6935] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6936] <... openat resumed>) = 4 [pid 5071] rmdir("./307" [pid 6936] ioctl(4, LOOP_SET_FD, 3 [pid 6934] <... write resumed>) = 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./308", 0777 [pid 6933] close(4 [pid 5071] <... mkdir resumed>) = 0 [pid 6933] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6934] munmap(0x7f943d000000, 138412032 [pid 6932] munmap(0x7f943d000000, 138412032 [pid 6934] <... munmap resumed>) = 0 [pid 6932] <... munmap resumed>) = 0 [pid 6934] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6932] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6935] <... write resumed>) = 524288 [pid 6934] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6932] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6936] <... ioctl resumed>) = 0 [pid 6934] close(4 [pid 6932] close(4 [pid 6933] exit_group(0 [pid 6934] <... close resumed>) = 0 [pid 6932] <... close resumed>) = 0 [pid 6936] close(3) = 0 [pid 6933] <... exit_group resumed>) = ? [pid 6936] close(4 [pid 6935] munmap(0x7f943d000000, 138412032 [pid 6936] <... close resumed>) = 0 [pid 6933] +++ exited with 0 +++ [pid 6936] mkdir("./file1", 0777 [pid 6935] <... munmap resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6933, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6936] <... mkdir resumed>) = 0 [pid 6936] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6935] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6932] exit_group(0 [pid 5076] umount2("./303", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6935] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./303", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6935] <... close resumed>) = 0 [pid 6936] <... mount resumed>) = 0 [pid 6934] exit_group(0 [pid 6932] <... exit_group resumed>) = ? [ 239.392792][ T6936] loop3: detected capacity change from 0 to 1024 [pid 5076] <... openat resumed>) = 3 [pid 6936] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(3, "", [pid 5071] <... ioctl resumed>) = 0 [pid 6936] <... openat resumed>) = 3 [pid 6935] exit_group(0 [pid 6934] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6936] chdir("./file1" [pid 6935] <... exit_group resumed>) = ? [pid 6934] +++ exited with 0 +++ [pid 6932] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5071] close(3 [pid 6936] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6932, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6936] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6935] +++ exited with 0 +++ [pid 5076] umount2("./303/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... close resumed>) = 0 [pid 6936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6934, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6936] truncate("./file1", 0 [pid 5076] newfstatat(AT_FDCWD, "./303/binderfs", [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6935, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] unlink("./303/binderfs" [pid 5075] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6937 attached [pid 6936] <... truncate resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6937] set_robust_list(0x555583d53660, 24 [pid 6936] memfd_create("syzkaller", 0 [pid 5076] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6937 [pid 6937] <... set_robust_list resumed>) = 0 [pid 6936] <... memfd_create resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(3, "", [pid 6937] chdir("./308" [pid 6936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6936] <... mmap resumed>) = 0x7f943d000000 [pid 5076] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 6937] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5073] newfstatat(3, "", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6937] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6936] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(AT_FDCWD, "./303/file1", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] <... prctl resumed>) = 0 [pid 6937] setpgid(0, 0 [pid 5075] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6937] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5072] newfstatat(AT_FDCWD, "./306/binderfs", [pid 6937] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./306/binderfs" [pid 5072] unlink("./306/binderfs" [pid 5076] umount2("./303/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./307/binderfs", [pid 5072] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] write(3, "1000", 4 [pid 6936] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "./303/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./307/binderfs" [pid 6937] <... write resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6937] close(3 [pid 5076] getdents64(4, [pid 5073] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6937] symlink("/dev/binderfs", "./binderfs" [pid 5076] getdents64(4, [pid 6937] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6937] memfd_create("syzkaller", 0 [pid 5076] close(4 [pid 6937] <... memfd_create resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 6937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] rmdir("./303/file1" [pid 6937] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5076] rmdir("./303" [pid 5073] <... umount2 resumed>) = 0 [pid 6936] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 6936] <... munmap resumed>) = 0 [pid 5073] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 6937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6936] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] mkdir("./304", 0777 [pid 5075] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./307/file1", [pid 6936] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6936] close(4 [pid 5075] newfstatat(AT_FDCWD, "./306/file1", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./306/file1", [pid 5073] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 6936] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5075] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(4 [pid 5075] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./307/file1" [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./306/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] getdents64(3, [pid 5072] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6937] <... write resumed>) = 524288 [pid 6936] exit_group(0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5072] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 6936] <... exit_group resumed>) = ? [pid 5075] rmdir("./306" [pid 5073] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6937] munmap(0x7f943d000000, 138412032 [pid 6936] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 6937] <... munmap resumed>) = 0 [pid 5075] mkdir("./307", 0777 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6936, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] rmdir("./307" [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5074] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 6937] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] mkdir("./308", 0777 [pid 5072] close(4) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] rmdir("./306/file1") = 0 [pid 6937] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6937] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 6937] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6937] close(4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6937] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(3 [pid 6937] mkdir("./file1", 0777 [pid 5074] newfstatat(AT_FDCWD, "./307/binderfs", [pid 5072] <... close resumed>) = 0 [pid 6937] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] rmdir("./306") = 0 [pid 6937] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] unlink("./307/binderfs" [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] mkdir("./307", 0777 [pid 5074] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [ 239.586164][ T6937] loop0: detected capacity change from 0 to 1024 [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(3 [pid 5074] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6937] <... mount resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] newfstatat(AT_FDCWD, "./307/file1", [pid 5073] <... close resumed>) = 0 ./strace-static-x86_64: Process 6938 attached [pid 6938] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6938 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6938] <... set_robust_list resumed>) = 0 [pid 5074] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6939 attached ) = -1 EINVAL (Invalid argument) [pid 6939] set_robust_list(0x555583d53660, 24 [pid 6938] chdir("./304" [pid 6937] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6939 [pid 5074] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6940 attached [pid 6939] <... set_robust_list resumed>) = 0 [pid 6937] <... openat resumed>) = 3 [pid 6937] chdir("./file1" [pid 5074] <... openat resumed>) = 4 [pid 6937] <... chdir resumed>) = 0 [pid 6939] chdir("./307" [pid 6937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] newfstatat(4, "", [pid 6939] <... chdir resumed>) = 0 [pid 6939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6938] <... chdir resumed>) = 0 [pid 6937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6939] <... prctl resumed>) = 0 [pid 6938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] getdents64(4, [pid 6939] setpgid(0, 0 [pid 6938] <... prctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6938] setpgid(0, 0 [pid 6937] truncate("./file1", 0 [pid 5074] getdents64(4, [pid 6939] <... setpgid resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6940 [pid 6938] <... setpgid resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6940] set_robust_list(0x555583d53660, 24 [pid 6939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] close(4 [pid 6940] <... set_robust_list resumed>) = 0 [pid 6938] <... openat resumed>) = 3 [pid 6940] chdir("./308" [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./307/file1" [pid 6940] <... chdir resumed>) = 0 [pid 6937] <... truncate resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6937] memfd_create("syzkaller", 0 [pid 6940] <... prctl resumed>) = 0 [pid 6940] setpgid(0, 0 [pid 6937] <... memfd_create resumed>) = 4 [pid 6940] <... setpgid resumed>) = 0 [pid 6937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6938] write(3, "1000", 4 [pid 6937] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] getdents64(3, [pid 5072] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6940] <... openat resumed>) = 3 [pid 6939] <... openat resumed>) = 3 [pid 6938] <... write resumed>) = 4 [pid 5074] close(3 [pid 6939] write(3, "1000", 4 [pid 6938] close(3 [pid 6939] <... write resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 6939] close(3 [pid 6938] <... close resumed>) = 0 [pid 5074] rmdir("./307" [pid 6939] <... close resumed>) = 0 [pid 6938] symlink("/dev/binderfs", "./binderfs" [pid 6939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6938] <... symlink resumed>) = 0 [pid 6940] write(3, "1000", 4 [pid 6939] memfd_create("syzkaller", 0 [pid 6940] <... write resumed>) = 4 [pid 6939] <... memfd_create resumed>) = 3 [pid 6938] memfd_create("syzkaller", 0 [pid 6940] close(3 [pid 6939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6938] <... memfd_create resumed>) = 3 [pid 6937] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 6940] <... close resumed>) = 0 [pid 6939] <... mmap resumed>) = 0x7f943d000000 [pid 5072] close(3 [pid 6940] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... close resumed>) = 0 [pid 6940] <... symlink resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6940] memfd_create("syzkaller", 0 [pid 6939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] mkdir("./308", 0777 [pid 6940] <... memfd_create resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 6940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6938] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6941 [pid 6940] <... mmap resumed>) = 0x7f943d000000 [pid 6940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6941 attached [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6941] set_robust_list(0x555583d53660, 24 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6941] <... set_robust_list resumed>) = 0 [pid 6941] chdir("./307") = 0 [pid 6941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6937] munmap(0x7f943d000000, 138412032 [pid 6941] <... prctl resumed>) = 0 [pid 6937] <... munmap resumed>) = 0 [pid 6941] setpgid(0, 0) = 0 [pid 6941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6937] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6941] write(3, "1000", 4 [pid 6938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6937] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6941] <... write resumed>) = 4 [pid 6937] close(4 [pid 6941] close(3) = 0 [pid 6941] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6941] memfd_create("syzkaller", 0 [pid 6939] <... write resumed>) = 524288 [pid 6940] <... write resumed>) = 524288 [pid 6937] <... close resumed>) = 0 [pid 6939] munmap(0x7f943d000000, 138412032 [pid 6941] <... memfd_create resumed>) = 3 [pid 6938] <... write resumed>) = 524288 [pid 6941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6939] <... munmap resumed>) = 0 [pid 6938] munmap(0x7f943d000000, 138412032 [pid 6940] munmap(0x7f943d000000, 138412032 [pid 6937] exit_group(0 [pid 6940] <... munmap resumed>) = 0 [pid 6938] <... munmap resumed>) = 0 [pid 6937] <... exit_group resumed>) = ? [pid 6940] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6940] ioctl(4, LOOP_SET_FD, 3 [pid 6939] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6938] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6937] +++ exited with 0 +++ [pid 6941] <... write resumed>) = 524288 [pid 6940] <... ioctl resumed>) = 0 [pid 6939] <... openat resumed>) = 4 [pid 6938] <... openat resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6937, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 6939] ioctl(4, LOOP_SET_FD, 3 [pid 6938] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./308/binderfs") = 0 [pid 5071] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 6941] munmap(0x7f943d000000, 138412032 [pid 6940] close(3 [pid 5074] close(3 [pid 6939] <... ioctl resumed>) = 0 [pid 6938] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6941] <... munmap resumed>) = 0 [pid 6940] <... close resumed>) = 0 [pid 6939] close(3 [pid 6938] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6941] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6940] close(4 [pid 6939] <... close resumed>) = 0 [pid 6938] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./308/file1", ./strace-static-x86_64: Process 6942 attached [pid 6941] <... openat resumed>) = 4 [pid 6940] <... close resumed>) = 0 [pid 6939] close(4 [pid 6938] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6942] set_robust_list(0x555583d53660, 24 [ 239.796187][ T6940] loop2: detected capacity change from 0 to 1024 [ 239.808814][ T6938] loop5: detected capacity change from 0 to 1024 [ 239.816513][ T6939] loop4: detected capacity change from 0 to 1024 [pid 6941] ioctl(4, LOOP_SET_FD, 3 [pid 6940] mkdir("./file1", 0777 [pid 6939] <... close resumed>) = 0 [pid 6938] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6942 [pid 5071] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6942] <... set_robust_list resumed>) = 0 [pid 6942] chdir("./308" [pid 6939] mkdir("./file1", 0777 [pid 6938] mkdir("./file1", 0777 [pid 6940] <... mkdir resumed>) = 0 [pid 6942] <... chdir resumed>) = 0 [pid 6939] <... mkdir resumed>) = 0 [pid 6938] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] <... openat resumed>) = 4 [pid 6942] setpgid(0, 0 [pid 6939] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6938] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] newfstatat(4, "", [pid 6942] <... setpgid resumed>) = 0 [pid 6940] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6939] <... mount resumed>) = 0 [pid 6938] <... mount resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6942] <... openat resumed>) = 3 [pid 6939] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6938] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] getdents64(4, [pid 6942] write(3, "1000", 4 [pid 6941] <... ioctl resumed>) = 0 [pid 6939] <... openat resumed>) = 3 [pid 6938] <... openat resumed>) = 3 [pid 6942] <... write resumed>) = 4 [pid 6941] close(3 [pid 6939] chdir("./file1" [pid 6938] chdir("./file1" [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6942] close(3 [pid 6941] <... close resumed>) = 0 [pid 6939] <... chdir resumed>) = 0 [pid 6938] <... chdir resumed>) = 0 [pid 5071] getdents64(4, [pid 6942] <... close resumed>) = 0 [pid 6941] close(4 [pid 6939] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6938] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6942] symlink("/dev/binderfs", "./binderfs" [pid 6941] <... close resumed>) = 0 [pid 6939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6938] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] close(4 [pid 6942] <... symlink resumed>) = 0 [pid 6941] mkdir("./file1", 0777 [pid 6939] truncate("./file1", 0 [pid 6938] truncate("./file1", 0 [pid 5071] <... close resumed>) = 0 [pid 6942] memfd_create("syzkaller", 0 [pid 6941] <... mkdir resumed>) = 0 [pid 6940] <... mount resumed>) = 0 [pid 5071] rmdir("./308/file1" [pid 6940] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6942] <... memfd_create resumed>) = 3 [pid 6940] <... openat resumed>) = 3 [pid 6938] <... truncate resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6941] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6940] chdir("./file1" [pid 6939] <... truncate resumed>) = 0 [pid 6938] memfd_create("syzkaller", 0 [pid 5071] getdents64(3, [pid 6942] <... mmap resumed>) = 0x7f943d000000 [pid 6939] memfd_create("syzkaller", 0 [pid 6938] <... memfd_create resumed>) = 4 [pid 6942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6940] <... chdir resumed>) = 0 [pid 6939] <... memfd_create resumed>) = 4 [pid 6938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 6940] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6938] <... mmap resumed>) = 0x7f943d000000 [ 239.852561][ T6941] loop1: detected capacity change from 0 to 1024 [pid 6940] truncate("./file1", 0 [pid 6939] <... mmap resumed>) = 0x7f943d000000 [pid 6938] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] rmdir("./308" [pid 6941] <... mount resumed>) = 0 [pid 6940] <... truncate resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6940] memfd_create("syzkaller", 0) = 4 [pid 6940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6941] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6940] <... mmap resumed>) = 0x7f943d000000 [pid 5071] mkdir("./309", 0777 [pid 6941] <... openat resumed>) = 3 [pid 6941] chdir("./file1" [pid 6939] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6942] <... write resumed>) = 524288 [pid 6941] <... chdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6941] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6940] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6941] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6941] truncate("./file1", 0 [pid 6938] <... write resumed>) = 524288 [pid 6941] <... truncate resumed>) = 0 [pid 6939] <... write resumed>) = 524288 [pid 6942] munmap(0x7f943d000000, 138412032 [pid 6941] memfd_create("syzkaller", 0) = 4 [pid 6938] munmap(0x7f943d000000, 138412032 [pid 6942] <... munmap resumed>) = 0 [pid 6941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6938] <... munmap resumed>) = 0 [pid 6941] <... mmap resumed>) = 0x7f943d000000 [pid 6942] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6940] <... write resumed>) = 524288 [pid 6942] <... openat resumed>) = 4 [pid 6939] munmap(0x7f943d000000, 138412032 [pid 6938] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6938] close(4) = 0 [pid 6942] ioctl(4, LOOP_SET_FD, 3 [pid 6939] <... munmap resumed>) = 0 [pid 6940] munmap(0x7f943d000000, 138412032 [pid 6939] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6941] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6939] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6940] <... munmap resumed>) = 0 [pid 6939] close(4 [pid 6940] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6939] <... close resumed>) = 0 [pid 6940] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6938] exit_group(0) = ? [pid 6940] close(4 [pid 6938] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6938, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6940] <... close resumed>) = 0 [pid 5076] umount2("./304", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./304", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6941] <... write resumed>) = 524288 [pid 5076] newfstatat(3, "", [pid 6939] exit_group(0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6939] <... exit_group resumed>) = ? [pid 5076] getdents64(3, [pid 6942] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6943 [pid 6942] close(3 [pid 6941] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./304/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6941] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6942] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./304/binderfs", [pid 6942] close(4 [pid 6939] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6943 attached [pid 6942] <... close resumed>) = 0 [pid 5076] unlink("./304/binderfs" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6939, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6940] exit_group(0 [ 239.961747][ T6942] loop3: detected capacity change from 0 to 1024 [pid 6943] set_robust_list(0x555583d53660, 24) = 0 [pid 6941] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6940] <... exit_group resumed>) = ? [pid 6943] chdir("./309" [pid 6942] mkdir("./file1", 0777 [pid 6941] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... unlink resumed>) = 0 [pid 6942] <... mkdir resumed>) = 0 [pid 6941] close(4 [pid 5076] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] <... chdir resumed>) = 0 [pid 6940] +++ exited with 0 +++ [pid 5075] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6940, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6943] setpgid(0, 0 [pid 6942] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5075] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6943] <... setpgid resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6942] <... mount resumed>) = 0 [pid 6941] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6942] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] getdents64(3, [pid 5073] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] write(3, "1000", 4 [pid 6942] <... openat resumed>) = 3 [pid 6942] chdir("./file1") = 0 [pid 6942] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6943] <... write resumed>) = 4 [pid 6942] truncate("./file1", 0 [pid 6941] exit_group(0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] close(3 [pid 6942] <... truncate resumed>) = 0 [pid 6941] <... exit_group resumed>) = ? [pid 5076] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] <... close resumed>) = 0 [pid 6942] memfd_create("syzkaller", 0 [pid 6941] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6942] <... memfd_create resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./304/file1", [pid 6943] symlink("/dev/binderfs", "./binderfs" [pid 6942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6942] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... openat resumed>) = 3 [pid 6943] <... symlink resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6941, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6942] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./304/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./304/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6943] memfd_create("syzkaller", 0 [pid 6942] <... write resumed>) = 524288 [pid 5075] newfstatat(AT_FDCWD, "./307/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5073] getdents64(3, [pid 5072] <... restart_syscall resumed>) = 0 [pid 5076] getdents64(4, [pid 6942] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6943] <... memfd_create resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6942] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] unlink("./307/binderfs" [pid 5073] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6942] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] rmdir("./304/file1" [pid 5075] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./308/binderfs", [pid 5072] <... openat resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(3, "", [pid 6942] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] unlink("./308/binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] getdents64(3, [pid 6942] close(4 [pid 5076] getdents64(3, [pid 5073] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./307/binderfs") = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5076] close(3) = 0 [pid 6943] <... write resumed>) = 524288 [pid 6942] <... close resumed>) = 0 [pid 5076] rmdir("./304" [pid 5075] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] munmap(0x7f943d000000, 138412032 [pid 6942] exit_group(0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] mkdir("./305", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 6942] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./307/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./307/file1", [pid 6943] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] <... openat resumed>) = 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 4 [pid 5073] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6943] ioctl(4, LOOP_SET_FD, 3 [pid 6942] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./308/file1", [pid 5072] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(4, "", [pid 5073] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5073] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6943] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6942, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6943] close(3 [pid 5075] getdents64(4, [pid 5074] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] rmdir("./307/file1" [pid 6943] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 6943] close(4 [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 6943] <... close resumed>) = 0 [pid 6943] mkdir("./file1", 0777 [pid 5075] rmdir("./307/file1" [pid 5074] newfstatat(3, "", [pid 5073] rmdir("./308/file1" [pid 5072] getdents64(3, [pid 6943] <... mkdir resumed>) = 0 [pid 6943] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 5072] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... close resumed>) = 0 [pid 5074] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./307" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./308/binderfs", [pid 5073] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5074] unlink("./308/binderfs" [pid 5073] close(3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] mkdir("./308", 0777 [pid 5075] rmdir("./307" [pid 5073] <... close resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./308" [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] mkdir("./308", 0777 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 240.127076][ T6943] loop0: detected capacity change from 0 to 1024 [pid 5073] mkdir("./309", 0777) = 0 [pid 6943] <... mount resumed>) = 0 [pid 5076] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6943] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6943] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./308/file1", [pid 6943] chdir("./file1" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6943] <... chdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6943] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6943] truncate("./file1", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6944 attached [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6944 [pid 5074] <... openat resumed>) = 4 [pid 6944] set_robust_list(0x555583d53660, 24 [pid 6943] <... truncate resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6944] <... set_robust_list resumed>) = 0 [pid 6943] memfd_create("syzkaller", 0 [pid 6944] chdir("./305" [pid 6943] <... memfd_create resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6944] <... chdir resumed>) = 0 [pid 6943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6944] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6943] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(4, [pid 6944] <... prctl resumed>) = 0 [pid 6944] setpgid(0, 0) = 0 [pid 6944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6944] <... openat resumed>) = 3 [pid 6943] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(4) = 0 [pid 6944] write(3, "1000", 4 [pid 5074] rmdir("./308/file1" [pid 6944] <... write resumed>) = 4 [pid 6944] close(3) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6944] symlink("/dev/binderfs", "./binderfs" [pid 6943] <... write resumed>) = 524288 [pid 6944] <... symlink resumed>) = 0 [pid 5075] close(3 [pid 5074] getdents64(3, [pid 5073] close(3 [pid 5072] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6944] memfd_create("syzkaller", 0 [pid 6943] munmap(0x7f943d000000, 138412032 [pid 5074] close(3 [pid 5073] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6944] <... memfd_create resumed>) = 3 [pid 6943] <... munmap resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] rmdir("./308" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6944] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./309", 0777 [pid 6943] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 6943] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6945 ./strace-static-x86_64: Process 6945 attached [pid 6943] close(4 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6946 ./strace-static-x86_64: Process 6947 attached ./strace-static-x86_64: Process 6946 attached [pid 6945] set_robust_list(0x555583d53660, 24 [pid 6943] <... close resumed>) = 0 [pid 6946] set_robust_list(0x555583d53660, 24 [pid 6947] set_robust_list(0x555583d53660, 24 [pid 6945] <... set_robust_list resumed>) = 0 [pid 6944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6947] <... set_robust_list resumed>) = 0 [pid 6946] <... set_robust_list resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6947 [pid 6947] chdir("./308" [pid 6946] chdir("./308" [pid 5074] <... openat resumed>) = 3 [pid 6947] <... chdir resumed>) = 0 [pid 6947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6945] chdir("./309" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6947] <... prctl resumed>) = 0 [pid 6946] <... chdir resumed>) = 0 [pid 6947] setpgid(0, 0 [pid 6946] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6947] <... setpgid resumed>) = 0 [pid 6946] <... prctl resumed>) = 0 [pid 6945] <... chdir resumed>) = 0 [pid 6947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6946] setpgid(0, 0 [pid 6943] exit_group(0 [pid 6947] <... openat resumed>) = 3 [pid 6946] <... setpgid resumed>) = 0 [pid 6943] <... exit_group resumed>) = ? [pid 6945] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6947] write(3, "1000", 4 [pid 6946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6943] +++ exited with 0 +++ [pid 6947] <... write resumed>) = 4 [pid 6946] <... openat resumed>) = 3 [pid 6945] <... prctl resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6943, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6947] close(3 [pid 6946] write(3, "1000", 4 [pid 6945] setpgid(0, 0 [pid 6947] <... close resumed>) = 0 [pid 6946] <... write resumed>) = 4 [pid 6945] <... setpgid resumed>) = 0 [pid 6947] symlink("/dev/binderfs", "./binderfs" [pid 6946] close(3 [pid 6947] <... symlink resumed>) = 0 [pid 6946] <... close resumed>) = 0 [pid 6945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6944] <... write resumed>) = 524288 [pid 6946] symlink("/dev/binderfs", "./binderfs" [pid 6947] memfd_create("syzkaller", 0 [pid 6946] <... symlink resumed>) = 0 [pid 5071] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6945] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6945] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6947] <... memfd_create resumed>) = 3 [pid 6947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6946] memfd_create("syzkaller", 0 [pid 6944] munmap(0x7f943d000000, 138412032 [pid 5071] <... openat resumed>) = 3 [pid 6947] <... mmap resumed>) = 0x7f943d000000 [pid 6946] <... memfd_create resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 6946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6946] <... mmap resumed>) = 0x7f943d000000 [pid 6945] <... write resumed>) = 4 [pid 6944] <... munmap resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6947] <... write resumed>) = 524288 [pid 6945] close(3 [pid 6944] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... ioctl resumed>) = 0 [pid 5071] getdents64(3, [pid 6945] <... close resumed>) = 0 [pid 6945] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6945] <... symlink resumed>) = 0 [pid 5071] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6947] munmap(0x7f943d000000, 138412032 [pid 6945] memfd_create("syzkaller", 0 [pid 6944] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6947] <... munmap resumed>) = 0 [pid 6945] <... memfd_create resumed>) = 3 [pid 6944] ioctl(4, LOOP_SET_FD, 3 [pid 5071] newfstatat(AT_FDCWD, "./309/binderfs", [pid 6947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6947] <... openat resumed>) = 4 [pid 6946] <... write resumed>) = 524288 [pid 6947] ioctl(4, LOOP_SET_FD, 3 [pid 6945] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 6945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5071] unlink("./309/binderfs" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... unlink resumed>) = 0 [pid 6946] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6948 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6946] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6948 attached [pid 6944] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6948] set_robust_list(0x555583d53660, 24) = 0 [pid 6944] close(3) = 0 [pid 6948] chdir("./309" [pid 6947] <... ioctl resumed>) = 0 [pid 6944] close(4 [pid 6947] close(3 [pid 6944] <... close resumed>) = 0 [pid 5071] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6947] <... close resumed>) = 0 [pid 6948] <... chdir resumed>) = 0 [pid 6947] close(4 [pid 6944] mkdir("./file1", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6947] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./309/file1", [pid 6947] mkdir("./file1", 0777 [pid 6948] <... prctl resumed>) = 0 [pid 6947] <... mkdir resumed>) = 0 [pid 6944] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6948] setpgid(0, 0 [pid 6947] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] <... setpgid resumed>) = 0 [pid 6948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6947] <... mount resumed>) = 0 [pid 6945] <... write resumed>) = 524288 [pid 6944] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6948] <... openat resumed>) = 3 [pid 6947] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6947] chdir("./file1") = 0 [pid 5071] <... openat resumed>) = 4 [pid 6947] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6946] <... ioctl resumed>) = 0 [pid 6947] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6946] close(3 [pid 6947] truncate("./file1", 0 [pid 6946] <... close resumed>) = 0 [pid 6946] close(4) = 0 [pid 6947] <... truncate resumed>) = 0 [pid 6946] mkdir("./file1", 0777 [pid 6947] memfd_create("syzkaller", 0) = 4 [pid 6947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] newfstatat(4, "", [pid 6948] write(3, "1000", 4 [pid 6947] <... mmap resumed>) = 0x7f943d000000 [pid 6946] <... mkdir resumed>) = 0 [ 240.328244][ T6944] loop5: detected capacity change from 0 to 1024 [ 240.345799][ T6947] loop4: detected capacity change from 0 to 1024 [ 240.359964][ T6946] loop1: detected capacity change from 0 to 1024 [pid 6945] munmap(0x7f943d000000, 138412032 [pid 6948] <... write resumed>) = 4 [pid 6947] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6948] close(3) = 0 [pid 5071] getdents64(4, [pid 6948] symlink("/dev/binderfs", "./binderfs" [pid 6946] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6945] <... munmap resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6948] <... symlink resumed>) = 0 [pid 6946] <... mount resumed>) = 0 [pid 6944] <... mount resumed>) = 0 [pid 6945] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] getdents64(4, [pid 6948] memfd_create("syzkaller", 0 [pid 6946] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6944] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6948] <... memfd_create resumed>) = 3 [pid 6945] <... openat resumed>) = 4 [pid 5071] close(4 [pid 6948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6945] ioctl(4, LOOP_SET_FD, 3 [pid 6944] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 6948] <... mmap resumed>) = 0x7f943d000000 [pid 5071] rmdir("./309/file1" [pid 6946] <... openat resumed>) = 3 [pid 6946] chdir("./file1") = 0 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6946] truncate("./file1", 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6944] chdir("./file1" [pid 6946] <... truncate resumed>) = 0 [pid 6946] memfd_create("syzkaller", 0) = 4 [pid 6946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6944] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 6944] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6944] truncate("./file1", 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6946] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] close(3 [pid 6947] <... write resumed>) = 524288 [pid 5071] <... close resumed>) = 0 [pid 6946] <... write resumed>) = 524288 [pid 5071] rmdir("./309" [pid 6947] munmap(0x7f943d000000, 138412032) = 0 [pid 6947] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6947] close(4 [pid 5071] <... rmdir resumed>) = 0 [pid 6948] <... write resumed>) = 524288 [pid 5071] mkdir("./310", 0777 [pid 6945] <... ioctl resumed>) = 0 [pid 6948] munmap(0x7f943d000000, 138412032 [pid 6945] close(3 [pid 6944] <... truncate resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6948] <... munmap resumed>) = 0 [pid 6945] <... close resumed>) = 0 [pid 6944] memfd_create("syzkaller", 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6945] close(4 [pid 6944] <... memfd_create resumed>) = 4 [pid 6947] <... close resumed>) = 0 [pid 6945] <... close resumed>) = 0 [pid 6944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... openat resumed>) = 3 [pid 6945] mkdir("./file1", 0777 [pid 6948] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6945] <... mkdir resumed>) = 0 [pid 6944] <... mmap resumed>) = 0x7f943d000000 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6945] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6946] munmap(0x7f943d000000, 138412032) = 0 [pid 6948] <... openat resumed>) = 4 [pid 6947] exit_group(0 [pid 6946] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6948] ioctl(4, LOOP_SET_FD, 3 [pid 6946] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 240.430213][ T6945] loop2: detected capacity change from 0 to 1024 [pid 6946] close(4 [pid 6947] <... exit_group resumed>) = ? [pid 6947] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6947, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6946] <... close resumed>) = 0 [pid 6944] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./308/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./308/binderfs" [pid 6946] exit_group(0 [pid 5075] <... unlink resumed>) = 0 [pid 6946] <... exit_group resumed>) = ? [pid 5075] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6946] +++ exited with 0 +++ [pid 6945] <... mount resumed>) = 0 [ 240.481191][ T6948] loop3: detected capacity change from 0 to 1024 [pid 6948] <... ioctl resumed>) = 0 [pid 6945] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6944] <... write resumed>) = 524288 [pid 5071] <... ioctl resumed>) = 0 [pid 6948] close(3 [pid 6945] <... openat resumed>) = 3 [pid 6945] chdir("./file1") = 0 [pid 6948] <... close resumed>) = 0 [pid 6945] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6948] close(4 [pid 6945] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6948] <... close resumed>) = 0 [pid 6945] truncate("./file1", 0 [pid 6948] mkdir("./file1", 0777 [pid 6945] <... truncate resumed>) = 0 [pid 6945] memfd_create("syzkaller", 0 [pid 6948] <... mkdir resumed>) = 0 [pid 6945] <... memfd_create resumed>) = 4 [pid 6944] munmap(0x7f943d000000, 138412032 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6946, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6944] <... munmap resumed>) = 0 [pid 6945] <... mmap resumed>) = 0x7f943d000000 [pid 6945] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6944] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6944] close(4) = 0 [pid 5072] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6948] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 5075] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6945] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6949 ./strace-static-x86_64: Process 6949 attached [pid 6944] exit_group(0 [pid 5075] newfstatat(AT_FDCWD, "./308/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] set_robust_list(0x555583d53660, 24 [pid 5075] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 6944] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6949] <... set_robust_list resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6948] <... mount resumed>) = 0 [pid 6944] +++ exited with 0 +++ [pid 6949] chdir("./310" [pid 6948] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6944, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] <... openat resumed>) = 4 [pid 5072] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 6948] chdir("./file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6949] <... chdir resumed>) = 0 [pid 6948] <... chdir resumed>) = 0 [pid 5076] umount2("./305", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./308/binderfs", [pid 6949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6948] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] <... prctl resumed>) = 0 [pid 6948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6945] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "./305", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5072] unlink("./308/binderfs" [pid 6949] setpgid(0, 0 [pid 6948] truncate("./file1", 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6949] <... setpgid resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5075] close(4 [pid 5072] <... unlink resumed>) = 0 [pid 6949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6949] <... openat resumed>) = 3 [pid 6948] <... truncate resumed>) = 0 [pid 6945] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] rmdir("./308/file1" [pid 6949] write(3, "1000", 4 [pid 6948] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... rmdir resumed>) = 0 [pid 6949] <... write resumed>) = 4 [pid 6948] <... memfd_create resumed>) = 4 [pid 6945] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./305/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 6949] close(3 [pid 6948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6945] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6949] <... close resumed>) = 0 [pid 6948] <... mmap resumed>) = 0x7f943d000000 [pid 6945] close(4 [pid 5076] newfstatat(AT_FDCWD, "./305/binderfs", [pid 5075] close(3 [pid 6949] symlink("/dev/binderfs", "./binderfs" [pid 6948] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6945] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6949] <... symlink resumed>) = 0 [pid 6949] memfd_create("syzkaller", 0) = 3 [pid 6949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] unlink("./305/binderfs" [pid 5075] rmdir("./308") = 0 [pid 5072] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6949] <... write resumed>) = 524288 [pid 6948] <... write resumed>) = 524288 [pid 6945] exit_group(0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] mkdir("./309", 0777 [pid 5072] newfstatat(AT_FDCWD, "./308/file1", [pid 6949] munmap(0x7f943d000000, 138412032 [pid 6948] munmap(0x7f943d000000, 138412032 [pid 6945] <... exit_group resumed>) = ? [pid 5076] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] <... munmap resumed>) = 0 [pid 6945] +++ exited with 0 +++ [pid 5075] <... mkdir resumed>) = 0 [pid 5072] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6948] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6945, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6948] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6948] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 4 [pid 6949] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6948] close(4 [pid 5073] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 6949] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6949] ioctl(4, LOOP_SET_FD, 3 [pid 5073] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(4, [pid 6948] <... close resumed>) = 0 [pid 5076] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6948] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(3, "", [pid 5072] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./305/file1", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6948] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5072] close(4 [pid 6948] +++ exited with 0 +++ [pid 6949] <... ioctl resumed>) = 0 [pid 5076] umount2("./305/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... close resumed>) = 0 [pid 6949] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./308/file1" [pid 6949] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./305/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6948, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6949] close(4 [pid 5076] <... openat resumed>) = 4 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] newfstatat(AT_FDCWD, "./309/binderfs", [pid 5072] <... rmdir resumed>) = 0 [pid 6949] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(3, [pid 6949] mkdir("./file1", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./309/binderfs" [pid 6949] <... mkdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5074] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5072] close(3 [pid 5076] getdents64(4, [pid 5074] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 6949] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] rmdir("./308" [pid 5074] newfstatat(3, "", [pid 5076] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5076] rmdir("./305/file1" [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] mkdir("./309", 0777 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./309/binderfs", [pid 5072] <... mkdir resumed>) = 0 [pid 6949] <... mount resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] unlink("./309/binderfs" [pid 6949] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 6949] chdir("./file1") = 0 [pid 5076] <... close resumed>) = 0 [pid 6949] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] rmdir("./305" [pid 5074] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6949] truncate("./file1", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./309/file1", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] mkdir("./306", 0777 [pid 5073] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6949] <... truncate resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6949] memfd_create("syzkaller", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 6949] <... memfd_create resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./309/file1", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6949] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6949] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(3 [pid 5074] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [ 240.655772][ T6949] loop0: detected capacity change from 0 to 1024 [pid 5074] rmdir("./309/file1") = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(3, [pid 5073] getdents64(4, ./strace-static-x86_64: Process 6950 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6950 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 6950] set_robust_list(0x555583d53660, 24 [pid 5074] close(3 [pid 5073] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6950] <... set_robust_list resumed>) = 0 [pid 5073] rmdir("./309/file1" [pid 6950] chdir("./309" [pid 5074] rmdir("./309") = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6950] <... chdir resumed>) = 0 [pid 5073] close(3 [pid 6950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] mkdir("./310", 0777 [pid 6950] setpgid(0, 0 [pid 6949] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6950] <... setpgid resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] rmdir("./309" [pid 6950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6950] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6950] write(3, "1000", 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6950] <... write resumed>) = 4 [pid 6950] close(3) = 0 [pid 6950] symlink("/dev/binderfs", "./binderfs" [pid 5073] mkdir("./310", 0777 [pid 6950] <... symlink resumed>) = 0 [pid 6950] memfd_create("syzkaller", 0 [pid 6949] munmap(0x7f943d000000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 6950] <... memfd_create resumed>) = 3 [pid 6950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6949] <... munmap resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6951 ./strace-static-x86_64: Process 6951 attached [pid 6951] set_robust_list(0x555583d53660, 24 [pid 6950] <... mmap resumed>) = 0x7f943d000000 [pid 6950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6951] <... set_robust_list resumed>) = 0 [pid 6949] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 6949] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 6949] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6951] chdir("./309") = 0 [pid 6951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6949] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6952 [pid 6951] setpgid(0, 0) = 0 [pid 6951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6950] <... write resumed>) = 524288 ./strace-static-x86_64: Process 6952 attached [pid 6950] munmap(0x7f943d000000, 138412032 [pid 6952] set_robust_list(0x555583d53660, 24 [pid 6950] <... munmap resumed>) = 0 [pid 6952] <... set_robust_list resumed>) = 0 [pid 6951] <... openat resumed>) = 3 [pid 6952] chdir("./306") = 0 [pid 6950] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] close(3 [pid 6952] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6950] <... openat resumed>) = 4 [pid 6949] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6952] <... prctl resumed>) = 0 [pid 6950] ioctl(4, LOOP_SET_FD, 3 [pid 6949] <... exit_group resumed>) = ? [pid 6952] setpgid(0, 0 [pid 6951] write(3, "1000", 4 [pid 6949] +++ exited with 0 +++ [pid 5073] <... ioctl resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6953 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6949, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6951] <... write resumed>) = 4 [pid 5073] close(3 [pid 5071] getdents64(3, [pid 6952] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6952] write(3, "1000", 4) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6952] close(3./strace-static-x86_64: Process 6953 attached ) = 0 [pid 6953] set_robust_list(0x555583d53660, 24) = 0 [pid 6952] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6953] chdir("./310") = 0 [pid 6952] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6953] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6952] memfd_create("syzkaller", 0 [pid 6953] <... prctl resumed>) = 0 [pid 6952] <... memfd_create resumed>) = 3 [pid 5071] unlink("./310/binderfs" [pid 6953] setpgid(0, 0 [pid 6952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6951] close(3 [pid 5073] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6953] <... setpgid resumed>) = 0 [pid 6953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6950] <... ioctl resumed>) = 0 [pid 5071] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6951] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6953] <... openat resumed>) = 3 [pid 6950] close(3 [pid 6952] <... mmap resumed>) = 0x7f943d000000 [pid 6950] <... close resumed>) = 0 [pid 6953] write(3, "1000", 4 [pid 6950] close(4 [pid 6953] <... write resumed>) = 4 [pid 6951] symlink("/dev/binderfs", "./binderfs" [pid 6950] <... close resumed>) = 0 [pid 6953] close(3 [pid 6950] mkdir("./file1", 0777./strace-static-x86_64: Process 6954 attached [pid 6953] <... close resumed>) = 0 [pid 6951] <... symlink resumed>) = 0 [pid 6950] <... mkdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6954 [pid 6953] symlink("/dev/binderfs", "./binderfs" [pid 6951] memfd_create("syzkaller", 0 [pid 6954] set_robust_list(0x555583d53660, 24 [pid 6953] <... symlink resumed>) = 0 [pid 6953] memfd_create("syzkaller", 0 [pid 6951] <... memfd_create resumed>) = 3 [pid 6954] <... set_robust_list resumed>) = 0 [pid 6953] <... memfd_create resumed>) = 3 [pid 6951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] chdir("./310" [pid 6953] <... mmap resumed>) = 0x7f943d000000 [pid 6951] <... mmap resumed>) = 0x7f943d000000 [pid 6950] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... umount2 resumed>) = 0 [pid 6954] <... chdir resumed>) = 0 [pid 6953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 240.813161][ T6950] loop4: detected capacity change from 0 to 1024 [pid 6951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6954] <... prctl resumed>) = 0 [pid 6954] setpgid(0, 0) = 0 [pid 5071] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6954] <... openat resumed>) = 3 [pid 6950] <... mount resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./310/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6954] write(3, "1000", 4 [pid 6953] <... write resumed>) = 524288 [pid 6951] <... write resumed>) = 524288 [pid 6950] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] <... write resumed>) = 4 [pid 6952] <... write resumed>) = 524288 [pid 6951] munmap(0x7f943d000000, 138412032 [pid 6950] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6954] close(3) = 0 [pid 6951] <... munmap resumed>) = 0 [pid 6950] chdir("./file1" [pid 5071] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6954] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6953] munmap(0x7f943d000000, 138412032 [pid 6952] munmap(0x7f943d000000, 138412032 [pid 6951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6950] <... chdir resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 6953] <... munmap resumed>) = 0 [pid 6952] <... munmap resumed>) = 0 [pid 6951] <... openat resumed>) = 4 [pid 6950] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] newfstatat(4, "", [pid 6954] memfd_create("syzkaller", 0 [pid 6953] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6951] ioctl(4, LOOP_SET_FD, 3 [pid 6950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6953] <... openat resumed>) = 4 [pid 6952] <... openat resumed>) = 4 [pid 6950] truncate("./file1", 0 [pid 5071] getdents64(4, [pid 6953] ioctl(4, LOOP_SET_FD, 3 [pid 6952] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6954] <... memfd_create resumed>) = 3 [pid 6954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./310/file1") = 0 [pid 6950] <... truncate resumed>) = 0 [pid 6950] memfd_create("syzkaller", 0 [pid 5071] getdents64(3, [pid 6954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6950] <... memfd_create resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 6950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] rmdir("./310" [pid 6950] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./311", 0777 [pid 6951] <... ioctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6951] close(3 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6951] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6951] close(4 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6951] <... close resumed>) = 0 [pid 6951] mkdir("./file1", 0777 [pid 6950] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6951] <... mkdir resumed>) = 0 [pid 6951] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6954] <... write resumed>) = 524288 [pid 6952] <... ioctl resumed>) = 0 [pid 6953] <... ioctl resumed>) = 0 [pid 6952] close(3 [pid 6953] close(3 [pid 6952] <... close resumed>) = 0 [pid 6954] munmap(0x7f943d000000, 138412032 [pid 6952] close(4 [pid 6953] <... close resumed>) = 0 [pid 6952] <... close resumed>) = 0 [pid 6953] close(4 [pid 6952] mkdir("./file1", 0777 [pid 6953] <... close resumed>) = 0 [pid 6952] <... mkdir resumed>) = 0 [pid 6954] <... munmap resumed>) = 0 [pid 6953] mkdir("./file1", 0777 [pid 6951] <... mount resumed>) = 0 [pid 6950] <... write resumed>) = 524288 [pid 6954] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6953] <... mkdir resumed>) = 0 [pid 6954] <... openat resumed>) = 4 [pid 6954] ioctl(4, LOOP_SET_FD, 3 [pid 6953] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [ 240.923006][ T6951] loop1: detected capacity change from 0 to 1024 [ 240.925051][ T6953] loop3: detected capacity change from 0 to 1024 [ 240.942100][ T6952] loop5: detected capacity change from 0 to 1024 [pid 6952] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6951] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6951] chdir("./file1") = 0 [pid 6951] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6950] munmap(0x7f943d000000, 138412032 [pid 6951] truncate("./file1", 0 [pid 6950] <... munmap resumed>) = 0 [pid 6950] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6951] <... truncate resumed>) = 0 [pid 6954] <... ioctl resumed>) = 0 [pid 6952] <... mount resumed>) = 0 [pid 6951] memfd_create("syzkaller", 0 [pid 6950] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... ioctl resumed>) = 0 [pid 6954] close(3 [pid 6952] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6951] <... memfd_create resumed>) = 4 [pid 6954] <... close resumed>) = 0 [pid 6952] <... openat resumed>) = 3 [pid 6954] close(4 [pid 6953] <... mount resumed>) = 0 [pid 6952] chdir("./file1" [pid 6951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6950] close(4 [pid 6954] <... close resumed>) = 0 [pid 6953] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6952] <... chdir resumed>) = 0 [pid 6954] mkdir("./file1", 0777 [pid 6953] <... openat resumed>) = 3 [pid 6952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6951] <... mmap resumed>) = 0x7f943d000000 [pid 6954] <... mkdir resumed>) = 0 [pid 6953] chdir("./file1" [pid 6952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6954] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6953] <... chdir resumed>) = 0 [pid 6953] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] close(3 [pid 6953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6952] truncate("./file1", 0 [pid 6950] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6953] truncate("./file1", 0 [pid 6951] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6953] <... truncate resumed>) = 0 [pid 6952] <... truncate resumed>) = 0 [ 240.982607][ T6954] loop2: detected capacity change from 0 to 1024 [pid 6954] <... mount resumed>) = 0 [pid 6953] memfd_create("syzkaller", 0 [pid 6952] memfd_create("syzkaller", 0 [pid 6951] <... write resumed>) = 524288 [pid 6950] exit_group(0./strace-static-x86_64: Process 6955 attached [pid 6953] <... memfd_create resumed>) = 4 [pid 6952] <... memfd_create resumed>) = 4 [pid 6954] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] <... openat resumed>) = 3 [pid 6954] chdir("./file1" [pid 6953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6954] <... chdir resumed>) = 0 [pid 6953] <... mmap resumed>) = 0x7f943d000000 [pid 6954] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6953] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6952] <... mmap resumed>) = 0x7f943d000000 [pid 6954] truncate("./file1", 0 [pid 6955] set_robust_list(0x555583d53660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6955 [pid 6955] <... set_robust_list resumed>) = 0 [pid 6955] chdir("./311" [pid 6950] <... exit_group resumed>) = ? [pid 6955] <... chdir resumed>) = 0 [pid 6950] +++ exited with 0 +++ [pid 6955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6950, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6955] setpgid(0, 0 [pid 5075] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6955] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 6955] write(3, "1000", 4 [pid 5075] newfstatat(3, "", [pid 6955] <... write resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6955] close(3 [pid 5075] getdents64(3, [pid 6955] <... close resumed>) = 0 [pid 6954] <... truncate resumed>) = 0 [pid 6952] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6955] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] <... symlink resumed>) = 0 [pid 6954] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6955] memfd_create("syzkaller", 0 [pid 6951] munmap(0x7f943d000000, 138412032 [pid 5075] newfstatat(AT_FDCWD, "./309/binderfs", [pid 6955] <... memfd_create resumed>) = 3 [pid 6954] <... memfd_create resumed>) = 4 [pid 6953] <... write resumed>) = 524288 [pid 6951] <... munmap resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] unlink("./309/binderfs" [pid 6955] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... unlink resumed>) = 0 [pid 6955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] <... mmap resumed>) = 0x7f943d000000 [pid 6951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6953] munmap(0x7f943d000000, 138412032 [pid 6951] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6953] <... munmap resumed>) = 0 [pid 6951] close(4) = 0 [pid 6955] <... write resumed>) = 524288 [pid 6953] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6952] <... write resumed>) = 524288 [pid 6953] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6954] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6953] close(4 [pid 5075] <... umount2 resumed>) = 0 [pid 6952] munmap(0x7f943d000000, 138412032 [pid 6951] exit_group(0) = ? [pid 6952] <... munmap resumed>) = 0 [pid 6953] <... close resumed>) = 0 [pid 6952] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./309/file1", [pid 6952] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6955] munmap(0x7f943d000000, 138412032 [pid 6951] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6951, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6955] <... munmap resumed>) = 0 [pid 6954] <... write resumed>) = 524288 [pid 6953] exit_group(0 [pid 6952] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6954] munmap(0x7f943d000000, 138412032 [pid 6952] <... close resumed>) = 0 [pid 6955] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6953] <... exit_group resumed>) = ? [pid 6955] <... openat resumed>) = 4 [pid 6955] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 6954] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6954] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] close(4) = 0 [pid 5072] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6954] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6954] close(4 [pid 5072] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6953] +++ exited with 0 +++ [pid 5075] rmdir("./309/file1" [pid 5072] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6953, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5072] newfstatat(AT_FDCWD, "./309/binderfs", [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6954] <... close resumed>) = 0 [pid 6952] exit_group(0 [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] unlink("./309/binderfs" [pid 5075] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 6954] exit_group(0 [pid 6952] <... exit_group resumed>) = ? [pid 5074] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] <... ioctl resumed>) = 0 [pid 5075] rmdir("./309" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6955] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6954] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6955] <... close resumed>) = 0 [pid 5074] unlink("./310/binderfs" [pid 6955] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 6955] <... close resumed>) = 0 [pid 5074] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6955] mkdir("./file1", 0777) = 0 [pid 5075] mkdir("./310", 0777 [pid 6955] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... mkdir resumed>) = 0 [pid 6954] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6954, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] <... umount2 resumed>) = 0 [pid 5074] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./310/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6952] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 241.139128][ T6955] loop0: detected capacity change from 0 to 1024 [pid 5074] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6952, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./306", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(3, "", [pid 5072] newfstatat(AT_FDCWD, "./309/file1", [pid 5076] openat(AT_FDCWD, "./306", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 5076] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5072] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5076] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] getdents64(4, [pid 5073] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6955] <... mount resumed>) = 0 [pid 5076] umount2("./306/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6955] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./306/binderfs", [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(4 [pid 5073] newfstatat(AT_FDCWD, "./310/binderfs", [pid 5072] newfstatat(4, "", [pid 6955] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6955] chdir("./file1") = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] unlink("./310/binderfs" [pid 5072] getdents64(4, [pid 5076] unlink("./306/binderfs" [pid 5074] rmdir("./310/file1" [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 6955] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6955] truncate("./file1", 0 [pid 5074] close(3 [pid 5072] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./309/file1" [pid 5074] rmdir("./310") = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 5075] close(3 [pid 5074] mkdir("./311", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] close(3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 6955] <... truncate resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] rmdir("./309" [pid 6955] memfd_create("syzkaller", 0 [pid 5074] <... openat resumed>) = 3 [pid 6955] <... memfd_create resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6955] <... mmap resumed>) = 0x7f943d000000 [pid 6955] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] mkdir("./310", 0777./strace-static-x86_64: Process 6956 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6956 [pid 6956] set_robust_list(0x555583d53660, 24) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5076] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6956] chdir("./310" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] newfstatat(AT_FDCWD, "./306/file1", [pid 5073] newfstatat(AT_FDCWD, "./310/file1", [pid 6956] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6956] setpgid(0, 0 [pid 5076] umount2("./306/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./306/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6956] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5073] <... openat resumed>) = 4 [pid 6956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(4, "", [pid 6956] <... openat resumed>) = 3 [pid 6956] write(3, "1000", 4) = 4 [pid 6956] close(3) = 0 [pid 6956] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6956] memfd_create("syzkaller", 0) = 3 [pid 6956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5076] getdents64(4, [pid 6956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6955] <... write resumed>) = 524288 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] close(4 [pid 5076] rmdir("./306/file1" [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./310/file1" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6955] munmap(0x7f943d000000, 138412032 [pid 5076] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(3, [pid 6955] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5076] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] rmdir("./306" [pid 5073] rmdir("./310" [pid 6955] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6956] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] close(3 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] mkdir("./307", 0777 [pid 5073] mkdir("./311", 0777 [pid 6956] munmap(0x7f943d000000, 138412032 [pid 6955] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... close resumed>) = 0 [pid 6956] <... munmap resumed>) = 0 [pid 6955] close(4 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6957 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6957 attached [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6957] set_robust_list(0x555583d53660, 24 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6957] <... set_robust_list resumed>) = 0 [pid 6956] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 6957] chdir("./311" [pid 6955] <... close resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6958 [pid 6957] <... chdir resumed>) = 0 [pid 6956] <... openat resumed>) = 4 [pid 6957] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6958 attached [pid 6956] ioctl(4, LOOP_SET_FD, 3 [pid 6958] set_robust_list(0x555583d53660, 24 [pid 6957] <... prctl resumed>) = 0 [pid 6958] <... set_robust_list resumed>) = 0 [pid 6958] chdir("./310") = 0 [pid 6955] exit_group(0 [pid 6958] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6955] <... exit_group resumed>) = ? [pid 6958] <... prctl resumed>) = 0 [pid 6957] setpgid(0, 0 [pid 6955] +++ exited with 0 +++ [pid 6958] setpgid(0, 0) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6955, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6957] <... setpgid resumed>) = 0 [pid 6958] <... openat resumed>) = 3 [pid 6957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6957] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6958] write(3, "1000", 4) = 4 [pid 6957] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6958] close(3) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6958] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6957] <... write resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 6958] memfd_create("syzkaller", 0 [pid 6957] close(3) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6957] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 6957] <... symlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6957] memfd_create("syzkaller", 0 [pid 6956] <... ioctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./311/binderfs", [pid 6957] <... memfd_create resumed>) = 3 [pid 6956] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6956] <... close resumed>) = 0 [pid 5071] unlink("./311/binderfs") = 0 [pid 6958] <... memfd_create resumed>) = 3 [pid 6958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6956] close(4 [pid 5071] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6958] <... mmap resumed>) = 0x7f943d000000 [pid 6956] <... close resumed>) = 0 [pid 6956] mkdir("./file1", 0777) = 0 [pid 6957] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... ioctl resumed>) = 0 [pid 6956] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6957] <... write resumed>) = 524288 [ 241.314412][ T6956] loop4: detected capacity change from 0 to 1024 [pid 5073] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 6958] <... write resumed>) = 524288 [pid 5076] close(3 [pid 5073] <... close resumed>) = 0 [pid 6957] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6957] <... munmap resumed>) = 0 [pid 5071] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6959 ./strace-static-x86_64: Process 6959 attached [pid 6959] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6960 ./strace-static-x86_64: Process 6960 attached [pid 6959] <... set_robust_list resumed>) = 0 [pid 6959] chdir("./311") = 0 [pid 6959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6960] set_robust_list(0x555583d53660, 24 [pid 6959] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6960] <... set_robust_list resumed>) = 0 [pid 6959] <... setpgid resumed>) = 0 [pid 6959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6957] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./311/file1", [pid 6959] <... openat resumed>) = 3 [pid 6958] munmap(0x7f943d000000, 138412032 [pid 6960] chdir("./307" [pid 6958] <... munmap resumed>) = 0 [pid 6957] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6960] <... chdir resumed>) = 0 [pid 6959] write(3, "1000", 4 [pid 6960] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6959] <... write resumed>) = 4 [pid 6960] <... prctl resumed>) = 0 [pid 6959] close(3 [pid 6960] setpgid(0, 0 [pid 6959] <... close resumed>) = 0 [pid 6960] <... setpgid resumed>) = 0 [pid 6959] symlink("/dev/binderfs", "./binderfs" [pid 6958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6959] <... symlink resumed>) = 0 [pid 6958] <... openat resumed>) = 4 [pid 6959] memfd_create("syzkaller", 0 [pid 6958] ioctl(4, LOOP_SET_FD, 3 [pid 6957] ioctl(4, LOOP_SET_FD, 3 [pid 5071] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6958] <... ioctl resumed>) = 0 [pid 6960] <... openat resumed>) = 3 [pid 6959] <... memfd_create resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", [pid 6960] write(3, "1000", 4) = 4 [pid 6960] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6960] <... close resumed>) = 0 [pid 6960] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] getdents64(4, [pid 6959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6957] <... ioctl resumed>) = 0 [pid 6960] memfd_create("syzkaller", 0 [pid 6956] <... mount resumed>) = 0 [pid 6960] <... memfd_create resumed>) = 3 [pid 6956] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6956] <... openat resumed>) = 3 [pid 6960] <... mmap resumed>) = 0x7f943d000000 [pid 6956] chdir("./file1" [pid 6960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6957] close(3 [pid 6956] <... chdir resumed>) = 0 [pid 5071] getdents64(4, [pid 6956] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6957] <... close resumed>) = 0 [pid 6956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6957] close(4 [pid 6956] truncate("./file1", 0 [pid 6957] <... close resumed>) = 0 [pid 5071] close(4 [pid 6957] mkdir("./file1", 0777) = 0 [pid 6957] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./311/file1" [pid 6956] <... truncate resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [ 241.415729][ T6958] loop1: detected capacity change from 0 to 1024 [ 241.424753][ T6957] loop3: detected capacity change from 0 to 1024 [pid 6956] memfd_create("syzkaller", 0 [pid 6960] <... write resumed>) = 524288 [pid 6957] <... mount resumed>) = 0 [pid 6956] <... memfd_create resumed>) = 4 [pid 5071] getdents64(3, [pid 6958] close(3 [pid 6957] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6958] <... close resumed>) = 0 [pid 6957] <... openat resumed>) = 3 [pid 5071] close(3 [pid 6958] close(4 [pid 6957] chdir("./file1" [pid 5071] <... close resumed>) = 0 [pid 6959] <... write resumed>) = 524288 [pid 6958] <... close resumed>) = 0 [pid 5071] rmdir("./311" [pid 6957] <... chdir resumed>) = 0 [pid 6959] munmap(0x7f943d000000, 138412032 [pid 6958] mkdir("./file1", 0777 [pid 6956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6959] <... munmap resumed>) = 0 [pid 6958] <... mkdir resumed>) = 0 [pid 6957] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6956] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... rmdir resumed>) = 0 [pid 6957] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6956] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6959] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6957] truncate("./file1", 0 [pid 5071] mkdir("./312", 0777 [pid 6959] <... openat resumed>) = 4 [pid 6959] ioctl(4, LOOP_SET_FD, 3 [pid 6958] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6957] <... truncate resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6957] memfd_create("syzkaller", 0 [pid 6960] munmap(0x7f943d000000, 138412032 [pid 6957] <... memfd_create resumed>) = 4 [pid 6960] <... munmap resumed>) = 0 [pid 6957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6960] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6957] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... openat resumed>) = 3 [pid 6960] <... openat resumed>) = 4 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6960] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6957] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6959] <... ioctl resumed>) = 0 [pid 6958] <... mount resumed>) = 0 [pid 6959] close(3 [pid 6958] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6959] <... close resumed>) = 0 [pid 6958] <... openat resumed>) = 3 [pid 6959] close(4 [pid 6958] chdir("./file1" [pid 6960] close(3 [pid 6959] <... close resumed>) = 0 [pid 6958] <... chdir resumed>) = 0 [pid 6956] <... write resumed>) = 524288 [pid 6960] <... close resumed>) = 0 [pid 6959] mkdir("./file1", 0777 [pid 6958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6960] close(4 [pid 6959] <... mkdir resumed>) = 0 [pid 6958] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6960] <... close resumed>) = 0 [pid 6960] mkdir("./file1", 0777) = 0 [pid 6958] truncate("./file1", 0 [pid 6960] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6959] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6956] munmap(0x7f943d000000, 138412032 [pid 6958] <... truncate resumed>) = 0 [pid 6956] <... munmap resumed>) = 0 [ 241.490290][ T6959] loop2: detected capacity change from 0 to 1024 [ 241.506523][ T6960] loop5: detected capacity change from 0 to 1024 [pid 6958] memfd_create("syzkaller", 0 [pid 6957] <... write resumed>) = 524288 [pid 6958] <... memfd_create resumed>) = 4 [pid 6956] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6956] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6958] <... mmap resumed>) = 0x7f943d000000 [pid 6956] close(4) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6958] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6956] exit_group(0 [pid 6957] munmap(0x7f943d000000, 138412032 [pid 6956] <... exit_group resumed>) = ? [pid 6957] <... munmap resumed>) = 0 [pid 6957] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6960] <... mount resumed>) = 0 [pid 6959] <... mount resumed>) = 0 [pid 6957] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6957] close(4 [pid 6959] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6960] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6959] <... openat resumed>) = 3 [pid 6958] <... write resumed>) = 524288 [pid 6957] <... close resumed>) = 0 [pid 6956] +++ exited with 0 +++ [pid 6960] <... openat resumed>) = 3 [pid 6959] chdir("./file1" [pid 5071] close(3 [pid 6959] <... chdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6956, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6960] chdir("./file1" [pid 6959] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6960] <... chdir resumed>) = 0 [pid 6959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... restart_syscall resumed>) = 0 [pid 6960] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6959] truncate("./file1", 0 [pid 6960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6960] truncate("./file1", 0 [pid 5075] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6959] <... truncate resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6959] memfd_create("syzkaller", 0 [pid 5075] newfstatat(3, "", [pid 5071] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6959] <... memfd_create resumed>) = 4 [pid 5075] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6960] <... truncate resumed>) = 0 [pid 6959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6957] exit_group(0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6960] memfd_create("syzkaller", 0 [pid 6959] <... mmap resumed>) = 0x7f943d000000 [pid 6957] <... exit_group resumed>) = ? [pid 5075] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6961 attached [pid 6958] munmap(0x7f943d000000, 138412032 [pid 6961] set_robust_list(0x555583d53660, 24 [pid 6960] <... memfd_create resumed>) = 4 [pid 6958] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6961 [pid 6960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6960] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6960] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6957] +++ exited with 0 +++ [pid 5075] unlink("./310/binderfs" [pid 6961] <... set_robust_list resumed>) = 0 [pid 6958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6957, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6961] chdir("./312" [pid 6958] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6961] <... chdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6959] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6958] close(4 [pid 5074] <... openat resumed>) = 3 [pid 6961] <... prctl resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 6961] setpgid(0, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6961] <... setpgid resumed>) = 0 [pid 5074] getdents64(3, [pid 6961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6961] <... openat resumed>) = 3 [pid 6958] <... close resumed>) = 0 [pid 6961] write(3, "1000", 4 [pid 6959] <... write resumed>) = 524288 [pid 5074] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6961] close(3 [pid 5074] newfstatat(AT_FDCWD, "./311/binderfs", [pid 6961] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6961] symlink("/dev/binderfs", "./binderfs" [pid 6960] <... write resumed>) = 524288 [pid 6958] exit_group(0 [pid 5075] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] unlink("./311/binderfs" [pid 6961] <... symlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 6961] memfd_create("syzkaller", 0 [pid 5075] newfstatat(AT_FDCWD, "./310/file1", [pid 5074] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] <... memfd_create resumed>) = 3 [pid 6958] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6961] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... openat resumed>) = 4 [pid 6961] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6959] munmap(0x7f943d000000, 138412032 [pid 5075] close(4 [pid 6960] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 6960] <... munmap resumed>) = 0 [pid 6959] <... munmap resumed>) = 0 [pid 6958] +++ exited with 0 +++ [pid 5075] rmdir("./310/file1" [pid 6961] <... write resumed>) = 524288 [pid 6960] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6959] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6960] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6958, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6960] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] munmap(0x7f943d000000, 138412032 [pid 6959] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 5074] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6961] <... munmap resumed>) = 0 [pid 6960] <... close resumed>) = 0 [pid 6959] close(4 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./310" [pid 6961] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6960] exit_group(0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./311/file1", [pid 5072] <... openat resumed>) = 3 [pid 6960] <... exit_group resumed>) = ? [pid 5075] mkdir("./311", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6961] <... openat resumed>) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5072] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6961] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 6961] <... ioctl resumed>) = 0 [pid 6960] +++ exited with 0 +++ [pid 6959] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 6961] close(3 [pid 6959] exit_group(0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6960, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6961] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6961] close(4 [pid 6959] <... exit_group resumed>) = ? [pid 5074] close(4 [pid 5072] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] <... close resumed>) = 0 [pid 5076] umount2("./307", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./311/file1" [pid 5072] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6961] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./307", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6961] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 6961] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6959] +++ exited with 0 +++ [pid 5076] newfstatat(3, "", [pid 5074] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6959, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] unlink("./310/binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] rmdir("./311" [pid 5072] <... unlink resumed>) = 0 [pid 5073] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./307/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] mkdir("./312", 0777 [pid 5073] newfstatat(3, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./307/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5076] unlink("./307/binderfs" [pid 5074] <... mkdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5073] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] newfstatat(AT_FDCWD, "./311/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./311/binderfs") = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6961] <... mount resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./310/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6961] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 241.695742][ T6961] loop0: detected capacity change from 0 to 1024 [pid 6961] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6961] chdir("./file1" [pid 5076] newfstatat(AT_FDCWD, "./307/file1", [pid 6961] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6961] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... openat resumed>) = 4 [pid 6961] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./307/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./307/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6961] truncate("./file1", 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./307/file1") = 0 [pid 5073] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./311/file1", [pid 5075] close(3 [pid 5072] getdents64(4, [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 6961] <... truncate resumed>) = 0 [pid 5076] close(3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6961] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 6961] <... memfd_create resumed>) = 4 [pid 5076] rmdir("./307" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(4 [pid 5073] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6961] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./308", 0777) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5073] newfstatat(4, "", [pid 5072] rmdir("./310/file1" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6961] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6962 attached [pid 5074] close(3 [pid 5073] getdents64(4, [pid 5072] getdents64(3, [pid 6962] set_robust_list(0x555583d53660, 24 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6962 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5073] close(4./strace-static-x86_64: Process 6963 attached ) = 0 [pid 5072] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6963 [pid 5073] rmdir("./311/file1" [pid 5072] rmdir("./310" [pid 6962] <... set_robust_list resumed>) = 0 [pid 6962] chdir("./311" [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6963] set_robust_list(0x555583d53660, 24 [pid 5073] getdents64(3, [pid 5072] mkdir("./311", 0777 [pid 6963] <... set_robust_list resumed>) = 0 [pid 6962] <... chdir resumed>) = 0 [pid 6961] <... write resumed>) = 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6963] chdir("./312" [pid 6962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] close(3 [pid 6963] <... chdir resumed>) = 0 [pid 6963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6962] <... prctl resumed>) = 0 [pid 6961] munmap(0x7f943d000000, 138412032 [pid 5073] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6963] <... prctl resumed>) = 0 [pid 6961] <... munmap resumed>) = 0 [pid 5073] rmdir("./311" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6963] setpgid(0, 0 [pid 6962] setpgid(0, 0 [pid 6963] <... setpgid resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6961] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6963] <... openat resumed>) = 3 [pid 5073] mkdir("./312", 0777 [pid 6963] write(3, "1000", 4 [pid 6961] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... mkdir resumed>) = 0 [pid 6963] <... write resumed>) = 4 [pid 6963] close(3) = 0 [pid 6962] <... setpgid resumed>) = 0 [pid 6961] close(4 [pid 6963] symlink("/dev/binderfs", "./binderfs" [pid 6962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6963] <... symlink resumed>) = 0 [pid 6962] <... openat resumed>) = 3 [pid 6961] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6963] memfd_create("syzkaller", 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6963] <... memfd_create resumed>) = 3 [pid 6963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... ioctl resumed>) = 0 [pid 6962] write(3, "1000", 4 [pid 6961] exit_group(0 [pid 6963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6962] <... write resumed>) = 4 [pid 6961] <... exit_group resumed>) = ? [pid 5076] close(3 [pid 6962] close(3) = 0 [pid 6962] symlink("/dev/binderfs", "./binderfs" [pid 6961] +++ exited with 0 +++ [pid 6962] <... symlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6961, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- ./strace-static-x86_64: Process 6964 attached [pid 6963] <... write resumed>) = 524288 [pid 6962] memfd_create("syzkaller", 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6964 [pid 5072] <... ioctl resumed>) = 0 [pid 6963] munmap(0x7f943d000000, 138412032 [pid 6962] <... memfd_create resumed>) = 3 [pid 5071] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6964] set_robust_list(0x555583d53660, 24 [pid 6963] <... munmap resumed>) = 0 [pid 6962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6964] <... set_robust_list resumed>) = 0 [pid 6963] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6962] <... mmap resumed>) = 0x7f943d000000 [pid 5071] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6964] chdir("./308" [pid 6963] <... openat resumed>) = 4 [pid 6962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6963] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 6964] <... chdir resumed>) = 0 [pid 6963] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6964] setpgid(0, 0 [pid 5072] close(3 [pid 5071] getdents64(3, [pid 6964] <... setpgid resumed>) = 0 [pid 5073] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6964] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./312/binderfs", ./strace-static-x86_64: Process 6965 attached [pid 6964] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6964] <... write resumed>) = 4 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6965 [pid 6964] close(3 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6966 [pid 6964] <... close resumed>) = 0 [pid 6964] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6966 attached [pid 6965] set_robust_list(0x555583d53660, 24 [pid 6964] memfd_create("syzkaller", 0 [pid 6962] <... write resumed>) = 524288 [pid 5071] unlink("./312/binderfs" [pid 6966] set_robust_list(0x555583d53660, 24 [pid 6965] <... set_robust_list resumed>) = 0 [pid 6966] <... set_robust_list resumed>) = 0 [pid 6965] chdir("./311" [pid 6964] <... memfd_create resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 6965] <... chdir resumed>) = 0 [pid 6964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6966] chdir("./312" [pid 5071] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] <... chdir resumed>) = 0 [pid 6965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6965] <... prctl resumed>) = 0 [pid 6964] <... mmap resumed>) = 0x7f943d000000 [pid 6966] <... prctl resumed>) = 0 [pid 6965] setpgid(0, 0 [pid 6966] setpgid(0, 0 [pid 6965] <... setpgid resumed>) = 0 [pid 6964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6963] close(3 [pid 5071] <... umount2 resumed>) = 0 [pid 6966] <... setpgid resumed>) = 0 [pid 6965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6963] <... close resumed>) = 0 [pid 6966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6965] <... openat resumed>) = 3 [pid 6963] close(4) = 0 [pid 6962] munmap(0x7f943d000000, 138412032 [pid 6963] mkdir("./file1", 0777 [pid 6962] <... munmap resumed>) = 0 [pid 6966] <... openat resumed>) = 3 [pid 6965] write(3, "1000", 4 [pid 6963] <... mkdir resumed>) = 0 [pid 6966] write(3, "1000", 4 [pid 6965] <... write resumed>) = 4 [pid 6963] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] <... write resumed>) = 4 [pid 6965] close(3 [pid 6962] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6966] close(3 [pid 6965] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6966] <... close resumed>) = 0 [pid 6965] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./312/file1", [pid 6966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6965] <... symlink resumed>) = 0 [ 241.893953][ T6963] loop3: detected capacity change from 0 to 1024 [pid 6964] <... write resumed>) = 524288 [pid 6962] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6962] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6966] memfd_create("syzkaller", 0 [pid 6965] memfd_create("syzkaller", 0 [pid 6962] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6966] <... memfd_create resumed>) = 3 [pid 5071] <... openat resumed>) = 4 [pid 6965] <... memfd_create resumed>) = 3 [pid 5071] newfstatat(4, "", [pid 6966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6966] <... mmap resumed>) = 0x7f943d000000 [pid 6965] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 6966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6964] munmap(0x7f943d000000, 138412032 [pid 6963] <... mount resumed>) = 0 [pid 6962] close(3 [pid 6964] <... munmap resumed>) = 0 [pid 6963] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6963] <... openat resumed>) = 3 [pid 5071] getdents64(4, [pid 6964] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6963] chdir("./file1" [pid 6962] <... close resumed>) = 0 [pid 6964] <... openat resumed>) = 4 [pid 6963] <... chdir resumed>) = 0 [pid 6962] close(4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6964] ioctl(4, LOOP_SET_FD, 3 [pid 6963] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6962] <... close resumed>) = 0 [pid 5071] close(4 [pid 6966] <... write resumed>) = 524288 [pid 6963] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6962] mkdir("./file1", 0777 [pid 5071] <... close resumed>) = 0 [pid 6966] munmap(0x7f943d000000, 138412032 [pid 6964] <... ioctl resumed>) = 0 [pid 6963] truncate("./file1", 0 [pid 6962] <... mkdir resumed>) = 0 [pid 5071] rmdir("./312/file1" [pid 6965] <... write resumed>) = 524288 [ 241.956788][ T6962] loop4: detected capacity change from 0 to 1024 [ 241.997215][ T6964] loop5: detected capacity change from 0 to 1024 [pid 6962] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6965] munmap(0x7f943d000000, 138412032 [pid 5071] <... rmdir resumed>) = 0 [pid 6966] <... munmap resumed>) = 0 [pid 6965] <... munmap resumed>) = 0 [pid 5071] getdents64(3, [pid 6966] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6966] <... openat resumed>) = 4 [pid 6965] <... openat resumed>) = 4 [pid 5071] close(3 [pid 6966] ioctl(4, LOOP_SET_FD, 3 [pid 6965] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... close resumed>) = 0 [pid 6962] <... mount resumed>) = 0 [pid 6962] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6964] close(3 [pid 6962] <... openat resumed>) = 3 [pid 6962] chdir("./file1") = 0 [pid 6962] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6964] <... close resumed>) = 0 [pid 6962] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6964] close(4 [pid 6962] truncate("./file1", 0 [pid 6964] <... close resumed>) = 0 [pid 5071] rmdir("./312" [pid 6964] mkdir("./file1", 0777) = 0 [pid 6962] <... truncate resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6963] <... truncate resumed>) = 0 [pid 6962] memfd_create("syzkaller", 0 [pid 5071] mkdir("./313", 0777 [pid 6964] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6963] memfd_create("syzkaller", 0 [pid 6962] <... memfd_create resumed>) = 4 [pid 6963] <... memfd_create resumed>) = 4 [pid 6962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6962] <... mmap resumed>) = 0x7f943d000000 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6966] <... ioctl resumed>) = 0 [pid 6965] <... ioctl resumed>) = 0 [pid 6963] <... mmap resumed>) = 0x7f943d000000 [pid 6962] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... openat resumed>) = 3 [pid 6966] close(3 [pid 6965] close(3 [pid 6964] <... mount resumed>) = 0 [pid 6964] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6966] <... close resumed>) = 0 [pid 6965] <... close resumed>) = 0 [pid 6964] <... openat resumed>) = 3 [pid 6963] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6966] close(4 [pid 6965] close(4 [pid 6966] <... close resumed>) = 0 [pid 6965] <... close resumed>) = 0 [pid 6964] chdir("./file1" [pid 6962] <... write resumed>) = 524288 [pid 6966] mkdir("./file1", 0777 [pid 6965] mkdir("./file1", 0777 [pid 6964] <... chdir resumed>) = 0 [pid 6966] <... mkdir resumed>) = 0 [pid 6964] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6965] <... mkdir resumed>) = 0 [pid 6964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6964] truncate("./file1", 0 [pid 6966] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6965] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6964] <... truncate resumed>) = 0 [pid 6964] memfd_create("syzkaller", 0) = 4 [ 242.011654][ T6966] loop2: detected capacity change from 0 to 1024 [ 242.018718][ T6965] loop1: detected capacity change from 0 to 1024 [pid 6964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6964] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6962] munmap(0x7f943d000000, 138412032) = 0 [pid 6962] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6962] close(4 [pid 5071] <... ioctl resumed>) = 0 [pid 6962] <... close resumed>) = 0 [pid 5071] close(3 [pid 6965] <... mount resumed>) = 0 [pid 6966] <... mount resumed>) = 0 [pid 6965] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6963] <... write resumed>) = 524288 [pid 5071] <... close resumed>) = 0 [pid 6966] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6965] <... openat resumed>) = 3 [pid 6964] <... write resumed>) = 524288 [pid 6962] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6962] <... exit_group resumed>) = ? [pid 6966] <... openat resumed>) = 3 [pid 6965] chdir("./file1" [pid 6963] munmap(0x7f943d000000, 138412032 [pid 6966] chdir("./file1" [pid 6965] <... chdir resumed>) = 0 [pid 6964] munmap(0x7f943d000000, 138412032 [pid 6966] <... chdir resumed>) = 0 [pid 6965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6966] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6965] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6963] <... munmap resumed>) = 0 [pid 6962] +++ exited with 0 +++ [pid 6963] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6965] truncate("./file1", 0 [pid 6966] truncate("./file1", 0./strace-static-x86_64: Process 6967 attached [pid 6964] <... munmap resumed>) = 0 [pid 6964] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6962, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 6964] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6967] set_robust_list(0x555583d53660, 24 [pid 6964] close(4 [pid 6963] close(4 [pid 6967] <... set_robust_list resumed>) = 0 [pid 6967] chdir("./313" [pid 6966] <... truncate resumed>) = 0 [pid 5075] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6967 [pid 6967] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6966] memfd_create("syzkaller", 0 [pid 6964] <... close resumed>) = 0 [pid 6967] <... prctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6967] setpgid(0, 0 [pid 5075] <... openat resumed>) = 3 [pid 6967] <... setpgid resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6966] <... memfd_create resumed>) = 4 [pid 6965] <... truncate resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6967] write(3, "1000", 4 [pid 6966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6965] memfd_create("syzkaller", 0 [pid 6964] exit_group(0 [pid 6963] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 6967] <... write resumed>) = 4 [pid 6966] <... mmap resumed>) = 0x7f943d000000 [pid 6965] <... memfd_create resumed>) = 4 [pid 6964] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6967] close(3 [pid 6965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6964] +++ exited with 0 +++ [pid 6963] exit_group(0 [pid 6967] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6964, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6967] symlink("/dev/binderfs", "./binderfs" [pid 6965] <... mmap resumed>) = 0x7f943d000000 [pid 6963] <... exit_group resumed>) = ? [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6967] <... symlink resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6967] memfd_create("syzkaller", 0 [pid 6963] +++ exited with 0 +++ [pid 5076] umount2("./308", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] <... memfd_create resumed>) = 3 [pid 6967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "./308", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6963, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5075] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", [pid 6965] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 6966] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(AT_FDCWD, "./311/binderfs", [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] unlink("./311/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./308/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./308/binderfs", [pid 5074] newfstatat(3, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] unlink("./308/binderfs" [pid 5074] getdents64(3, [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6967] <... write resumed>) = 524288 [pid 6966] <... write resumed>) = 524288 [pid 6965] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] unlink("./312/binderfs" [pid 6967] munmap(0x7f943d000000, 138412032 [pid 6966] munmap(0x7f943d000000, 138412032 [pid 6965] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 6966] <... munmap resumed>) = 0 [pid 6965] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] <... munmap resumed>) = 0 [pid 6965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./308/file1", [pid 5075] newfstatat(AT_FDCWD, "./311/file1", [pid 6967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6965] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6967] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6967] ioctl(4, LOOP_SET_FD, 3 [pid 6965] close(4 [pid 5076] umount2("./308/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6965] <... close resumed>) = 0 [pid 5075] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./308/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./308/file1" [pid 6966] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6966] close(4 [pid 5075] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./308") = 0 [pid 6965] exit_group(0) = ? [pid 6966] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./312/file1", [pid 6967] <... ioctl resumed>) = 0 [pid 6967] close(3 [pid 5076] mkdir("./309", 0777 [pid 6967] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6967] close(4) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] mkdir("./file1", 0777 [pid 6965] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6965, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 6967] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(4, "", [pid 5072] <... restart_syscall resumed>) = 0 [pid 6966] exit_group(0 [pid 5075] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6967] <... mount resumed>) = 0 [pid 5072] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6967] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] newfstatat(3, "", [pid 6967] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6966] <... exit_group resumed>) = ? [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] getdents64(3, [pid 6967] chdir("./file1" [pid 5075] rmdir("./311/file1" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6967] <... chdir resumed>) = 0 [pid 6967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] truncate("./file1", 0 [pid 6966] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./311/binderfs", [pid 5075] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6966, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] unlink("./311/binderfs" [pid 6967] <... truncate resumed>) = 0 [pid 5075] close(3 [pid 5074] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 6967] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 5074] rmdir("./312/file1" [pid 6967] <... memfd_create resumed>) = 4 [pid 5075] rmdir("./311" [pid 5073] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6967] <... mmap resumed>) = 0x7f943d000000 [ 242.211549][ T6967] loop0: detected capacity change from 0 to 1024 [pid 5073] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6967] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 5075] mkdir("./312", 0777 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./312") = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] mkdir("./313", 0777 [pid 5072] <... umount2 resumed>) = 0 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./312/binderfs", [pid 5072] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] unlink("./312/binderfs") = 0 [pid 5072] newfstatat(AT_FDCWD, "./311/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./311/file1") = 0 [pid 5076] close(3 [pid 5073] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(AT_FDCWD, "./312/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6967] <... write resumed>) = 524288 [pid 5073] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] close(3 [pid 6967] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 6967] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./311" [pid 5073] <... openat resumed>) = 4 [pid 5072] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6968 attached [pid 6968] set_robust_list(0x555583d53660, 24 [pid 5073] newfstatat(4, "", [pid 6968] <... set_robust_list resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6968 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] mkdir("./312", 0777 [pid 6968] chdir("./309" [pid 6967] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] getdents64(4, [pid 5072] <... mkdir resumed>) = 0 [pid 6968] <... chdir resumed>) = 0 [pid 6967] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6968] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] getdents64(4, [pid 6968] <... prctl resumed>) = 0 [pid 6967] close(4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6968] setpgid(0, 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] close(4 [pid 5072] <... openat resumed>) = 3 [pid 6968] <... setpgid resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] rmdir("./312/file1" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6967] <... close resumed>) = 0 [pid 6968] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6968] write(3, "1000", 4) = 4 [pid 6968] close(3 [pid 5073] getdents64(3, [pid 6968] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6968] symlink("/dev/binderfs", "./binderfs" [pid 5073] close(3 [pid 6968] <... symlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./312") = 0 [pid 6968] memfd_create("syzkaller", 0) = 3 [pid 5073] mkdir("./313", 0777) = 0 [pid 6968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6967] exit_group(0 [pid 6968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6967] <... exit_group resumed>) = ? [pid 6967] +++ exited with 0 +++ [pid 5074] close(3 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6967, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5071] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... ioctl resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./313/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./313/binderfs") = 0 [pid 5071] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6969 attached [pid 6968] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6968] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6969 [pid 5072] close(3 [pid 5071] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6969] set_robust_list(0x555583d53660, 24 [pid 6968] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(3 [pid 5072] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(AT_FDCWD, "./313/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6971 attached [pid 6968] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6971 [pid 5071] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6971] set_robust_list(0x555583d53660, 24 [pid 6968] <... openat resumed>) = 4 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6970 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6971] <... set_robust_list resumed>) = 0 [pid 6968] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6972 attached [pid 6971] chdir("./313" [pid 6969] <... set_robust_list resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6970 attached [pid 6971] <... chdir resumed>) = 0 [pid 6969] chdir("./313" [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6972 [pid 6972] set_robust_list(0x555583d53660, 24 [pid 5071] <... openat resumed>) = 4 [pid 6972] <... set_robust_list resumed>) = 0 [pid 6970] set_robust_list(0x555583d53660, 24 [pid 6971] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6969] <... chdir resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 6972] chdir("./312" [pid 6970] <... set_robust_list resumed>) = 0 [pid 6971] <... prctl resumed>) = 0 [pid 6969] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6972] <... chdir resumed>) = 0 [pid 6970] chdir("./312" [pid 6971] setpgid(0, 0 [pid 6969] <... prctl resumed>) = 0 [pid 6972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6970] <... chdir resumed>) = 0 [pid 6971] <... setpgid resumed>) = 0 [pid 6969] setpgid(0, 0 [pid 5071] getdents64(4, [pid 6972] <... prctl resumed>) = 0 [pid 6970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6969] <... setpgid resumed>) = 0 [pid 6968] <... ioctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6972] setpgid(0, 0 [pid 6970] <... prctl resumed>) = 0 [pid 6971] <... openat resumed>) = 3 [pid 6969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6968] close(3 [pid 5071] getdents64(4, [pid 6972] <... setpgid resumed>) = 0 [pid 6970] setpgid(0, 0 [pid 6971] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6970] <... setpgid resumed>) = 0 [pid 6971] <... write resumed>) = 4 [pid 6968] <... close resumed>) = 0 [pid 5071] close(4 [pid 6972] <... openat resumed>) = 3 [pid 6970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6971] close(3 [pid 6969] <... openat resumed>) = 3 [pid 6968] close(4 [pid 5071] <... close resumed>) = 0 [pid 6972] write(3, "1000", 4 [pid 6970] <... openat resumed>) = 3 [pid 6971] <... close resumed>) = 0 [pid 6969] write(3, "1000", 4 [pid 6968] <... close resumed>) = 0 [pid 5071] rmdir("./313/file1" [pid 6972] <... write resumed>) = 4 [pid 6970] write(3, "1000", 4 [pid 6971] symlink("/dev/binderfs", "./binderfs" [pid 6969] <... write resumed>) = 4 [pid 6968] mkdir("./file1", 0777 [pid 5071] <... rmdir resumed>) = 0 [pid 6972] close(3 [pid 6970] <... write resumed>) = 4 [pid 6971] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 6972] <... close resumed>) = 0 [pid 6970] close(3 [pid 6971] memfd_create("syzkaller", 0 [pid 6969] close(3 [pid 6968] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6972] symlink("/dev/binderfs", "./binderfs" [pid 6970] <... close resumed>) = 0 [pid 6971] <... memfd_create resumed>) = 3 [pid 5071] close(3 [pid 6970] symlink("/dev/binderfs", "./binderfs" [pid 6971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... close resumed>) = 0 [pid 6972] <... symlink resumed>) = 0 [pid 6970] <... symlink resumed>) = 0 [pid 6971] <... mmap resumed>) = 0x7f943d000000 [pid 6969] <... close resumed>) = 0 [pid 6968] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] rmdir("./313" [pid 6972] memfd_create("syzkaller", 0 [pid 6970] memfd_create("syzkaller", 0 [pid 6971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6970] <... memfd_create resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 6970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6969] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./314", 0777 [pid 6972] <... memfd_create resumed>) = 3 [pid 6969] <... symlink resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [ 242.424677][ T6968] loop5: detected capacity change from 0 to 1024 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6971] <... write resumed>) = 524288 [pid 6970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6969] memfd_create("syzkaller", 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6969] <... memfd_create resumed>) = 3 [pid 6969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6969] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6968] <... mount resumed>) = 0 [pid 6971] munmap(0x7f943d000000, 138412032) = 0 [pid 6971] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6968] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6971] <... openat resumed>) = 4 [pid 6971] ioctl(4, LOOP_SET_FD, 3 [pid 6968] chdir("./file1" [pid 6970] <... write resumed>) = 524288 [pid 6968] <... chdir resumed>) = 0 [pid 6972] <... write resumed>) = 524288 [pid 6968] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6972] munmap(0x7f943d000000, 138412032 [pid 6968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6970] munmap(0x7f943d000000, 138412032) = 0 [pid 6968] truncate("./file1", 0 [pid 6970] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6972] <... munmap resumed>) = 0 [pid 6970] ioctl(4, LOOP_SET_FD, 3 [pid 6969] <... write resumed>) = 524288 [pid 6972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6969] munmap(0x7f943d000000, 138412032 [pid 6968] <... truncate resumed>) = 0 [pid 6968] memfd_create("syzkaller", 0 [pid 6972] <... openat resumed>) = 4 [pid 6968] <... memfd_create resumed>) = 4 [pid 6972] ioctl(4, LOOP_SET_FD, 3 [pid 6970] <... ioctl resumed>) = 0 [pid 6971] <... ioctl resumed>) = 0 [pid 6969] <... munmap resumed>) = 0 [ 242.509647][ T6971] loop2: detected capacity change from 0 to 1024 [ 242.535045][ T6970] loop1: detected capacity change from 0 to 1024 [pid 6968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6971] close(3 [pid 6969] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6969] ioctl(4, LOOP_SET_FD, 3 [pid 6971] <... close resumed>) = 0 [pid 6968] <... mmap resumed>) = 0x7f943d000000 [pid 6970] close(3) = 0 [pid 6971] close(4 [pid 6970] close(4 [pid 6971] <... close resumed>) = 0 [pid 6971] mkdir("./file1", 0777 [pid 6970] <... close resumed>) = 0 [pid 6970] mkdir("./file1", 0777 [pid 6971] <... mkdir resumed>) = 0 [pid 6970] <... mkdir resumed>) = 0 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 6973 ./strace-static-x86_64: Process 6973 attached [pid 6973] set_robust_list(0x555583d53660, 24) = 0 [pid 6971] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6970] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6973] chdir("./314") = 0 [pid 6973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6973] setpgid(0, 0) = 0 [pid 6968] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6973] write(3, "1000", 4) = 4 [pid 6973] close(3) = 0 [pid 6969] <... ioctl resumed>) = 0 [pid 6973] symlink("/dev/binderfs", "./binderfs" [pid 6969] close(3 [pid 6973] <... symlink resumed>) = 0 [pid 6969] <... close resumed>) = 0 [pid 6973] memfd_create("syzkaller", 0 [pid 6969] close(4 [pid 6973] <... memfd_create resumed>) = 3 [pid 6969] <... close resumed>) = 0 [pid 6973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6969] mkdir("./file1", 0777 [pid 6973] <... mmap resumed>) = 0x7f943d000000 [pid 6969] <... mkdir resumed>) = 0 [pid 6970] <... mount resumed>) = 0 [pid 6972] <... ioctl resumed>) = 0 [pid 6969] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [ 242.557034][ T6972] loop4: detected capacity change from 0 to 1024 [ 242.558065][ T6969] loop3: detected capacity change from 0 to 1024 [pid 6972] close(3 [pid 6973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6972] <... close resumed>) = 0 [pid 6970] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6971] <... mount resumed>) = 0 [pid 6969] <... mount resumed>) = 0 [pid 6968] <... write resumed>) = 524288 [pid 6972] close(4 [pid 6970] <... openat resumed>) = 3 [pid 6971] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6969] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6968] munmap(0x7f943d000000, 138412032 [pid 6972] <... close resumed>) = 0 [pid 6970] chdir("./file1" [pid 6971] <... openat resumed>) = 3 [pid 6969] <... openat resumed>) = 3 [pid 6972] mkdir("./file1", 0777 [pid 6970] <... chdir resumed>) = 0 [pid 6971] chdir("./file1" [pid 6969] chdir("./file1" [pid 6968] <... munmap resumed>) = 0 [pid 6972] <... mkdir resumed>) = 0 [pid 6970] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6971] <... chdir resumed>) = 0 [pid 6969] <... chdir resumed>) = 0 [pid 6968] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6972] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6971] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6969] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6968] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6973] <... write resumed>) = 524288 [pid 6970] truncate("./file1", 0 [pid 6971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6971] truncate("./file1", 0 [pid 6968] close(4 [pid 6969] truncate("./file1", 0) = 0 [pid 6969] memfd_create("syzkaller", 0) = 4 [pid 6969] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6970] <... truncate resumed>) = 0 [pid 6969] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6968] <... close resumed>) = 0 [pid 6970] memfd_create("syzkaller", 0) = 4 [pid 6973] munmap(0x7f943d000000, 138412032) = 0 [pid 6971] <... truncate resumed>) = 0 [pid 6971] memfd_create("syzkaller", 0 [pid 6970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6971] <... memfd_create resumed>) = 4 [pid 6969] <... write resumed>) = 524288 [pid 6968] exit_group(0 [pid 6970] <... mmap resumed>) = 0x7f943d000000 [pid 6971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6973] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6973] ioctl(4, LOOP_SET_FD, 3 [pid 6972] <... mount resumed>) = 0 [pid 6970] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6971] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6968] <... exit_group resumed>) = ? [pid 6972] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6972] chdir("./file1") = 0 [pid 6972] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6969] munmap(0x7f943d000000, 138412032 [pid 6973] <... ioctl resumed>) = 0 [pid 6969] <... munmap resumed>) = 0 [pid 6972] truncate("./file1", 0 [pid 6973] close(3 [pid 6969] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6973] <... close resumed>) = 0 [pid 6969] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6973] close(4 [pid 6970] <... write resumed>) = 524288 [pid 6969] close(4 [pid 6968] +++ exited with 0 +++ [pid 6973] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6968, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./309", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6973] mkdir("./file1", 0777 [pid 5076] openat(AT_FDCWD, "./309", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6973] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6972] <... truncate resumed>) = 0 [pid 6972] memfd_create("syzkaller", 0 [pid 6969] <... close resumed>) = 0 [pid 5076] umount2("./309/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6973] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6972] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./309/binderfs", [pid 6972] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./309/binderfs") = 0 [pid 5076] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 6972] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6973] <... mount resumed>) = 0 [pid 6970] munmap(0x7f943d000000, 138412032 [pid 6969] exit_group(0 [pid 6973] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6970] <... munmap resumed>) = 0 [pid 6969] <... exit_group resumed>) = ? [pid 6973] <... openat resumed>) = 3 [pid 6973] chdir("./file1" [pid 6969] +++ exited with 0 +++ [pid 6973] <... chdir resumed>) = 0 [pid 6970] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6969, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6973] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6970] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 242.675525][ T6973] loop0: detected capacity change from 0 to 1024 [pid 6973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6973] truncate("./file1", 0 [pid 6970] close(4 [pid 6971] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./309/file1", [pid 6970] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6971] munmap(0x7f943d000000, 138412032 [pid 6973] <... truncate resumed>) = 0 [pid 6973] memfd_create("syzkaller", 0 [pid 6971] <... munmap resumed>) = 0 [pid 6973] <... memfd_create resumed>) = 4 [pid 5076] umount2("./309/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "./309/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6973] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 4 [pid 6973] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(4, "", [pid 5074] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 6970] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./309/file1" [pid 6972] <... write resumed>) = 524288 [pid 6970] <... exit_group resumed>) = ? [pid 6971] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6970] +++ exited with 0 +++ [pid 6971] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 6972] munmap(0x7f943d000000, 138412032 [pid 6971] close(4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(3, "", [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6970, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] close(3 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... close resumed>) = 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 5076] rmdir("./309") = 0 [pid 5072] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] mkdir("./310", 0777 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6973] <... write resumed>) = 524288 [pid 6972] <... munmap resumed>) = 0 [pid 6971] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6973] munmap(0x7f943d000000, 138412032 [pid 6972] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6971] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6972] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6971] <... exit_group resumed>) = ? [pid 5074] newfstatat(AT_FDCWD, "./313/binderfs", [pid 5072] <... openat resumed>) = 3 [pid 6972] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] unlink("./313/binderfs" [pid 5072] newfstatat(3, "", [pid 6973] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] newfstatat(AT_FDCWD, "./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./312/binderfs") = 0 [pid 6973] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6973] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6971] +++ exited with 0 +++ [pid 6973] close(4 [pid 6972] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6971, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5072] <... umount2 resumed>) = 0 [pid 6973] <... close resumed>) = 0 [pid 5073] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6972] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6972] <... exit_group resumed>) = ? [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./313/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./313/binderfs" [pid 6972] +++ exited with 0 +++ [pid 5073] <... unlink resumed>) = 0 [pid 5073] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6972, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./312/file1", [pid 6973] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6973] <... exit_group resumed>) = ? [pid 5076] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = 0 [pid 5072] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6973] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 5074] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./313/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6973, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(AT_FDCWD, "./312/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 4 [pid 5071] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] unlink("./312/binderfs" [pid 5074] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./313/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(4, [pid 5075] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5073] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] newfstatat(3, "", [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5072] close(4./strace-static-x86_64: Process 6974 attached [pid 5074] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6974] set_robust_list(0x555583d53660, 24 [pid 5074] rmdir("./313/file1" [pid 6974] <... set_robust_list resumed>) = 0 [pid 5075] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5072] rmdir("./312/file1" [pid 5071] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] chdir("./310" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6974] <... chdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6974 [pid 5075] newfstatat(AT_FDCWD, "./312/file1", [pid 5074] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./314/binderfs", [pid 6974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6974] <... prctl resumed>) = 0 [pid 5075] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] unlink("./314/binderfs" [pid 6974] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5072] close(3 [pid 5071] <... unlink resumed>) = 0 [pid 6974] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./313" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5073] close(4 [pid 5072] rmdir("./312" [pid 6974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] newfstatat(4, "", [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] mkdir("./314", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] rmdir("./313/file1" [pid 5072] <... rmdir resumed>) = 0 [pid 6974] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6974] write(3, "1000", 4 [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 5072] mkdir("./313", 0777 [pid 5071] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6974] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(3, [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6974] close(3 [pid 5075] close(4 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6974] <... close resumed>) = 0 [pid 6974] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... close resumed>) = 0 [pid 5073] close(3 [pid 5071] newfstatat(AT_FDCWD, "./314/file1", [pid 5075] rmdir("./312/file1" [pid 5073] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] rmdir("./313" [pid 5071] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5071] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6974] <... symlink resumed>) = 0 [pid 5073] mkdir("./314", 0777 [pid 5075] rmdir("./312" [pid 5071] getdents64(4, [pid 6974] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6974] <... memfd_create resumed>) = 3 [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] mkdir("./313", 0777 [pid 6974] <... mmap resumed>) = 0x7f943d000000 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] rmdir("./314/file1" [pid 6974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 6974] <... write resumed>) = 524288 [pid 6974] munmap(0x7f943d000000, 138412032 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 6974] <... munmap resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6974] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./314" [pid 5074] close(3 [pid 6974] <... openat resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6974] ioctl(4, LOOP_SET_FD, 3 [pid 5071] mkdir("./315", 0777) = 0 ./strace-static-x86_64: Process 6975 attached [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6975 [pid 5071] <... openat resumed>) = 3 [pid 6975] set_robust_list(0x555583d53660, 24 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6975] <... set_robust_list resumed>) = 0 [pid 6975] chdir("./314" [pid 5072] <... ioctl resumed>) = 0 [pid 6975] <... chdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6975] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... ioctl resumed>) = 0 [pid 6975] <... prctl resumed>) = 0 [pid 6974] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 5072] close(3 [pid 6975] setpgid(0, 0 [pid 6974] close(3 [pid 5075] close(3 [pid 6975] <... setpgid resumed>) = 0 [pid 6974] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6974] close(4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6976 attached [pid 6975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6974] <... close resumed>) = 0 [pid 6976] set_robust_list(0x555583d53660, 24 [pid 6975] <... openat resumed>) = 3 [pid 6974] mkdir("./file1", 0777./strace-static-x86_64: Process 6977 attached [pid 6976] <... set_robust_list resumed>) = 0 [pid 6977] set_robust_list(0x555583d53660, 24 [pid 6976] chdir("./313" [pid 6974] <... mkdir resumed>) = 0 [pid 6975] write(3, "1000", 4 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6976 ./strace-static-x86_64: Process 6978 attached [pid 6977] <... set_robust_list resumed>) = 0 [pid 6976] <... chdir resumed>) = 0 [pid 6975] <... write resumed>) = 4 [pid 6974] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6977 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6978 [pid 6978] set_robust_list(0x555583d53660, 24 [pid 6977] chdir("./314" [pid 6976] prctl(PR_SET_PDEATHSIG, SIGKILL [ 242.910178][ T6974] loop5: detected capacity change from 0 to 1024 [pid 6975] close(3 [pid 6978] <... set_robust_list resumed>) = 0 [pid 6977] <... chdir resumed>) = 0 [pid 6976] <... prctl resumed>) = 0 [pid 6975] <... close resumed>) = 0 [pid 6978] chdir("./313" [pid 6977] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6976] setpgid(0, 0 [pid 6975] symlink("/dev/binderfs", "./binderfs" [pid 6977] <... prctl resumed>) = 0 [pid 6976] <... setpgid resumed>) = 0 [pid 6978] <... chdir resumed>) = 0 [pid 6977] setpgid(0, 0 [pid 6976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6975] <... symlink resumed>) = 0 [pid 6978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6977] <... setpgid resumed>) = 0 [pid 6978] <... prctl resumed>) = 0 [pid 6978] setpgid(0, 0 [pid 6977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6976] <... openat resumed>) = 3 [pid 6975] memfd_create("syzkaller", 0 [pid 6974] <... mount resumed>) = 0 [pid 6978] <... setpgid resumed>) = 0 [pid 6977] <... openat resumed>) = 3 [pid 6978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6977] write(3, "1000", 4 [pid 6976] write(3, "1000", 4 [pid 6975] <... memfd_create resumed>) = 3 [pid 6974] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6978] <... openat resumed>) = 3 [pid 6977] <... write resumed>) = 4 [pid 6976] <... write resumed>) = 4 [pid 6975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6974] <... openat resumed>) = 3 [pid 6977] close(3 [pid 6976] close(3 [pid 6978] write(3, "1000", 4 [pid 6977] <... close resumed>) = 0 [pid 6976] <... close resumed>) = 0 [pid 6977] symlink("/dev/binderfs", "./binderfs" [pid 6978] <... write resumed>) = 4 [pid 6977] <... symlink resumed>) = 0 [pid 6976] symlink("/dev/binderfs", "./binderfs" [pid 6975] <... mmap resumed>) = 0x7f943d000000 [pid 6974] chdir("./file1" [pid 5071] <... ioctl resumed>) = 0 [pid 6978] close(3 [pid 6977] memfd_create("syzkaller", 0 [pid 6976] <... symlink resumed>) = 0 [pid 6975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6974] <... chdir resumed>) = 0 [pid 6977] <... memfd_create resumed>) = 3 [pid 6974] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6978] <... close resumed>) = 0 [pid 6976] memfd_create("syzkaller", 0 [pid 6974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] close(3) = 0 [pid 6977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6974] truncate("./file1", 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6978] symlink("/dev/binderfs", "./binderfs" [pid 6976] <... memfd_create resumed>) = 3 [pid 6978] <... symlink resumed>) = 0 [pid 6977] <... mmap resumed>) = 0x7f943d000000 [pid 6976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6978] memfd_create("syzkaller", 0 [pid 6977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6976] <... mmap resumed>) = 0x7f943d000000 [pid 6974] <... truncate resumed>) = 0 [pid 6978] <... memfd_create resumed>) = 3 [pid 6974] memfd_create("syzkaller", 0) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6979 [pid 6978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6979 attached ) = 0x7f943d000000 [pid 6976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6975] <... write resumed>) = 524288 [pid 6974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6979] set_robust_list(0x555583d53660, 24) = 0 [pid 6978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6977] <... write resumed>) = 524288 [pid 6974] <... mmap resumed>) = 0x7f943d000000 [pid 6979] chdir("./315") = 0 [pid 6979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6974] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6979] <... prctl resumed>) = 0 [pid 6978] <... write resumed>) = 524288 [pid 6977] munmap(0x7f943d000000, 138412032 [pid 6976] <... write resumed>) = 524288 [pid 6975] munmap(0x7f943d000000, 138412032 [pid 6979] setpgid(0, 0 [pid 6974] <... write resumed>) = 524288 [pid 6979] <... setpgid resumed>) = 0 [pid 6978] munmap(0x7f943d000000, 138412032 [pid 6977] <... munmap resumed>) = 0 [pid 6975] <... munmap resumed>) = 0 [pid 6979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6978] <... munmap resumed>) = 0 [pid 6976] munmap(0x7f943d000000, 138412032 [pid 6979] <... openat resumed>) = 3 [pid 6977] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6979] write(3, "1000", 4 [pid 6978] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6975] <... openat resumed>) = 4 [pid 6974] munmap(0x7f943d000000, 138412032 [pid 6979] <... write resumed>) = 4 [pid 6977] <... openat resumed>) = 4 [pid 6976] <... munmap resumed>) = 0 [pid 6975] ioctl(4, LOOP_SET_FD, 3 [pid 6974] <... munmap resumed>) = 0 [pid 6979] close(3 [pid 6977] ioctl(4, LOOP_SET_FD, 3 [pid 6976] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6979] <... close resumed>) = 0 [pid 6974] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6979] symlink("/dev/binderfs", "./binderfs" [pid 6978] <... openat resumed>) = 4 [pid 6974] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6974] close(4 [pid 6979] <... symlink resumed>) = 0 [pid 6978] ioctl(4, LOOP_SET_FD, 3 [pid 6976] <... openat resumed>) = 4 [pid 6979] memfd_create("syzkaller", 0 [pid 6976] ioctl(4, LOOP_SET_FD, 3 [pid 6975] <... ioctl resumed>) = 0 [pid 6974] <... close resumed>) = 0 [pid 6975] close(3) = 0 [pid 6979] <... memfd_create resumed>) = 3 [pid 6975] close(4 [pid 6974] exit_group(0 [pid 6979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6975] <... close resumed>) = 0 [pid 6975] mkdir("./file1", 0777 [pid 6979] <... mmap resumed>) = 0x7f943d000000 [pid 6979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6975] <... mkdir resumed>) = 0 [pid 6974] <... exit_group resumed>) = ? [pid 6978] <... ioctl resumed>) = 0 [pid 6978] close(3) = 0 [pid 6978] close(4) = 0 [pid 6975] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6978] mkdir("./file1", 0777) = 0 [pid 6978] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6976] <... ioctl resumed>) = 0 [pid 6976] close(3) = 0 [pid 6974] +++ exited with 0 +++ [pid 6977] <... ioctl resumed>) = 0 [pid 6976] close(4 [pid 6977] close(3 [pid 6976] <... close resumed>) = 0 [pid 6975] <... mount resumed>) = 0 [pid 6977] <... close resumed>) = 0 [pid 6976] mkdir("./file1", 0777 [pid 6975] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6974, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6979] <... write resumed>) = 524288 [pid 6978] <... mount resumed>) = 0 [pid 6977] close(4 [pid 6976] <... mkdir resumed>) = 0 [pid 6977] <... close resumed>) = 0 [pid 6976] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6977] mkdir("./file1", 0777 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6977] <... mkdir resumed>) = 0 [pid 6978] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6975] <... openat resumed>) = 3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6978] <... openat resumed>) = 3 [pid 6977] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6975] chdir("./file1" [pid 6979] munmap(0x7f943d000000, 138412032 [pid 6978] chdir("./file1") = 0 [pid 6975] <... chdir resumed>) = 0 [pid 6978] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] umount2("./310", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6979] <... munmap resumed>) = 0 [pid 6978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6976] <... mount resumed>) = 0 [pid 6975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 243.086744][ T6975] loop3: detected capacity change from 0 to 1024 [ 243.087879][ T6977] loop2: detected capacity change from 0 to 1024 [ 243.104508][ T6978] loop1: detected capacity change from 0 to 1024 [ 243.113718][ T6976] loop4: detected capacity change from 0 to 1024 [pid 6978] truncate("./file1", 0 [pid 6976] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6975] truncate("./file1", 0 [pid 5076] openat(AT_FDCWD, "./310", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6979] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6976] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 6975] <... truncate resumed>) = 0 [pid 6979] <... openat resumed>) = 4 [pid 6979] ioctl(4, LOOP_SET_FD, 3 [pid 6976] chdir("./file1" [pid 6975] memfd_create("syzkaller", 0 [pid 5076] newfstatat(3, "", [pid 6976] <... chdir resumed>) = 0 [pid 6975] <... memfd_create resumed>) = 4 [pid 6976] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6976] truncate("./file1", 0 [pid 6975] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(3, [pid 6978] <... truncate resumed>) = 0 [pid 6977] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6978] memfd_create("syzkaller", 0 [pid 5076] umount2("./310/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6978] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./310/binderfs", [pid 6978] <... mmap resumed>) = 0x7f943d000000 [pid 6977] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6978] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6977] <... openat resumed>) = 3 [pid 6975] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6977] chdir("./file1") = 0 [pid 5076] unlink("./310/binderfs" [pid 6977] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6976] <... truncate resumed>) = 0 [pid 6977] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6976] memfd_create("syzkaller", 0 [pid 6977] truncate("./file1", 0 [pid 6976] <... memfd_create resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 6977] <... truncate resumed>) = 0 [pid 6976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6977] memfd_create("syzkaller", 0) = 4 [pid 6977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6977] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6978] <... write resumed>) = 524288 [pid 6979] <... ioctl resumed>) = 0 [pid 6976] <... mmap resumed>) = 0x7f943d000000 [pid 6979] close(3) = 0 [pid 6979] close(4) = 0 [pid 6979] mkdir("./file1", 0777) = 0 [pid 6979] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6976] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6979] <... mount resumed>) = 0 [pid 6975] <... write resumed>) = 524288 [pid 6979] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6979] chdir("./file1") = 0 [pid 6975] munmap(0x7f943d000000, 138412032 [ 243.171351][ T6979] loop0: detected capacity change from 0 to 1024 [pid 6979] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6979] truncate("./file1", 0 [pid 6975] <... munmap resumed>) = 0 [pid 6978] munmap(0x7f943d000000, 138412032 [pid 6975] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6978] <... munmap resumed>) = 0 [pid 6975] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6975] close(4 [pid 5076] <... umount2 resumed>) = 0 [pid 6979] <... truncate resumed>) = 0 [pid 6979] memfd_create("syzkaller", 0 [pid 6978] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6979] <... memfd_create resumed>) = 4 [pid 6978] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6978] close(4 [pid 6979] <... mmap resumed>) = 0x7f943d000000 [pid 6977] <... write resumed>) = 524288 [pid 6976] <... write resumed>) = 524288 [pid 6975] <... close resumed>) = 0 [pid 5076] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6979] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6977] munmap(0x7f943d000000, 138412032 [pid 5076] newfstatat(AT_FDCWD, "./310/file1", [pid 6976] munmap(0x7f943d000000, 138412032 [pid 6977] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6975] exit_group(0 [pid 6977] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6977] close(4 [pid 6976] <... munmap resumed>) = 0 [pid 6975] <... exit_group resumed>) = ? [pid 5076] umount2("./310/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6978] <... close resumed>) = 0 [pid 6977] <... close resumed>) = 0 [pid 6976] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6979] <... write resumed>) = 524288 [pid 6978] exit_group(0 [pid 6976] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./310/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6978] <... exit_group resumed>) = ? [pid 6976] close(4 [pid 6975] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 4 [pid 6978] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6978, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6977] exit_group(0 [pid 5072] <... openat resumed>) = 3 [pid 6977] <... exit_group resumed>) = ? [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6976] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 5076] newfstatat(4, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6975, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5072] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5074] <... restart_syscall resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./313/binderfs", [pid 6976] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6976] <... exit_group resumed>) = ? [pid 5076] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6979] munmap(0x7f943d000000, 138412032 [pid 6977] +++ exited with 0 +++ [pid 5074] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6979] <... munmap resumed>) = 0 [pid 5076] rmdir("./310/file1" [pid 5074] <... openat resumed>) = 3 [pid 5072] unlink("./313/binderfs" [pid 5074] newfstatat(3, "", [pid 6979] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6977, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 6979] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6979] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... restart_syscall resumed>) = 0 [pid 6979] <... close resumed>) = 0 [pid 6976] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./314/binderfs", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6976, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] unlink("./314/binderfs" [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5075] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./314/binderfs", [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 6979] exit_group(0 [pid 5076] rmdir("./310" [pid 5075] <... openat resumed>) = 3 [pid 5073] unlink("./314/binderfs" [pid 5072] <... umount2 resumed>) = 0 [pid 6979] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6979] +++ exited with 0 +++ [pid 5076] mkdir("./311", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6979, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] newfstatat(AT_FDCWD, "./313/file1", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./313/binderfs", [pid 5074] newfstatat(AT_FDCWD, "./314/file1", [pid 5072] newfstatat(4, "", [pid 5071] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(3, "", [pid 5076] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5072] getdents64(4, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] unlink("./313/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5075] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./314/file1", [pid 5072] close(4 [pid 5074] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] rmdir("./313/file1" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./313" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5072] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./315/binderfs", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 5075] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] mkdir("./314", 0777 [pid 5071] unlink("./315/binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 5072] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./313/file1", [pid 5073] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./314/file1" [pid 5075] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5073] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, [pid 5073] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./314" [pid 5075] getdents64(4, [pid 5074] close(4 [pid 5071] <... unlink resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./314/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./313/file1") = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] mkdir("./315", 0777 [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5073] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] <... close resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] rmdir("./313" [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] close(3) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3) = 0 ./strace-static-x86_64: Process 6980 attached [pid 5075] mkdir("./314", 0777 [pid 6980] set_robust_list(0x555583d53660, 24 [pid 5076] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6980 [pid 5072] <... ioctl resumed>) = 0 [pid 5074] rmdir("./314" [pid 5071] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6980] <... set_robust_list resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6980] chdir("./315" [pid 5075] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6980] <... chdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./315/file1", [pid 6980] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] mkdir("./315", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(3 [pid 5071] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6981 [pid 6980] <... prctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6982 attached [pid 6980] setpgid(0, 0 [pid 5071] <... openat resumed>) = 4 [pid 6982] set_robust_list(0x555583d53660, 24 [pid 5071] newfstatat(4, "", ./strace-static-x86_64: Process 6981 attached [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6982 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6981] set_robust_list(0x555583d53660, 24 [pid 5071] getdents64(4, [pid 6980] <... setpgid resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6981] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6981] chdir("./314" [pid 6980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(4, [pid 6982] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6982] chdir("./311" [pid 5071] close(4 [pid 6980] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6982] <... chdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6981] <... chdir resumed>) = 0 [pid 6980] write(3, "1000", 4 [pid 5071] rmdir("./315/file1" [pid 6982] <... prctl resumed>) = 0 [pid 6981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6980] <... write resumed>) = 4 [pid 6980] close(3) = 0 [pid 6980] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 6982] setpgid(0, 0 [pid 6981] <... prctl resumed>) = 0 [pid 6980] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 6982] <... setpgid resumed>) = 0 [pid 6981] setpgid(0, 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6981] <... setpgid resumed>) = 0 [pid 5071] close(3 [pid 6982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6980] memfd_create("syzkaller", 0 [pid 5071] <... close resumed>) = 0 [pid 6981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6980] <... memfd_create resumed>) = 3 [pid 5071] rmdir("./315" [pid 6980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6982] <... openat resumed>) = 3 [pid 6981] <... openat resumed>) = 3 [pid 6980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 6982] write(3, "1000", 4 [pid 6981] write(3, "1000", 4 [pid 6982] <... write resumed>) = 4 [pid 6981] <... write resumed>) = 4 [pid 5071] mkdir("./316", 0777 [pid 6982] close(3 [pid 6981] close(3 [pid 6982] <... close resumed>) = 0 [pid 6981] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6982] symlink("/dev/binderfs", "./binderfs" [pid 6981] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6982] <... symlink resumed>) = 0 [pid 6981] memfd_create("syzkaller", 0 [pid 6980] <... write resumed>) = 524288 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 6982] memfd_create("syzkaller", 0 [pid 6981] <... memfd_create resumed>) = 3 [pid 6980] munmap(0x7f943d000000, 138412032 [pid 6982] <... memfd_create resumed>) = 3 [pid 6981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6980] <... munmap resumed>) = 0 [pid 6982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6981] <... mmap resumed>) = 0x7f943d000000 [pid 5075] close(3 [pid 6981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6982] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... close resumed>) = 0 [pid 6980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6982] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6981] <... write resumed>) = 524288 [pid 6980] <... openat resumed>) = 4 [pid 6980] ioctl(4, LOOP_SET_FD, 3 [pid 5074] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6983 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6983 attached [pid 6982] <... write resumed>) = 524288 [pid 6981] munmap(0x7f943d000000, 138412032 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6984 [pid 6983] set_robust_list(0x555583d53660, 24) = 0 [pid 5071] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6984 attached [pid 6983] chdir("./314" [pid 5071] close(3 [pid 6983] <... chdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6984] set_robust_list(0x555583d53660, 24 [pid 6983] <... prctl resumed>) = 0 [pid 6982] munmap(0x7f943d000000, 138412032 [pid 6981] <... munmap resumed>) = 0 [pid 6980] <... ioctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6983] setpgid(0, 0 [pid 6981] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6980] close(3 [pid 6983] <... setpgid resumed>) = 0 [pid 6984] <... set_robust_list resumed>) = 0 [pid 6984] chdir("./315") = 0 [pid 6984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6984] setpgid(0, 0 [pid 6983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6981] <... openat resumed>) = 4 [pid 6980] <... close resumed>) = 0 [pid 6984] <... setpgid resumed>) = 0 [pid 6984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6983] <... openat resumed>) = 3 [pid 6981] ioctl(4, LOOP_SET_FD, 3 [pid 6980] close(4 [pid 6983] write(3, "1000", 4 [pid 6980] <... close resumed>) = 0 ./strace-static-x86_64: Process 6985 attached [pid 6984] <... openat resumed>) = 3 [pid 6985] set_robust_list(0x555583d53660, 24 [pid 6984] write(3, "1000", 4 [pid 6985] <... set_robust_list resumed>) = 0 [pid 6984] <... write resumed>) = 4 [pid 6985] chdir("./316" [pid 6984] close(3 [pid 6985] <... chdir resumed>) = 0 [pid 6985] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6985] setpgid(0, 0) = 0 [pid 6985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6984] <... close resumed>) = 0 [pid 6984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6983] <... write resumed>) = 4 [pid 6982] <... munmap resumed>) = 0 [pid 6980] mkdir("./file1", 0777 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6985 [pid 6985] <... openat resumed>) = 3 [pid 6984] memfd_create("syzkaller", 0 [pid 6981] <... ioctl resumed>) = 0 [pid 6985] write(3, "1000", 4 [pid 6984] <... memfd_create resumed>) = 3 [pid 6983] close(3 [pid 6981] close(3 [pid 6982] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6980] <... mkdir resumed>) = 0 [pid 6985] <... write resumed>) = 4 [pid 6984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6983] <... close resumed>) = 0 [pid 6982] <... openat resumed>) = 4 [pid 6981] <... close resumed>) = 0 [pid 6980] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6985] close(3 [pid 6984] <... mmap resumed>) = 0x7f943d000000 [pid 6983] symlink("/dev/binderfs", "./binderfs" [pid 6982] ioctl(4, LOOP_SET_FD, 3 [pid 6981] close(4 [pid 6985] <... close resumed>) = 0 [pid 6981] <... close resumed>) = 0 [pid 6983] <... symlink resumed>) = 0 [pid 6985] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6985] memfd_create("syzkaller", 0) = 3 [pid 6985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6981] mkdir("./file1", 0777 [pid 6985] <... mmap resumed>) = 0x7f943d000000 [pid 6983] memfd_create("syzkaller", 0) = 3 [pid 6981] <... mkdir resumed>) = 0 [ 243.509497][ T6980] loop2: detected capacity change from 0 to 1024 [ 243.538536][ T6981] loop1: detected capacity change from 0 to 1024 [ 243.553399][ T6982] loop5: detected capacity change from 0 to 1024 [pid 6983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6981] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6984] <... write resumed>) = 524288 [pid 6983] <... mmap resumed>) = 0x7f943d000000 [pid 6985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6980] <... mount resumed>) = 0 [pid 6984] munmap(0x7f943d000000, 138412032 [pid 6983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6980] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6984] <... munmap resumed>) = 0 [pid 6980] <... openat resumed>) = 3 [pid 6980] chdir("./file1") = 0 [pid 6982] <... ioctl resumed>) = 0 [pid 6980] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6984] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6980] truncate("./file1", 0 [pid 6984] <... openat resumed>) = 4 [pid 6984] ioctl(4, LOOP_SET_FD, 3 [pid 6983] <... write resumed>) = 524288 [pid 6982] close(3) = 0 [pid 6982] close(4) = 0 [pid 6982] mkdir("./file1", 0777 [pid 6985] munmap(0x7f943d000000, 138412032 [pid 6982] <... mkdir resumed>) = 0 [pid 6982] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6980] <... truncate resumed>) = 0 [pid 6985] <... munmap resumed>) = 0 [pid 6980] memfd_create("syzkaller", 0) = 4 [pid 6980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6980] <... mmap resumed>) = 0x7f943d000000 [pid 6985] ioctl(4, LOOP_SET_FD, 3 [pid 6983] munmap(0x7f943d000000, 138412032 [pid 6982] <... mount resumed>) = 0 [pid 6981] <... mount resumed>) = 0 [pid 6980] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6982] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6984] <... ioctl resumed>) = 0 [pid 6982] <... openat resumed>) = 3 [pid 6984] close(3) = 0 [pid 6984] close(4) = 0 [pid 6984] mkdir("./file1", 0777) = 0 [pid 6982] chdir("./file1" [pid 6983] <... munmap resumed>) = 0 [pid 6982] <... chdir resumed>) = 0 [pid 6981] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6982] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6981] <... openat resumed>) = 3 [pid 6982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6981] chdir("./file1" [pid 6984] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6981] <... chdir resumed>) = 0 [pid 6983] <... openat resumed>) = 4 [pid 6982] truncate("./file1", 0 [pid 6981] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6983] ioctl(4, LOOP_SET_FD, 3 [pid 6981] truncate("./file1", 0 [pid 6985] <... ioctl resumed>) = 0 [pid 6984] <... mount resumed>) = 0 [pid 6985] close(3 [pid 6984] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6985] <... close resumed>) = 0 [pid 6984] <... openat resumed>) = 3 [pid 6985] close(4 [pid 6984] chdir("./file1" [pid 6985] <... close resumed>) = 0 [pid 6984] <... chdir resumed>) = 0 [pid 6985] mkdir("./file1", 0777 [pid 6984] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6985] <... mkdir resumed>) = 0 [pid 6984] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6984] truncate("./file1", 0) = 0 [pid 6985] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6984] memfd_create("syzkaller", 0) = 4 [pid 6982] <... truncate resumed>) = 0 [pid 6981] <... truncate resumed>) = 0 [pid 6984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6982] memfd_create("syzkaller", 0 [pid 6981] memfd_create("syzkaller", 0 [pid 6985] <... mount resumed>) = 0 [pid 6984] <... mmap resumed>) = 0x7f943d000000 [pid 6983] <... ioctl resumed>) = 0 [pid 6982] <... memfd_create resumed>) = 4 [pid 6981] <... memfd_create resumed>) = 4 [pid 6985] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6984] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6983] close(3 [pid 6982] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6985] <... openat resumed>) = 3 [pid 6983] <... close resumed>) = 0 [pid 6980] <... write resumed>) = 524288 [pid 6983] close(4 [pid 6985] chdir("./file1" [pid 6981] <... mmap resumed>) = 0x7f943d000000 [pid 6983] <... close resumed>) = 0 [pid 6985] <... chdir resumed>) = 0 [pid 6983] mkdir("./file1", 0777 [pid 6982] <... mmap resumed>) = 0x7f943d000000 [pid 6985] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6983] <... mkdir resumed>) = 0 [pid 6985] truncate("./file1", 0 [pid 6983] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6980] munmap(0x7f943d000000, 138412032) = 0 [pid 6985] <... truncate resumed>) = 0 [pid 6981] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6980] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6985] memfd_create("syzkaller", 0) = 4 [pid 6980] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 243.598125][ T6984] loop3: detected capacity change from 0 to 1024 [ 243.617816][ T6985] loop0: detected capacity change from 0 to 1024 [ 243.636135][ T6983] loop4: detected capacity change from 0 to 1024 [pid 6985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6984] <... write resumed>) = 524288 [pid 6980] close(4 [pid 6982] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6985] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6984] munmap(0x7f943d000000, 138412032 [pid 6982] <... write resumed>) = 524288 [pid 6984] <... munmap resumed>) = 0 [pid 6981] <... write resumed>) = 524288 [pid 6984] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6983] <... mount resumed>) = 0 [pid 6980] <... close resumed>) = 0 [pid 6980] exit_group(0 [pid 6984] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6985] <... write resumed>) = 524288 [pid 6984] close(4 [pid 6983] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6982] munmap(0x7f943d000000, 138412032 [pid 6981] munmap(0x7f943d000000, 138412032 [pid 6980] <... exit_group resumed>) = ? [pid 6983] <... openat resumed>) = 3 [pid 6982] <... munmap resumed>) = 0 [pid 6981] <... munmap resumed>) = 0 [pid 6980] +++ exited with 0 +++ [pid 6983] chdir("./file1" [pid 6981] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6983] <... chdir resumed>) = 0 [pid 6982] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6981] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6980, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6982] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6981] close(4 [pid 5073] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6982] close(4 [pid 6981] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6985] munmap(0x7f943d000000, 138412032 [pid 6984] <... close resumed>) = 0 [pid 6983] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6982] <... close resumed>) = 0 [pid 6981] exit_group(0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6983] truncate("./file1", 0 [pid 6984] exit_group(0 [pid 5073] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6985] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./315/binderfs", [pid 6984] <... exit_group resumed>) = ? [pid 6981] <... exit_group resumed>) = ? [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6985] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] unlink("./315/binderfs" [pid 6985] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6983] <... truncate resumed>) = 0 [pid 6981] +++ exited with 0 +++ [pid 5073] <... unlink resumed>) = 0 [pid 6985] close(4 [pid 6983] memfd_create("syzkaller", 0 [pid 6982] exit_group(0 [pid 5073] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6983] <... memfd_create resumed>) = 4 [pid 6982] <... exit_group resumed>) = ? [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6981, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6984] +++ exited with 0 +++ [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6982] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6984, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... openat resumed>) = 3 [pid 6983] <... mmap resumed>) = 0x7f943d000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6982, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(3, "", [pid 6983] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./311", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5072] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./311", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./314/binderfs", [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] unlink("./314/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... unlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./315/binderfs", [pid 5072] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6985] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] unlink("./315/binderfs") = 0 [pid 5074] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 6985] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = 0 [pid 5076] umount2("./311/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./311/binderfs", [pid 6985] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./311/binderfs") = 0 [pid 5076] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5072] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./314/file1", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6985] +++ exited with 0 +++ [pid 6983] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./315/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6985, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] newfstatat(AT_FDCWD, "./311/file1", [pid 5072] <... openat resumed>) = 4 [pid 6983] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(4, "", [pid 6983] <... munmap resumed>) = 0 [pid 5076] umount2("./311/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6983] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./315/file1", [pid 5073] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6983] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] getdents64(4, [pid 6983] close(4 [pid 5076] openat(AT_FDCWD, "./311/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... openat resumed>) = 4 [pid 5074] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5072] getdents64(4, [pid 5071] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 5072] close(4 [pid 5071] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5072] rmdir("./314/file1" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5073] close(4 [pid 5071] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5074] newfstatat(4, "", [pid 5071] getdents64(3, [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] rmdir("./315/file1" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] close(4 [pid 5074] getdents64(4, [pid 5071] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./311/file1" [pid 5074] getdents64(4, [pid 5071] newfstatat(AT_FDCWD, "./316/binderfs", [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(3, [pid 5074] close(4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] unlink("./316/binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5076] close(3 [pid 5074] rmdir("./315/file1" [pid 5073] getdents64(3, [pid 5072] close(3 [pid 5076] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6983] <... close resumed>) = 0 [pid 5076] rmdir("./311" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6983] exit_group(0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] close(3 [pid 5072] rmdir("./314" [pid 6983] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 6983] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./315" [pid 5072] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 5076] mkdir("./312", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6983, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] mkdir("./315", 0777 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] mkdir("./316", 0777 [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5074] rmdir("./315" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5075] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5074] mkdir("./316", 0777 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(3, "", [pid 5076] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5076] ioctl(3, LOOP_CLR_FD) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] close(3) = 0 [pid 5071] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] newfstatat(AT_FDCWD, "./316/file1", [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... ioctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./314/binderfs", [pid 5074] <... openat resumed>) = 3 [pid 5072] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] unlink("./314/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5071] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6986 [pid 5074] <... close resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6987 [pid 5071] newfstatat(4, "", ./strace-static-x86_64: Process 6987 attached [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6988 attached [pid 6987] set_robust_list(0x555583d53660, 24 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] getdents64(4, ./strace-static-x86_64: Process 6986 attached [pid 6987] <... set_robust_list resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6988 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6988] set_robust_list(0x555583d53660, 24 [pid 6986] set_robust_list(0x555583d53660, 24 [pid 6987] chdir("./315" [pid 5071] getdents64(4, [pid 6988] <... set_robust_list resumed>) = 0 [pid 6987] <... chdir resumed>) = 0 [pid 6986] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6988] chdir("./316" [pid 6986] chdir("./312" [pid 6987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] close(4 [pid 6987] <... prctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5075] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./316/file1" [pid 6988] <... chdir resumed>) = 0 [pid 6987] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 6986] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./314/file1", [pid 5071] getdents64(3, [pid 6986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6986] <... prctl resumed>) = 0 [pid 5075] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 6986] setpgid(0, 0 [pid 6987] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 6988] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6986] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./316" [pid 6988] <... prctl resumed>) = 0 [pid 6986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6988] setpgid(0, 0 [pid 6987] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 6986] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5071] mkdir("./317", 0777 [pid 6988] <... setpgid resumed>) = 0 [pid 6987] write(3, "1000", 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6987] <... write resumed>) = 4 [pid 6986] write(3, "1000", 4 [pid 5075] getdents64(4, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6987] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6987] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 6986] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6986] close(3 [pid 6987] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(4 [pid 6988] <... openat resumed>) = 3 [pid 6986] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6988] write(3, "1000", 4 [pid 6986] symlink("/dev/binderfs", "./binderfs" [pid 6987] <... symlink resumed>) = 0 [pid 5075] rmdir("./314/file1" [pid 6988] <... write resumed>) = 4 [pid 6986] <... symlink resumed>) = 0 [pid 6988] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 6988] <... close resumed>) = 0 [pid 6987] memfd_create("syzkaller", 0 [pid 6988] symlink("/dev/binderfs", "./binderfs" [pid 6986] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6986] <... memfd_create resumed>) = 3 [pid 5075] getdents64(3, [pid 6988] <... symlink resumed>) = 0 [pid 6986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6986] <... mmap resumed>) = 0x7f943d000000 [pid 6987] <... memfd_create resumed>) = 3 [pid 5075] close(3 [pid 5073] close(3 [pid 6988] memfd_create("syzkaller", 0 [pid 6986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] rmdir("./314") = 0 [pid 5075] mkdir("./315", 0777 [pid 6987] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6988] <... memfd_create resumed>) = 3 [pid 6987] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6989 attached ) = 0x7f943d000000 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6989 [pid 6989] set_robust_list(0x555583d53660, 24) = 0 [pid 6989] chdir("./316") = 0 [pid 6988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6986] <... write resumed>) = 524288 [pid 6989] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6988] <... write resumed>) = 524288 [pid 6987] <... write resumed>) = 524288 [pid 6989] <... prctl resumed>) = 0 [pid 6989] setpgid(0, 0 [pid 6988] munmap(0x7f943d000000, 138412032 [pid 6989] <... setpgid resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6986] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] close(3 [pid 6986] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 6989] <... openat resumed>) = 3 [pid 6988] <... munmap resumed>) = 0 [pid 6986] <... openat resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6986] ioctl(4, LOOP_SET_FD, 3 [pid 6989] write(3, "1000", 4 [pid 6988] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 6989] <... write resumed>) = 4 [pid 6989] close(3 [pid 6988] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6990 [pid 5075] <... close resumed>) = 0 [pid 6989] <... close resumed>) = 0 [pid 6989] symlink("/dev/binderfs", "./binderfs" [pid 6988] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6990 attached [pid 6987] munmap(0x7f943d000000, 138412032 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6990] set_robust_list(0x555583d53660, 24 [pid 6987] <... munmap resumed>) = 0 [pid 6987] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6990] <... set_robust_list resumed>) = 0 [pid 6987] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6991 ./strace-static-x86_64: Process 6991 attached [pid 6990] chdir("./317" [pid 6989] <... symlink resumed>) = 0 [pid 6991] set_robust_list(0x555583d53660, 24 [pid 6990] <... chdir resumed>) = 0 [pid 6989] memfd_create("syzkaller", 0 [pid 6991] <... set_robust_list resumed>) = 0 [pid 6990] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6991] chdir("./315" [pid 6990] <... prctl resumed>) = 0 [pid 6991] <... chdir resumed>) = 0 [pid 6991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6990] setpgid(0, 0 [pid 6986] <... ioctl resumed>) = 0 [pid 6990] <... setpgid resumed>) = 0 [pid 6986] close(3 [pid 6991] setpgid(0, 0 [pid 6990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6989] <... memfd_create resumed>) = 3 [pid 6986] <... close resumed>) = 0 [pid 6991] <... setpgid resumed>) = 0 [pid 6990] <... openat resumed>) = 3 [pid 6989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6988] <... ioctl resumed>) = 0 [pid 6986] close(4 [pid 6991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6989] <... mmap resumed>) = 0x7f943d000000 [pid 6988] close(3 [pid 6986] <... close resumed>) = 0 [pid 6990] write(3, "1000", 4 [pid 6988] <... close resumed>) = 0 [pid 6986] mkdir("./file1", 0777 [pid 6991] <... openat resumed>) = 3 [pid 6990] <... write resumed>) = 4 [pid 6988] close(4 [pid 6986] <... mkdir resumed>) = 0 [pid 6991] write(3, "1000", 4 [pid 6990] close(3 [pid 6991] <... write resumed>) = 4 [pid 6990] <... close resumed>) = 0 [pid 6988] <... close resumed>) = 0 [pid 6991] close(3 [pid 6990] symlink("/dev/binderfs", "./binderfs" [pid 6988] mkdir("./file1", 0777 [pid 6991] <... close resumed>) = 0 [pid 6990] <... symlink resumed>) = 0 [pid 6989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6986] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6991] symlink("/dev/binderfs", "./binderfs" [pid 6990] memfd_create("syzkaller", 0 [pid 6988] <... mkdir resumed>) = 0 [pid 6990] <... memfd_create resumed>) = 3 [pid 6991] <... symlink resumed>) = 0 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6988] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6991] memfd_create("syzkaller", 0 [pid 6990] <... mmap resumed>) = 0x7f943d000000 [pid 6986] <... mount resumed>) = 0 [pid 6987] <... ioctl resumed>) = 0 [pid 6991] <... memfd_create resumed>) = 3 [pid 6990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6987] close(3 [pid 6991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6986] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6987] <... close resumed>) = 0 [pid 6986] <... openat resumed>) = 3 [pid 6987] close(4) = 0 [pid 6986] chdir("./file1" [pid 6987] mkdir("./file1", 0777 [pid 6986] <... chdir resumed>) = 0 [pid 6987] <... mkdir resumed>) = 0 [pid 6986] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [ 243.990558][ T6986] loop5: detected capacity change from 0 to 1024 [ 244.006625][ T6988] loop3: detected capacity change from 0 to 1024 [ 244.011961][ T6987] loop1: detected capacity change from 0 to 1024 [pid 6986] truncate("./file1", 0 [pid 6989] <... write resumed>) = 524288 [pid 6986] <... truncate resumed>) = 0 [pid 6987] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6989] munmap(0x7f943d000000, 138412032 [pid 6988] <... mount resumed>) = 0 [pid 6986] memfd_create("syzkaller", 0 [pid 6989] <... munmap resumed>) = 0 [pid 6988] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6986] <... memfd_create resumed>) = 4 [pid 6991] <... write resumed>) = 524288 [pid 6990] <... write resumed>) = 524288 [pid 6986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6988] <... openat resumed>) = 3 [pid 6988] chdir("./file1" [pid 6989] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6988] <... chdir resumed>) = 0 [pid 6987] <... mount resumed>) = 0 [pid 6989] <... openat resumed>) = 4 [pid 6988] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6986] <... mmap resumed>) = 0x7f943d000000 [pid 6988] truncate("./file1", 0 [pid 6987] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6989] ioctl(4, LOOP_SET_FD, 3 [pid 6987] <... openat resumed>) = 3 [pid 6987] chdir("./file1") = 0 [pid 6987] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6987] truncate("./file1", 0 [pid 6986] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6990] munmap(0x7f943d000000, 138412032 [pid 6987] <... truncate resumed>) = 0 [pid 6987] memfd_create("syzkaller", 0) = 4 [pid 6987] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6991] munmap(0x7f943d000000, 138412032 [pid 6989] <... ioctl resumed>) = 0 [pid 6988] <... truncate resumed>) = 0 [pid 6987] <... mmap resumed>) = 0x7f943d000000 [pid 6991] <... munmap resumed>) = 0 [pid 6988] memfd_create("syzkaller", 0 [pid 6990] <... munmap resumed>) = 0 [pid 6988] <... memfd_create resumed>) = 4 [pid 6991] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6989] close(3 [pid 6988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6989] <... close resumed>) = 0 [pid 6991] <... openat resumed>) = 4 [pid 6990] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6989] close(4 [pid 6988] <... mmap resumed>) = 0x7f943d000000 [pid 6986] <... write resumed>) = 524288 [pid 6991] ioctl(4, LOOP_SET_FD, 3 [pid 6989] <... close resumed>) = 0 [pid 6991] <... ioctl resumed>) = 0 [pid 6989] mkdir("./file1", 0777 [pid 6988] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6989] <... mkdir resumed>) = 0 [pid 6991] close(3 [pid 6989] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6988] <... write resumed>) = 524288 [pid 6986] munmap(0x7f943d000000, 138412032 [pid 6991] <... close resumed>) = 0 [pid 6990] <... openat resumed>) = 4 [pid 6986] <... munmap resumed>) = 0 [pid 6991] close(4) = 0 [pid 6987] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6991] mkdir("./file1", 0777 [ 244.111855][ T6989] loop2: detected capacity change from 0 to 1024 [ 244.144493][ T6991] loop4: detected capacity change from 0 to 1024 [pid 6990] ioctl(4, LOOP_SET_FD, 3 [pid 6986] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6988] munmap(0x7f943d000000, 138412032 [pid 6991] <... mkdir resumed>) = 0 [pid 6988] <... munmap resumed>) = 0 [pid 6986] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6987] <... write resumed>) = 524288 [pid 6991] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6988] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6986] close(4 [pid 6988] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6988] close(4 [pid 6986] <... close resumed>) = 0 [pid 6987] munmap(0x7f943d000000, 138412032 [pid 6990] <... ioctl resumed>) = 0 [pid 6987] <... munmap resumed>) = 0 [pid 6990] close(3) = 0 [pid 6990] close(4) = 0 [pid 6990] mkdir("./file1", 0777) = 0 [pid 6986] exit_group(0 [pid 6987] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6988] <... close resumed>) = 0 [pid 6986] <... exit_group resumed>) = ? [pid 6987] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6990] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6989] <... mount resumed>) = 0 [pid 6986] +++ exited with 0 +++ [pid 6987] close(4 [pid 6988] exit_group(0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6986, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 6988] <... exit_group resumed>) = ? [pid 5076] umount2("./312", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6990] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6989] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6990] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 244.175783][ T6990] loop0: detected capacity change from 0 to 1024 [pid 5076] openat(AT_FDCWD, "./312", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6990] <... openat resumed>) = 3 [pid 6989] <... openat resumed>) = 3 [pid 6988] +++ exited with 0 +++ [pid 6987] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6990] chdir("./file1" [pid 6989] chdir("./file1" [pid 6987] exit_group(0 [pid 5076] newfstatat(3, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6988, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6991] <... mount resumed>) = 0 [pid 6991] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6989] <... chdir resumed>) = 0 [pid 6987] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6991] <... openat resumed>) = 3 [pid 6989] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6987] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6991] chdir("./file1" [pid 6989] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./312/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6987, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6991] <... chdir resumed>) = 0 [pid 6989] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6991] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6990] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./312/binderfs", [pid 6991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6990] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6989] <... truncate resumed>) = 0 [pid 5074] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6991] truncate("./file1", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./312/binderfs" [pid 5072] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", [pid 6990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6989] memfd_create("syzkaller", 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6989] <... memfd_create resumed>) = 4 [pid 5076] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 6990] truncate("./file1", 0 [pid 6989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6989] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(3, "", [pid 5072] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6991] <... truncate resumed>) = 0 [pid 6990] <... truncate resumed>) = 0 [pid 5076] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./315/binderfs", [pid 6991] memfd_create("syzkaller", 0 [pid 6990] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./312/file1", [pid 6991] <... memfd_create resumed>) = 4 [pid 6990] <... memfd_create resumed>) = 4 [pid 6989] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6989] <... write resumed>) = 524288 [pid 5076] umount2("./312/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] unlink("./315/binderfs" [pid 6991] <... mmap resumed>) = 0x7f943d000000 [pid 6990] <... mmap resumed>) = 0x7f943d000000 [pid 6989] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./312/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] <... unlink resumed>) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./312/file1") = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./312") = 0 [pid 5076] mkdir("./313", 0777 [pid 6991] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6990] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6989] <... munmap resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./316/binderfs", [pid 5072] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6989] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6989] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] unlink("./316/binderfs" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6991] <... write resumed>) = 524288 [pid 6990] <... write resumed>) = 524288 [pid 6989] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6991] munmap(0x7f943d000000, 138412032 [pid 6990] munmap(0x7f943d000000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 5074] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6991] <... munmap resumed>) = 0 [pid 6990] <... munmap resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6990] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6991] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6989] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6990] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6991] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6989] exit_group(0 [pid 5072] newfstatat(AT_FDCWD, "./315/file1", [pid 6991] close(4 [pid 6990] close(4 [pid 6989] <... exit_group resumed>) = ? [pid 5074] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6991] <... close resumed>) = 0 [pid 6990] <... close resumed>) = 0 [pid 6989] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./316/file1", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6989, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6991] exit_group(0 [pid 6990] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 6990] <... exit_group resumed>) = ? [pid 5072] rmdir("./315/file1" [pid 6991] <... exit_group resumed>) = ? [pid 5074] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6990] +++ exited with 0 +++ [pid 5073] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6990, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 6991] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... restart_syscall resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6991, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] rmdir("./315" [pid 5075] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5072] mkdir("./316", 0777 [pid 5075] newfstatat(3, "", [pid 5074] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] newfstatat(3, "", [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./317/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./315/binderfs", [pid 5074] getdents64(4, [pid 5072] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(AT_FDCWD, "./316/binderfs", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] unlink("./317/binderfs" [pid 5075] unlink("./315/binderfs" [pid 5074] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] unlink("./316/binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 5075] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] rmdir("./316/file1" [pid 5073] <... unlink resumed>) = 0 [pid 5071] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3) = 0 [pid 5074] rmdir("./316") = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./316/file1", ./strace-static-x86_64: Process 6992 attached [pid 5075] <... umount2 resumed>) = 0 [pid 5074] mkdir("./317", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6992] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6992 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6992] <... set_robust_list resumed>) = 0 [pid 5075] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6992] chdir("./313" [pid 5071] newfstatat(AT_FDCWD, "./317/file1", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6992] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./315/file1", [pid 5073] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 6992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6992] <... prctl resumed>) = 0 [pid 5075] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5071] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6992] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 5072] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 6992] <... setpgid resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] newfstatat(4, "", [pid 5073] rmdir("./316/file1" [pid 5071] getdents64(4, ./strace-static-x86_64: Process 6993 attached [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 6993] set_robust_list(0x555583d53660, 24 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] getdents64(4, [pid 6993] <... set_robust_list resumed>) = 0 [pid 6992] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6993] chdir("./316" [pid 6992] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6993 [pid 5071] close(4 [pid 6993] <... chdir resumed>) = 0 [pid 6992] <... write resumed>) = 4 [pid 5075] close(4 [pid 5073] close(3 [pid 5071] <... close resumed>) = 0 [pid 6993] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6992] close(3 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] rmdir("./317/file1" [pid 6993] <... prctl resumed>) = 0 [pid 6992] <... close resumed>) = 0 [pid 5075] rmdir("./315/file1" [pid 5073] rmdir("./316" [pid 5071] <... rmdir resumed>) = 0 [pid 6993] setpgid(0, 0 [pid 6992] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 6993] <... setpgid resumed>) = 0 [pid 6992] <... symlink resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 6993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6992] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5071] close(3 [pid 6992] <... memfd_create resumed>) = 3 [pid 6992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6992] <... mmap resumed>) = 0x7f943d000000 [pid 5075] rmdir("./315" [pid 6993] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] mkdir("./317", 0777 [pid 5071] rmdir("./317" [pid 6993] write(3, "1000", 4 [pid 5071] <... rmdir resumed>) = 0 [pid 6993] <... write resumed>) = 4 [pid 6992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] mkdir("./316", 0777 [pid 5074] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 6993] close(3 [pid 6992] <... write resumed>) = 524288 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] mkdir("./318", 0777 [pid 6993] <... close resumed>) = 0 [pid 6993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 6993] memfd_create("syzkaller", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6993] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6993] <... mmap resumed>) = 0x7f943d000000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 6994 ./strace-static-x86_64: Process 6994 attached [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6992] munmap(0x7f943d000000, 138412032) = 0 [pid 6992] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6994] set_robust_list(0x555583d53660, 24 [pid 6993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6992] ioctl(4, LOOP_SET_FD, 3 [pid 6994] <... set_robust_list resumed>) = 0 [pid 6994] chdir("./317") = 0 [pid 6993] <... write resumed>) = 524288 [pid 6992] <... ioctl resumed>) = 0 [pid 6993] munmap(0x7f943d000000, 138412032 [pid 6992] close(3 [pid 6994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6993] <... munmap resumed>) = 0 [pid 6992] <... close resumed>) = 0 [pid 6994] setpgid(0, 0) = 0 [pid 6994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6993] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6992] close(4 [pid 6994] <... openat resumed>) = 3 [pid 6993] <... openat resumed>) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 6994] write(3, "1000", 4) = 4 [pid 6994] close(3) = 0 [pid 6994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6994] memfd_create("syzkaller", 0 [pid 6993] ioctl(4, LOOP_SET_FD, 3 [pid 6992] <... close resumed>) = 0 [pid 6994] <... memfd_create resumed>) = 3 [pid 6994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6992] mkdir("./file1", 0777 [pid 5075] <... ioctl resumed>) = 0 [pid 6992] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6995 attached [pid 6994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6993] <... ioctl resumed>) = 0 [pid 6992] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] close(3 [pid 5071] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6995] set_robust_list(0x555583d53660, 24 [pid 6993] close(3 [pid 6992] <... mount resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 6995 [pid 5071] close(3 [pid 6995] <... set_robust_list resumed>) = 0 [pid 6993] <... close resumed>) = 0 [pid 6992] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 6995] chdir("./317" [pid 6993] close(4 [pid 6992] <... openat resumed>) = 3 [pid 6995] <... chdir resumed>) = 0 [pid 6993] <... close resumed>) = 0 [pid 6992] chdir("./file1" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6992] <... chdir resumed>) = 0 [pid 6995] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6993] mkdir("./file1", 0777 [pid 6995] <... prctl resumed>) = 0 [pid 6993] <... mkdir resumed>) = 0 [pid 6992] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6995] setpgid(0, 0 [pid 6992] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6995] <... setpgid resumed>) = 0 [pid 6992] truncate("./file1", 0./strace-static-x86_64: Process 6996 attached [pid 6995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 244.518570][ T6992] loop5: detected capacity change from 0 to 1024 [ 244.544795][ T6993] loop1: detected capacity change from 0 to 1024 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 6997 ./strace-static-x86_64: Process 6997 attached [pid 6996] set_robust_list(0x555583d53660, 24 [pid 6995] write(3, "1000", 4 [pid 6994] <... write resumed>) = 524288 [pid 6993] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6992] <... truncate resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 6996 [pid 6997] set_robust_list(0x555583d53660, 24 [pid 6996] <... set_robust_list resumed>) = 0 [pid 6995] <... write resumed>) = 4 [pid 6992] memfd_create("syzkaller", 0 [pid 6997] <... set_robust_list resumed>) = 0 [pid 6997] chdir("./318" [pid 6996] chdir("./316" [pid 6995] close(3 [pid 6992] <... memfd_create resumed>) = 4 [pid 6997] <... chdir resumed>) = 0 [pid 6996] <... chdir resumed>) = 0 [pid 6995] <... close resumed>) = 0 [pid 6992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6996] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6995] symlink("/dev/binderfs", "./binderfs" [pid 6997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6996] <... prctl resumed>) = 0 [pid 6995] <... symlink resumed>) = 0 [pid 6992] <... mmap resumed>) = 0x7f943d000000 [pid 6995] memfd_create("syzkaller", 0 [pid 6994] munmap(0x7f943d000000, 138412032 [pid 6993] <... mount resumed>) = 0 [pid 6995] <... memfd_create resumed>) = 3 [pid 6994] <... munmap resumed>) = 0 [pid 6993] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6994] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6993] <... openat resumed>) = 3 [pid 6995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6994] <... openat resumed>) = 4 [pid 6993] chdir("./file1" [pid 6997] <... prctl resumed>) = 0 [pid 6996] setpgid(0, 0 [pid 6997] setpgid(0, 0 [pid 6996] <... setpgid resumed>) = 0 [pid 6994] ioctl(4, LOOP_SET_FD, 3 [pid 6993] <... chdir resumed>) = 0 [pid 6997] <... setpgid resumed>) = 0 [pid 6996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6993] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6992] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6996] <... openat resumed>) = 3 [pid 6993] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6997] <... openat resumed>) = 3 [pid 6996] write(3, "1000", 4 [pid 6993] truncate("./file1", 0 [pid 6996] <... write resumed>) = 4 [pid 6997] write(3, "1000", 4 [pid 6996] close(3 [pid 6997] <... write resumed>) = 4 [pid 6996] <... close resumed>) = 0 [pid 6997] close(3 [pid 6996] symlink("/dev/binderfs", "./binderfs" [pid 6997] <... close resumed>) = 0 [pid 6997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6996] <... symlink resumed>) = 0 [pid 6995] <... write resumed>) = 524288 [pid 6993] <... truncate resumed>) = 0 [pid 6992] <... write resumed>) = 524288 [pid 6997] memfd_create("syzkaller", 0 [pid 6996] memfd_create("syzkaller", 0 [pid 6993] memfd_create("syzkaller", 0 [pid 6997] <... memfd_create resumed>) = 3 [pid 6997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6996] <... memfd_create resumed>) = 3 [pid 6997] <... mmap resumed>) = 0x7f943d000000 [pid 6996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6993] <... memfd_create resumed>) = 4 [pid 6996] <... mmap resumed>) = 0x7f943d000000 [pid 6993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6992] munmap(0x7f943d000000, 138412032 [pid 6993] <... mmap resumed>) = 0x7f943d000000 [pid 6993] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6992] <... munmap resumed>) = 0 [pid 6994] <... ioctl resumed>) = 0 [pid 6994] close(3) = 0 [pid 6994] close(4) = 0 [pid 6994] mkdir("./file1", 0777) = 0 [pid 6994] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6992] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6995] munmap(0x7f943d000000, 138412032) = 0 [pid 6992] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 244.630408][ T6994] loop3: detected capacity change from 0 to 1024 [pid 6995] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6993] <... write resumed>) = 524288 [pid 6995] ioctl(4, LOOP_SET_FD, 3 [pid 6992] close(4 [pid 6993] munmap(0x7f943d000000, 138412032) = 0 [pid 6992] <... close resumed>) = 0 [pid 6993] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6993] close(4) = 0 [pid 6994] <... mount resumed>) = 0 [pid 6995] <... ioctl resumed>) = 0 [pid 6994] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6992] exit_group(0 [pid 6994] chdir("./file1" [pid 6992] <... exit_group resumed>) = ? [pid 6995] close(3) = 0 [pid 6994] <... chdir resumed>) = 0 [pid 6995] close(4 [pid 6994] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6993] exit_group(0 [pid 6995] <... close resumed>) = 0 [pid 6994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6995] mkdir("./file1", 0777 [pid 6994] truncate("./file1", 0 [pid 6993] <... exit_group resumed>) = ? [pid 6996] <... write resumed>) = 524288 [pid 6995] <... mkdir resumed>) = 0 [pid 6997] <... write resumed>) = 524288 [pid 6996] munmap(0x7f943d000000, 138412032 [pid 6992] +++ exited with 0 +++ [pid 6997] munmap(0x7f943d000000, 138412032 [pid 6996] <... munmap resumed>) = 0 [pid 6995] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6992, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6997] <... munmap resumed>) = 0 [pid 6996] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6994] <... truncate resumed>) = 0 [pid 6997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6996] <... openat resumed>) = 4 [pid 6997] <... openat resumed>) = 4 [pid 6996] ioctl(4, LOOP_SET_FD, 3 [pid 6995] <... mount resumed>) = 0 [pid 6994] memfd_create("syzkaller", 0 [pid 6993] +++ exited with 0 +++ [pid 6997] ioctl(4, LOOP_SET_FD, 3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6993, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 244.698246][ T6995] loop2: detected capacity change from 0 to 1024 [pid 6995] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6994] <... memfd_create resumed>) = 4 [pid 6995] <... openat resumed>) = 3 [pid 6994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6995] chdir("./file1" [pid 6994] <... mmap resumed>) = 0x7f943d000000 [pid 6995] <... chdir resumed>) = 0 [pid 5076] umount2("./313", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6994] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6995] truncate("./file1", 0 [pid 5076] openat(AT_FDCWD, "./313", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6995] <... truncate resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6995] memfd_create("syzkaller", 0 [pid 5076] newfstatat(3, "", [pid 6995] <... memfd_create resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(3, [pid 6995] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./313/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6997] <... ioctl resumed>) = 0 [pid 6996] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 6997] close(3 [pid 5072] newfstatat(3, "", [pid 6997] <... close resumed>) = 0 [pid 6996] close(3 [pid 6997] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6996] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 6996] close(4) = 0 [pid 5076] newfstatat(AT_FDCWD, "./313/binderfs", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6997] <... close resumed>) = 0 [pid 6996] mkdir("./file1", 0777 [pid 6995] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6997] mkdir("./file1", 0777 [pid 6996] <... mkdir resumed>) = 0 [pid 6994] <... write resumed>) = 524288 [pid 5076] unlink("./313/binderfs" [pid 5072] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6997] <... mkdir resumed>) = 0 [pid 6996] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6994] munmap(0x7f943d000000, 138412032 [pid 5076] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6997] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6994] <... munmap resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./316/binderfs") = 0 [ 244.746053][ T6997] loop0: detected capacity change from 0 to 1024 [ 244.754082][ T6996] loop4: detected capacity change from 0 to 1024 [pid 5072] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6995] <... write resumed>) = 524288 [pid 6997] <... mount resumed>) = 0 [pid 6994] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6997] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6994] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6994] close(4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6995] munmap(0x7f943d000000, 138412032 [pid 6994] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./316/file1", [pid 6997] <... openat resumed>) = 3 [pid 6995] <... munmap resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./313/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6997] chdir("./file1" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6997] <... chdir resumed>) = 0 [pid 6997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6995] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6994] exit_group(0 [pid 5076] umount2("./313/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6997] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6997] <... truncate resumed>) = 0 [pid 6996] <... mount resumed>) = 0 [pid 6995] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6994] <... exit_group resumed>) = ? [pid 5076] openat(AT_FDCWD, "./313/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... openat resumed>) = 4 [pid 6997] memfd_create("syzkaller", 0 [pid 6995] close(4 [pid 6997] <... memfd_create resumed>) = 4 [pid 6996] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6994] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 6997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6996] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6997] <... mmap resumed>) = 0x7f943d000000 [pid 6996] chdir("./file1" [pid 5076] newfstatat(4, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6994, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] getdents64(4, [pid 6995] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 6996] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6996] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 6996] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6995] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] close(4 [pid 6996] truncate("./file1", 0 [pid 5076] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./316/file1" [pid 6995] <... exit_group resumed>) = ? [pid 6997] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5074] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6995] +++ exited with 0 +++ [pid 5076] close(4 [pid 5074] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6995, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5076] rmdir("./313/file1" [pid 5074] newfstatat(3, "", [pid 5072] rmdir("./316" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 6997] <... write resumed>) = 524288 [pid 6996] <... truncate resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] mkdir("./317", 0777 [pid 6997] munmap(0x7f943d000000, 138412032 [pid 6996] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5072] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 6997] <... munmap resumed>) = 0 [pid 6996] <... memfd_create resumed>) = 4 [pid 5076] close(3 [pid 5074] newfstatat(AT_FDCWD, "./317/binderfs", [pid 5073] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 6997] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6996] <... mmap resumed>) = 0x7f943d000000 [pid 5076] rmdir("./313" [pid 5074] unlink("./317/binderfs" [pid 5073] newfstatat(AT_FDCWD, "./317/binderfs", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6997] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5073] unlink("./317/binderfs") = 0 [pid 5074] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6996] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6997] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6997] exit_group(0) = ? [pid 6996] <... write resumed>) = 524288 [pid 5076] mkdir("./314", 0777 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6996] munmap(0x7f943d000000, 138412032 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./317/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6997] +++ exited with 0 +++ [pid 5073] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6996] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 6996] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6997, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 6996] close(4 [pid 5074] newfstatat(AT_FDCWD, "./317/file1", [pid 5071] <... restart_syscall resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6996] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 5074] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5072] close(3 [pid 5071] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(3, "", [pid 5074] getdents64(4, [pid 5073] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 6998 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6998 attached [pid 6996] exit_group(0 [pid 5074] getdents64(4, [pid 5073] rmdir("./317/file1" [pid 5071] newfstatat(AT_FDCWD, "./318/binderfs", [pid 6996] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 6998] set_robust_list(0x555583d53660, 24 [pid 6996] +++ exited with 0 +++ [pid 5074] close(4 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6998] <... set_robust_list resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6996, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5071] unlink("./318/binderfs" [pid 5074] rmdir("./317/file1" [pid 6998] chdir("./317" [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./317" [pid 6998] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] close(3 [pid 5071] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6998] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] newfstatat(3, "", [pid 5073] <... close resumed>) = 0 [pid 6998] <... prctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6998] setpgid(0, 0 [pid 5075] getdents64(3, [pid 5074] mkdir("./318", 0777 [pid 5073] rmdir("./317" [pid 6998] <... setpgid resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./316/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6998] <... openat resumed>) = 3 [pid 5075] unlink("./316/binderfs" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] mkdir("./318", 0777 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 6998] write(3, "1000", 4) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6998] close(3 [pid 5075] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6998] <... close resumed>) = 0 [pid 6998] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6998] memfd_create("syzkaller", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6998] <... memfd_create resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 6998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./318/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./316/file1", [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = 0 [pid 5071] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 6999 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6999 attached [pid 6999] set_robust_list(0x555583d53660, 24) = 0 [pid 6999] chdir("./314" [pid 5075] getdents64(4, [pid 5071] <... openat resumed>) = 4 [pid 6999] <... chdir resumed>) = 0 [pid 6998] <... write resumed>) = 524288 [pid 6999] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6998] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] close(3 [pid 5073] close(3 [pid 5071] newfstatat(4, "", [pid 6999] <... prctl resumed>) = 0 [pid 6998] <... munmap resumed>) = 0 [pid 6999] setpgid(0, 0 [pid 6998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6999] <... setpgid resumed>) = 0 [pid 6998] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 6999] <... openat resumed>) = 3 [pid 6998] ioctl(4, LOOP_SET_FD, 3 [pid 6999] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] getdents64(4, [pid 6999] <... write resumed>) = 4 [pid 6999] close(3) = 0 [pid 6999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6999] memfd_create("syzkaller", 0) = 3 [pid 6999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 6999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7001 [pid 5071] getdents64(4, [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7000 ./strace-static-x86_64: Process 7001 attached ./strace-static-x86_64: Process 7000 attached [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7001] set_robust_list(0x555583d53660, 24 [pid 5071] <... close resumed>) = 0 [pid 7000] set_robust_list(0x555583d53660, 24 [pid 5071] rmdir("./318/file1" [pid 7001] <... set_robust_list resumed>) = 0 [pid 7000] <... set_robust_list resumed>) = 0 [pid 7001] chdir("./318") = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5075] rmdir("./316/file1" [pid 7000] chdir("./318" [pid 7001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7000] <... chdir resumed>) = 0 [pid 7001] <... prctl resumed>) = 0 [pid 7000] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7001] setpgid(0, 0 [pid 5071] close(3 [pid 7000] <... prctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./318" [pid 7000] setpgid(0, 0 [pid 7001] <... setpgid resumed>) = 0 [pid 6998] <... ioctl resumed>) = 0 [pid 5075] getdents64(3, [pid 7000] <... setpgid resumed>) = 0 [pid 7001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6998] close(3 [pid 7000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7001] <... openat resumed>) = 3 [pid 6998] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5071] mkdir("./319", 0777 [pid 7000] <... openat resumed>) = 3 [pid 7001] write(3, "1000", 4 [pid 6999] <... write resumed>) = 524288 [pid 6998] close(4 [pid 7000] write(3, "1000", 4 [pid 7001] <... write resumed>) = 4 [pid 7001] close(3 [pid 6998] <... close resumed>) = 0 [pid 7000] <... write resumed>) = 4 [pid 7001] <... close resumed>) = 0 [pid 6998] mkdir("./file1", 0777 [pid 7000] close(3 [pid 7001] symlink("/dev/binderfs", "./binderfs" [pid 7000] <... close resumed>) = 0 [pid 6998] <... mkdir resumed>) = 0 [pid 7000] symlink("/dev/binderfs", "./binderfs" [pid 7001] <... symlink resumed>) = 0 [pid 7000] <... symlink resumed>) = 0 [pid 7001] memfd_create("syzkaller", 0 [pid 7000] memfd_create("syzkaller", 0) = 3 [pid 7001] <... memfd_create resumed>) = 3 [pid 6998] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7000] <... mmap resumed>) = 0x7f943d000000 [pid 7001] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... close resumed>) = 0 [pid 7001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6999] munmap(0x7f943d000000, 138412032 [ 245.059854][ T6998] loop1: detected capacity change from 0 to 1024 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6999] <... munmap resumed>) = 0 [pid 5075] rmdir("./316" [pid 5071] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5075] mkdir("./317", 0777 [pid 6999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7001] <... write resumed>) = 524288 [pid 6999] <... openat resumed>) = 4 [pid 6998] <... mount resumed>) = 0 [pid 7001] munmap(0x7f943d000000, 138412032 [pid 6999] ioctl(4, LOOP_SET_FD, 3 [pid 6998] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 7001] <... munmap resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7000] <... write resumed>) = 524288 [pid 6999] <... ioctl resumed>) = 0 [pid 6998] <... openat resumed>) = 3 [pid 6998] chdir("./file1" [pid 7000] munmap(0x7f943d000000, 138412032 [pid 7001] <... openat resumed>) = 4 [pid 6999] close(3) = 0 [pid 6998] <... chdir resumed>) = 0 [pid 6999] close(4 [pid 6998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7001] ioctl(4, LOOP_SET_FD, 3 [pid 6999] <... close resumed>) = 0 [pid 6998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6999] mkdir("./file1", 0777 [pid 6998] truncate("./file1", 0 [pid 6999] <... mkdir resumed>) = 0 [pid 6998] <... truncate resumed>) = 0 [pid 7000] <... munmap resumed>) = 0 [pid 6999] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6998] memfd_create("syzkaller", 0) = 4 [pid 7000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7000] <... openat resumed>) = 4 [pid 6999] <... mount resumed>) = 0 [pid 6998] <... mmap resumed>) = 0x7f943d000000 [pid 6999] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6998] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6999] chdir("./file1" [pid 5071] <... ioctl resumed>) = 0 [pid 7000] ioctl(4, LOOP_SET_FD, 3 [pid 6999] <... chdir resumed>) = 0 [pid 6999] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6999] truncate("./file1", 0) = 0 [pid 6999] memfd_create("syzkaller", 0 [pid 5071] close(3 [pid 7001] <... ioctl resumed>) = 0 [pid 6999] <... memfd_create resumed>) = 4 [pid 6999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [ 245.138215][ T6999] loop5: detected capacity change from 0 to 1024 [ 245.154320][ T7001] loop2: detected capacity change from 0 to 1024 [pid 6999] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7000] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7001] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7001] <... close resumed>) = 0 [pid 7001] close(4 [pid 6998] <... write resumed>) = 524288 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7002 [pid 7001] <... close resumed>) = 0 [pid 7001] mkdir("./file1", 0777 [pid 5075] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7002 attached [pid 7001] <... mkdir resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7002] set_robust_list(0x555583d53660, 24 [pid 6998] munmap(0x7f943d000000, 138412032 [pid 7002] <... set_robust_list resumed>) = 0 [pid 7002] chdir("./319" [pid 6998] <... munmap resumed>) = 0 [pid 7002] <... chdir resumed>) = 0 [pid 7001] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7002] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 7003 attached ) = 0 [pid 7000] close(3 [pid 6998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7003 [pid 7003] set_robust_list(0x555583d53660, 24 [pid 7002] setpgid(0, 0 [pid 7000] <... close resumed>) = 0 [pid 6998] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7003] <... set_robust_list resumed>) = 0 [pid 7002] <... setpgid resumed>) = 0 [pid 7000] close(4 [pid 6998] close(4 [pid 7003] chdir("./317" [pid 7002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7000] <... close resumed>) = 0 [pid 6999] <... write resumed>) = 524288 [pid 6998] <... close resumed>) = 0 [pid 7002] <... openat resumed>) = 3 [pid 7000] mkdir("./file1", 0777 [pid 6999] munmap(0x7f943d000000, 138412032 [pid 7003] <... chdir resumed>) = 0 [pid 7000] <... mkdir resumed>) = 0 [pid 7003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7002] write(3, "1000", 4 [pid 7000] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 6999] <... munmap resumed>) = 0 [pid 7003] <... prctl resumed>) = 0 [pid 7003] setpgid(0, 0 [pid 7002] <... write resumed>) = 4 [pid 7000] <... mount resumed>) = 0 [pid 7001] <... mount resumed>) = 0 [pid 6999] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7003] <... setpgid resumed>) = 0 [pid 7002] close(3 [pid 7001] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6999] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7002] <... close resumed>) = 0 [pid 7000] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7003] <... openat resumed>) = 3 [pid 7002] symlink("/dev/binderfs", "./binderfs" [pid 7000] <... openat resumed>) = 3 [pid 7001] <... openat resumed>) = 3 [pid 6999] close(4 [pid 6998] exit_group(0 [pid 7003] write(3, "1000", 4 [pid 7002] <... symlink resumed>) = 0 [ 245.184132][ T7000] loop3: detected capacity change from 0 to 1024 [pid 7000] chdir("./file1" [pid 7001] chdir("./file1" [pid 6999] <... close resumed>) = 0 [pid 7003] <... write resumed>) = 4 [pid 7002] memfd_create("syzkaller", 0 [pid 7000] <... chdir resumed>) = 0 [pid 7001] <... chdir resumed>) = 0 [pid 6998] <... exit_group resumed>) = ? [pid 7003] close(3 [pid 7001] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7003] <... close resumed>) = 0 [pid 7003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7002] <... memfd_create resumed>) = 3 [pid 7000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7001] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6998] +++ exited with 0 +++ [pid 7003] memfd_create("syzkaller", 0 [pid 7002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7002] <... mmap resumed>) = 0x7f943d000000 [pid 7000] truncate("./file1", 0 [pid 7001] truncate("./file1", 0 [pid 7002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7000] <... truncate resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6998, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7003] <... memfd_create resumed>) = 3 [pid 7000] memfd_create("syzkaller", 0 [pid 6999] exit_group(0 [pid 7000] <... memfd_create resumed>) = 4 [pid 6999] <... exit_group resumed>) = ? [pid 7003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6999] +++ exited with 0 +++ [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7003] <... mmap resumed>) = 0x7f943d000000 [pid 7000] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6999, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7002] <... write resumed>) = 524288 [pid 7001] <... truncate resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7001] memfd_create("syzkaller", 0 [pid 5072] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7001] <... memfd_create resumed>) = 4 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7003] <... write resumed>) = 524288 [pid 7002] munmap(0x7f943d000000, 138412032 [pid 7001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... openat resumed>) = 3 [pid 7002] <... munmap resumed>) = 0 [pid 7001] <... mmap resumed>) = 0x7f943d000000 [pid 5072] newfstatat(3, "", [pid 5076] umount2("./314", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7002] ioctl(4, LOOP_SET_FD, 3 [pid 7001] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7003] munmap(0x7f943d000000, 138412032 [pid 7000] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "./314", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 5076] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(3, "", [pid 5072] newfstatat(AT_FDCWD, "./317/binderfs", [pid 7000] munmap(0x7f943d000000, 138412032 [pid 7003] <... munmap resumed>) = 0 [pid 7000] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./317/binderfs" [pid 5076] getdents64(3, [pid 7000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... unlink resumed>) = 0 [pid 7003] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7000] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./314/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] <... openat resumed>) = 4 [pid 7002] <... ioctl resumed>) = 0 [pid 7000] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7003] ioctl(4, LOOP_SET_FD, 3 [pid 7002] close(3) = 0 [pid 7002] close(4 [pid 5072] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7002] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./314/binderfs", [pid 7002] mkdir("./file1", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7002] <... mkdir resumed>) = 0 [pid 5076] unlink("./314/binderfs" [pid 7002] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7000] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7000] exit_group(0 [pid 5076] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7000] <... exit_group resumed>) = ? [pid 7000] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7000, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7003] <... ioctl resumed>) = 0 [pid 7001] <... write resumed>) = 524288 [pid 5074] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] close(3 [pid 7002] <... mount resumed>) = 0 [pid 7001] munmap(0x7f943d000000, 138412032 [pid 5072] <... umount2 resumed>) = 0 [pid 7003] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7001] <... munmap resumed>) = 0 [pid 7002] <... openat resumed>) = 3 [pid 7002] chdir("./file1") = 0 [pid 7002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7001] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7002] truncate("./file1", 0 [pid 7001] close(4 [pid 7003] close(4 [pid 5074] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] <... close resumed>) = 0 [ 245.295583][ T7002] loop0: detected capacity change from 0 to 1024 [ 245.320770][ T7003] loop4: detected capacity change from 0 to 1024 [pid 5074] <... openat resumed>) = 3 [pid 7003] mkdir("./file1", 0777 [pid 7002] <... truncate resumed>) = 0 [pid 7001] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7002] memfd_create("syzkaller", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7003] <... mkdir resumed>) = 0 [pid 7002] <... memfd_create resumed>) = 4 [pid 5076] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./317/file1", [pid 7002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7002] <... mmap resumed>) = 0x7f943d000000 [pid 5076] newfstatat(AT_FDCWD, "./314/file1", [pid 5074] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7002] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7001] exit_group(0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./318/binderfs", [pid 7001] <... exit_group resumed>) = ? [pid 5076] umount2("./314/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7001] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./318/binderfs" [pid 5072] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./314/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7001, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] newfstatat(4, "", [pid 5074] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5073] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7002] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(3, "", [pid 7003] <... mount resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 7003] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] getdents64(4, [pid 5076] getdents64(4, [pid 5073] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7003] <... openat resumed>) = 3 [pid 7003] chdir("./file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7003] <... chdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./318/binderfs", [pid 7003] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(4 [pid 7003] truncate("./file1", 0 [pid 5076] getdents64(4, [pid 5073] unlink("./318/binderfs" [pid 5072] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] rmdir("./317/file1" [pid 7003] <... truncate resumed>) = 0 [pid 5076] close(4 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 7003] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 7002] munmap(0x7f943d000000, 138412032 [pid 5074] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 7003] <... memfd_create resumed>) = 4 [pid 5076] rmdir("./314/file1" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7002] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./318/file1", [pid 5072] close(3 [pid 7003] <... mmap resumed>) = 0x7f943d000000 [pid 7002] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 7003] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7002] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] close(3 [pid 5072] rmdir("./317" [pid 7002] close(4 [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] rmdir("./314") = 0 [pid 5072] mkdir("./318", 0777 [pid 5076] mkdir("./315", 0777 [pid 5072] <... mkdir resumed>) = 0 [pid 7002] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7003] <... write resumed>) = 524288 [pid 7002] exit_group(0 [pid 5074] getdents64(4, [pid 5073] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7003] munmap(0x7f943d000000, 138412032 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./318/file1", [pid 7002] <... exit_group resumed>) = ? [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7003] <... munmap resumed>) = 0 [pid 7002] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7002, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7003] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] rmdir("./318/file1" [pid 5073] <... openat resumed>) = 4 [pid 7003] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7003] close(4 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5071] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5071] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5071] newfstatat(3, "", [pid 5074] rmdir("./318" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] close(4 [pid 7003] <... close resumed>) = 0 [pid 5074] mkdir("./319", 0777 [pid 5073] <... close resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] getdents64(3, [pid 5074] <... mkdir resumed>) = 0 [pid 5073] rmdir("./318/file1" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 5071] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(AT_FDCWD, "./319/binderfs", [pid 7003] exit_group(0 [pid 5076] <... ioctl resumed>) = 0 [pid 7003] <... exit_group resumed>) = ? [pid 5073] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./319/binderfs" [pid 7003] +++ exited with 0 +++ [pid 5073] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5073] rmdir("./318" [pid 5071] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7003, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... rmdir resumed>) = 0 [pid 5072] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3./strace-static-x86_64: Process 7004 attached [pid 5073] mkdir("./319", 0777 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7004 [pid 7004] set_robust_list(0x555583d53660, 24 [pid 5076] <... close resumed>) = 0 [pid 5071] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] <... set_robust_list resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] chdir("./318" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./319/file1", [pid 5075] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7004] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(3, "", [pid 7004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7004] <... prctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7004] setpgid(0, 0 [pid 5071] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7004] <... setpgid resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 7004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] getdents64(3, [pid 5071] newfstatat(4, "", ./strace-static-x86_64: Process 7005 attached [pid 7004] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7005 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7004] write(3, "1000", 4 [pid 5075] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 7004] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(AT_FDCWD, "./317/binderfs", [pid 7005] set_robust_list(0x555583d53660, 24 [pid 7004] close(3 [pid 5071] getdents64(4, [pid 7004] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7004] symlink("/dev/binderfs", "./binderfs" [pid 5071] close(4 [pid 7005] <... set_robust_list resumed>) = 0 [pid 7004] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 7005] chdir("./315" [pid 5075] unlink("./317/binderfs" [pid 7005] <... chdir resumed>) = 0 [pid 7004] memfd_create("syzkaller", 0 [pid 5071] rmdir("./319/file1" [pid 7005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... unlink resumed>) = 0 [pid 7005] <... prctl resumed>) = 0 [pid 5075] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 7005] setpgid(0, 0 [pid 7004] <... memfd_create resumed>) = 3 [pid 7004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] getdents64(3, [pid 7005] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3) = 0 [pid 5071] rmdir("./319") = 0 [pid 7005] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 5075] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7005] write(3, "1000", 4 [pid 7004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] mkdir("./320", 0777 [pid 7005] <... write resumed>) = 4 [pid 7004] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(3 [pid 7005] close(3./strace-static-x86_64: Process 7006 attached ) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7005] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7006 [pid 5073] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./317/file1", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7005] <... symlink resumed>) = 0 [pid 7006] set_robust_list(0x555583d53660, 24 [pid 7005] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7007 [pid 7006] <... set_robust_list resumed>) = 0 [pid 7005] <... memfd_create resumed>) = 3 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7006] chdir("./319" [pid 7005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7006] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7007 attached [pid 7006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7005] <... mmap resumed>) = 0x7f943d000000 [pid 5075] getdents64(4, [pid 7007] set_robust_list(0x555583d53660, 24 [pid 7006] <... prctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7007] <... set_robust_list resumed>) = 0 [pid 5075] getdents64(4, [pid 7007] chdir("./319" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7006] setpgid(0, 0 [pid 7005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(4 [pid 7007] <... chdir resumed>) = 0 [pid 7006] <... setpgid resumed>) = 0 [pid 7004] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 7007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7007] <... prctl resumed>) = 0 [pid 7006] <... openat resumed>) = 3 [pid 7004] <... munmap resumed>) = 0 [pid 7007] setpgid(0, 0 [pid 7006] write(3, "1000", 4 [pid 7007] <... setpgid resumed>) = 0 [pid 7006] <... write resumed>) = 4 [pid 7007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7006] close(3 [pid 7004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] rmdir("./317/file1" [pid 7006] <... close resumed>) = 0 [pid 7006] symlink("/dev/binderfs", "./binderfs" [pid 7007] <... openat resumed>) = 3 [pid 7004] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 7005] <... write resumed>) = 524288 [pid 7004] ioctl(4, LOOP_SET_FD, 3 [pid 7006] <... symlink resumed>) = 0 [pid 7005] munmap(0x7f943d000000, 138412032 [pid 5071] <... ioctl resumed>) = 0 [pid 7007] write(3, "1000", 4 [pid 5075] getdents64(3, [pid 7006] memfd_create("syzkaller", 0 [pid 7007] <... write resumed>) = 4 [pid 7006] <... memfd_create resumed>) = 3 [pid 7005] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 7007] close(3 [pid 7006] <... mmap resumed>) = 0x7f943d000000 [pid 7005] <... openat resumed>) = 4 [pid 5075] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 7007] <... close resumed>) = 0 [pid 5075] rmdir("./317" [pid 7007] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 7007] <... symlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7008 ./strace-static-x86_64: Process 7008 attached [pid 7007] memfd_create("syzkaller", 0 [pid 5075] mkdir("./318", 0777 [pid 7005] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... mkdir resumed>) = 0 [pid 7007] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7007] <... mmap resumed>) = 0x7f943d000000 [pid 7008] set_robust_list(0x555583d53660, 24) = 0 [pid 7007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7008] chdir("./320" [pid 7004] <... ioctl resumed>) = 0 [pid 7004] close(3) = 0 [pid 7004] close(4) = 0 [pid 7004] mkdir("./file1", 0777) = 0 [pid 7004] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7008] <... chdir resumed>) = 0 [pid 7006] <... write resumed>) = 524288 [pid 7008] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7008] setpgid(0, 0) = 0 [pid 7008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7008] write(3, "1000", 4 [pid 7007] <... write resumed>) = 524288 [pid 7005] <... ioctl resumed>) = 0 [pid 7008] <... write resumed>) = 4 [pid 7008] close(3 [pid 7005] close(3 [pid 7008] <... close resumed>) = 0 [pid 7006] munmap(0x7f943d000000, 138412032 [pid 7005] <... close resumed>) = 0 [pid 7008] symlink("/dev/binderfs", "./binderfs" [pid 7005] close(4 [pid 7008] <... symlink resumed>) = 0 [pid 7006] <... munmap resumed>) = 0 [pid 7005] <... close resumed>) = 0 [pid 7004] <... mount resumed>) = 0 [pid 7005] mkdir("./file1", 0777 [pid 7004] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7008] memfd_create("syzkaller", 0 [pid 7004] <... openat resumed>) = 3 [pid 7004] chdir("./file1" [pid 7008] <... memfd_create resumed>) = 3 [ 245.625433][ T7004] loop1: detected capacity change from 0 to 1024 [ 245.641077][ T7005] loop5: detected capacity change from 0 to 1024 [pid 7006] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7005] <... mkdir resumed>) = 0 [pid 7004] <... chdir resumed>) = 0 [pid 7008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7007] munmap(0x7f943d000000, 138412032 [pid 7006] <... openat resumed>) = 4 [pid 7005] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7008] <... mmap resumed>) = 0x7f943d000000 [pid 7006] ioctl(4, LOOP_SET_FD, 3 [pid 7008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7007] <... munmap resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 7004] truncate("./file1", 0 [pid 7007] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7007] ioctl(4, LOOP_SET_FD, 3 [pid 7004] <... truncate resumed>) = 0 [pid 7004] memfd_create("syzkaller", 0 [pid 5075] close(3) = 0 [pid 7004] <... memfd_create resumed>) = 4 [pid 7004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7008] <... write resumed>) = 524288 [pid 7005] <... mount resumed>) = 0 [pid 7004] <... mmap resumed>) = 0x7f943d000000 [pid 7005] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7005] chdir("./file1") = 0 [pid 7005] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7005] truncate("./file1", 0 [pid 7006] <... ioctl resumed>) = 0 [pid 7006] close(3) = 0 [pid 7006] close(4) = 0 [pid 7006] mkdir("./file1", 0777) = 0 [pid 7008] munmap(0x7f943d000000, 138412032 [pid 7004] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7006] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7007] <... ioctl resumed>) = 0 [pid 7008] <... munmap resumed>) = 0 [ 245.691477][ T7006] loop3: detected capacity change from 0 to 1024 [ 245.708090][ T7007] loop2: detected capacity change from 0 to 1024 [pid 7007] close(3./strace-static-x86_64: Process 7009 attached [pid 7008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7007] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7009 [pid 7009] set_robust_list(0x555583d53660, 24 [pid 7008] <... openat resumed>) = 4 [pid 7007] close(4 [pid 7005] <... truncate resumed>) = 0 [pid 7009] <... set_robust_list resumed>) = 0 [pid 7008] ioctl(4, LOOP_SET_FD, 3 [pid 7007] <... close resumed>) = 0 [pid 7005] memfd_create("syzkaller", 0 [pid 7009] chdir("./318") = 0 [pid 7007] mkdir("./file1", 0777 [pid 7009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7005] <... memfd_create resumed>) = 4 [pid 7009] <... prctl resumed>) = 0 [pid 7005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7005] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7009] setpgid(0, 0 [pid 7007] <... mkdir resumed>) = 0 [pid 7009] <... setpgid resumed>) = 0 [pid 7009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7009] write(3, "1000", 4) = 4 [pid 7009] close(3) = 0 [pid 7007] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7009] symlink("/dev/binderfs", "./binderfs" [pid 7006] <... mount resumed>) = 0 [pid 7009] <... symlink resumed>) = 0 [pid 7009] memfd_create("syzkaller", 0) = 3 [pid 7009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7006] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7009] <... mmap resumed>) = 0x7f943d000000 [pid 7008] <... ioctl resumed>) = 0 [pid 7006] <... openat resumed>) = 3 [pid 7009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7008] close(3 [pid 7007] <... mount resumed>) = 0 [pid 7006] chdir("./file1" [pid 7004] <... write resumed>) = 524288 [pid 7008] <... close resumed>) = 0 [pid 7007] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7006] <... chdir resumed>) = 0 [pid 7005] <... write resumed>) = 524288 [pid 7004] munmap(0x7f943d000000, 138412032 [pid 7008] close(4 [pid 7007] <... openat resumed>) = 3 [pid 7006] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7008] <... close resumed>) = 0 [pid 7007] chdir("./file1" [pid 7006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7007] <... chdir resumed>) = 0 [pid 7006] truncate("./file1", 0 [pid 7007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7008] mkdir("./file1", 0777 [pid 7007] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7004] <... munmap resumed>) = 0 [pid 7008] <... mkdir resumed>) = 0 [pid 7007] truncate("./file1", 0 [pid 7008] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [ 245.733680][ T7008] loop0: detected capacity change from 0 to 1024 [pid 7004] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7009] <... write resumed>) = 524288 [pid 7006] <... truncate resumed>) = 0 [pid 7004] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7004] close(4 [pid 7007] <... truncate resumed>) = 0 [pid 7006] memfd_create("syzkaller", 0 [pid 7005] munmap(0x7f943d000000, 138412032 [pid 7006] <... memfd_create resumed>) = 4 [pid 7005] <... munmap resumed>) = 0 [pid 7007] memfd_create("syzkaller", 0 [pid 7006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7005] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7007] <... memfd_create resumed>) = 4 [pid 7006] <... mmap resumed>) = 0x7f943d000000 [pid 7005] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7005] close(4 [pid 7007] <... mmap resumed>) = 0x7f943d000000 [pid 7005] <... close resumed>) = 0 [pid 7008] <... mount resumed>) = 0 [pid 7008] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7006] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7008] <... openat resumed>) = 3 [pid 7008] chdir("./file1") = 0 [pid 7009] munmap(0x7f943d000000, 138412032 [pid 7008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7007] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7004] <... close resumed>) = 0 [pid 7009] <... munmap resumed>) = 0 [pid 7008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7008] truncate("./file1", 0 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7004] exit_group(0 [pid 7009] <... openat resumed>) = 4 [pid 7008] <... truncate resumed>) = 0 [pid 7005] exit_group(0 [pid 7004] <... exit_group resumed>) = ? [pid 7009] ioctl(4, LOOP_SET_FD, 3 [pid 7008] memfd_create("syzkaller", 0) = 4 [pid 7007] <... write resumed>) = 524288 [pid 7005] <... exit_group resumed>) = ? [pid 7006] <... write resumed>) = 524288 [pid 7005] +++ exited with 0 +++ [pid 7004] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7004, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7008] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7006] munmap(0x7f943d000000, 138412032 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7005, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./315", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", [pid 7006] <... munmap resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7009] <... ioctl resumed>) = 0 [pid 7006] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7009] close(3 [pid 7006] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./315", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] <... close resumed>) = 0 [pid 7006] close(4 [pid 5076] <... openat resumed>) = 3 [pid 7009] close(4 [pid 7007] munmap(0x7f943d000000, 138412032 [pid 5076] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(AT_FDCWD, "./318/binderfs", [pid 7009] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] mkdir("./file1", 0777) = 0 [pid 7006] <... close resumed>) = 0 [pid 7009] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7007] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5072] unlink("./318/binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7009] <... mount resumed>) = 0 [pid 7007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./315/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7007] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7009] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7008] <... write resumed>) = 524288 [pid 7007] close(4 [pid 5076] newfstatat(AT_FDCWD, "./315/binderfs", [pid 7009] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] chdir("./file1" [pid 7006] exit_group(0 [pid 5072] <... umount2 resumed>) = 0 [pid 7009] <... chdir resumed>) = 0 [pid 7008] munmap(0x7f943d000000, 138412032 [pid 7006] <... exit_group resumed>) = ? [ 245.825234][ T7009] loop4: detected capacity change from 0 to 1024 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7008] <... munmap resumed>) = 0 [pid 7006] +++ exited with 0 +++ [pid 7009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7006, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7009] truncate("./file1", 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7008] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(3, [pid 5072] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7008] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7008] close(4 [pid 5074] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./315/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./319/binderfs", [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] <... truncate resumed>) = 0 [pid 7007] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./318/file1", [pid 7009] memfd_create("syzkaller", 0 [pid 7007] exit_group(0 [pid 5076] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] unlink("./319/binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] <... memfd_create resumed>) = 4 [pid 7007] <... exit_group resumed>) = ? [pid 7009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7008] <... close resumed>) = 0 [pid 7007] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 5072] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7007, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7009] <... mmap resumed>) = 0x7f943d000000 [pid 7008] exit_group(0 [pid 5074] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... restart_syscall resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7009] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7008] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5073] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(4, "", [pid 7008] +++ exited with 0 +++ [pid 5076] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./319/binderfs", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(AT_FDCWD, "./315/file1", [pid 5073] unlink("./319/binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] umount2("./315/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./315/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7008, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, [pid 5071] <... restart_syscall resumed>) = 0 [pid 5076] close(4) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./315/file1" [pid 5072] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./318/file1" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] close(3) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5074] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5076] rmdir("./315" [pid 5073] newfstatat(AT_FDCWD, "./319/file1", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(3 [pid 5071] getdents64(3, [pid 5073] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7009] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] rmdir("./318" [pid 5071] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] munmap(0x7f943d000000, 138412032 [pid 5074] newfstatat(AT_FDCWD, "./319/file1", [pid 5073] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] mkdir("./316", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./320/binderfs", [pid 7009] <... munmap resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] mkdir("./319", 0777 [pid 7009] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7009] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 5071] unlink("./320/binderfs" [pid 7009] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5073] close(4 [pid 5071] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./319/file1" [pid 5074] newfstatat(4, "", [pid 5073] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5073] close(3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] close(4 [pid 5073] rmdir("./319" [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./319/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./320", 0777 [pid 7009] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7009] exit_group(0 [pid 5074] getdents64(3, [pid 5073] <... mkdir resumed>) = 0 [pid 5071] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7009] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7009] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7009, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./320/file1", [pid 5074] rmdir("./319" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", [pid 5075] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] mkdir("./320", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 5076] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5071] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./320/file1" [pid 5074] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./318/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7010 attached [pid 5072] close(3 [pid 5071] getdents64(3, [pid 7010] set_robust_list(0x555583d53660, 24 [pid 5075] unlink("./318/binderfs" [pid 7010] <... set_robust_list resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7010] chdir("./316" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7010 [pid 5075] <... unlink resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7010] <... chdir resumed>) = 0 [pid 5071] close(3) = 0 [pid 7010] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 7011 attached ) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7011 [pid 7011] set_robust_list(0x555583d53660, 24 [pid 7010] setpgid(0, 0 [pid 5075] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./320" [pid 7011] <... set_robust_list resumed>) = 0 [pid 7010] <... setpgid resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7011] chdir("./319" [pid 5071] mkdir("./321", 0777 [pid 7011] <... chdir resumed>) = 0 [pid 7010] <... openat resumed>) = 3 [pid 7010] write(3, "1000", 4) = 4 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7010] close(3 [pid 5075] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7011] setpgid(0, 0 [pid 7010] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7011] <... setpgid resumed>) = 0 [pid 7010] symlink("/dev/binderfs", "./binderfs" [pid 5075] newfstatat(AT_FDCWD, "./318/file1", [pid 7011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7010] <... symlink resumed>) = 0 [pid 5075] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7011] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7011] write(3, "1000", 4) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 7011] close(3 [pid 7010] memfd_create("syzkaller", 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7011] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 7011] symlink("/dev/binderfs", "./binderfs" [pid 7010] <... memfd_create resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7011] <... symlink resumed>) = 0 [pid 7010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(4, [pid 5074] close(3 [pid 5073] close(3 [pid 7010] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7012 [pid 5075] close(4 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7013 ./strace-static-x86_64: Process 7012 attached [pid 7012] set_robust_list(0x555583d53660, 24./strace-static-x86_64: Process 7013 attached ) = 0 [pid 7011] memfd_create("syzkaller", 0 [pid 7010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... close resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7013] set_robust_list(0x555583d53660, 24 [pid 7011] <... memfd_create resumed>) = 3 [pid 5075] rmdir("./318/file1" [pid 7012] chdir("./320") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7013] <... set_robust_list resumed>) = 0 [pid 7012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 7013] chdir("./320" [pid 7012] <... prctl resumed>) = 0 [pid 7011] <... mmap resumed>) = 0x7f943d000000 [pid 7012] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7013] <... chdir resumed>) = 0 [pid 7012] <... setpgid resumed>) = 0 [pid 7011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(3 [pid 7012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3) = 0 [pid 5075] <... close resumed>) = 0 [pid 7013] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] rmdir("./318" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7012] <... openat resumed>) = 3 [pid 7012] write(3, "1000", 4) = 4 [pid 7012] close(3) = 0 [pid 7012] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7013] <... prctl resumed>) = 0 [pid 7012] memfd_create("syzkaller", 0) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7014 [pid 7012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7014 attached [pid 7014] set_robust_list(0x555583d53660, 24) = 0 [pid 7013] setpgid(0, 0 [pid 5075] mkdir("./319", 0777 [pid 7010] <... write resumed>) = 524288 [pid 7014] chdir("./321" [pid 7013] <... setpgid resumed>) = 0 [pid 7012] <... write resumed>) = 524288 [pid 7011] <... write resumed>) = 524288 [pid 7014] <... chdir resumed>) = 0 [pid 7010] munmap(0x7f943d000000, 138412032 [pid 5075] <... mkdir resumed>) = 0 [pid 7013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7014] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7013] <... openat resumed>) = 3 [pid 7010] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7014] <... prctl resumed>) = 0 [pid 7013] write(3, "1000", 4 [pid 7010] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7014] setpgid(0, 0 [pid 7013] <... write resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 7014] <... setpgid resumed>) = 0 [pid 7013] close(3 [pid 7010] <... openat resumed>) = 4 [pid 7014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7013] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7014] <... openat resumed>) = 3 [pid 7013] symlink("/dev/binderfs", "./binderfs" [pid 7010] ioctl(4, LOOP_SET_FD, 3 [pid 7013] <... symlink resumed>) = 0 [pid 7014] write(3, "1000", 4) = 4 [pid 7014] close(3) = 0 [pid 7014] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7014] memfd_create("syzkaller", 0 [pid 7012] munmap(0x7f943d000000, 138412032 [pid 7013] memfd_create("syzkaller", 0 [pid 7014] <... memfd_create resumed>) = 3 [pid 7014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7013] <... memfd_create resumed>) = 3 [pid 7012] <... munmap resumed>) = 0 [pid 7011] munmap(0x7f943d000000, 138412032 [pid 7014] <... mmap resumed>) = 0x7f943d000000 [pid 7014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7011] <... munmap resumed>) = 0 [pid 7010] <... ioctl resumed>) = 0 [pid 7013] <... mmap resumed>) = 0x7f943d000000 [pid 7011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7010] close(3 [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7011] <... openat resumed>) = 4 [pid 7010] <... close resumed>) = 0 [pid 7012] <... openat resumed>) = 4 [pid 7011] ioctl(4, LOOP_SET_FD, 3 [pid 7010] close(4 [pid 7012] ioctl(4, LOOP_SET_FD, 3 [pid 7010] <... close resumed>) = 0 [pid 7010] mkdir("./file1", 0777 [pid 7011] <... ioctl resumed>) = 0 [pid 7012] <... ioctl resumed>) = 0 [pid 7014] <... write resumed>) = 524288 [pid 7013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7010] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 7012] close(3 [pid 7011] close(3 [pid 7010] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] close(3 [pid 7014] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 7014] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7012] <... close resumed>) = 0 [pid 7012] close(4 [pid 7014] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7012] <... close resumed>) = 0 ./strace-static-x86_64: Process 7015 attached [pid 7014] <... openat resumed>) = 4 [pid 7012] mkdir("./file1", 0777 [pid 7011] <... close resumed>) = 0 [ 246.161044][ T7010] loop5: detected capacity change from 0 to 1024 [ 246.186930][ T7012] loop3: detected capacity change from 0 to 1024 [ 246.194394][ T7011] loop1: detected capacity change from 0 to 1024 [pid 7015] set_robust_list(0x555583d53660, 24 [pid 7014] ioctl(4, LOOP_SET_FD, 3 [pid 7012] <... mkdir resumed>) = 0 [pid 7011] close(4 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7015 [pid 7015] <... set_robust_list resumed>) = 0 [pid 7014] <... ioctl resumed>) = 0 [pid 7012] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7015] chdir("./319") = 0 [pid 7015] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7011] <... close resumed>) = 0 [pid 7015] <... prctl resumed>) = 0 [pid 7013] <... write resumed>) = 524288 [pid 7011] mkdir("./file1", 0777 [pid 7015] setpgid(0, 0) = 0 [pid 7015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7011] <... mkdir resumed>) = 0 [pid 7015] <... openat resumed>) = 3 [pid 7015] write(3, "1000", 4 [pid 7013] munmap(0x7f943d000000, 138412032 [pid 7011] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7015] <... write resumed>) = 4 [pid 7015] close(3) = 0 [pid 7015] symlink("/dev/binderfs", "./binderfs" [pid 7013] <... munmap resumed>) = 0 [pid 7010] <... mount resumed>) = 0 [pid 7015] <... symlink resumed>) = 0 [pid 7012] <... mount resumed>) = 0 [pid 7010] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7010] <... openat resumed>) = 3 [pid 7012] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7015] memfd_create("syzkaller", 0 [pid 7013] <... openat resumed>) = 4 [pid 7012] <... openat resumed>) = 3 [pid 7010] chdir("./file1" [pid 7015] <... memfd_create resumed>) = 3 [pid 7014] close(3 [pid 7013] ioctl(4, LOOP_SET_FD, 3 [pid 7012] chdir("./file1" [pid 7010] <... chdir resumed>) = 0 [pid 7015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7014] <... close resumed>) = 0 [ 246.234304][ T7014] loop0: detected capacity change from 0 to 1024 [pid 7015] <... mmap resumed>) = 0x7f943d000000 [pid 7014] close(4 [pid 7012] <... chdir resumed>) = 0 [pid 7010] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7015] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7014] <... close resumed>) = 0 [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7014] mkdir("./file1", 0777 [pid 7012] truncate("./file1", 0 [pid 7010] truncate("./file1", 0 [pid 7014] <... mkdir resumed>) = 0 [pid 7014] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7012] <... truncate resumed>) = 0 [pid 7011] <... mount resumed>) = 0 [pid 7012] memfd_create("syzkaller", 0) = 4 [pid 7012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7011] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7010] <... truncate resumed>) = 0 [pid 7012] <... mmap resumed>) = 0x7f943d000000 [pid 7010] memfd_create("syzkaller", 0 [pid 7012] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7011] <... openat resumed>) = 3 [pid 7010] <... memfd_create resumed>) = 4 [pid 7013] <... ioctl resumed>) = 0 [pid 7010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7015] <... write resumed>) = 524288 [pid 7013] close(3 [pid 7011] chdir("./file1" [pid 7010] <... mmap resumed>) = 0x7f943d000000 [pid 7013] <... close resumed>) = 0 [pid 7011] <... chdir resumed>) = 0 [pid 7013] close(4 [pid 7011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7015] munmap(0x7f943d000000, 138412032 [pid 7014] <... mount resumed>) = 0 [pid 7013] <... close resumed>) = 0 [pid 7011] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7014] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7011] truncate("./file1", 0 [pid 7014] <... openat resumed>) = 3 [pid 7015] <... munmap resumed>) = 0 [pid 7014] chdir("./file1") = 0 [pid 7013] mkdir("./file1", 0777 [pid 7010] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7015] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7014] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7013] <... mkdir resumed>) = 0 [pid 7012] <... write resumed>) = 524288 [pid 7015] <... openat resumed>) = 4 [pid 7014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 246.274872][ T7013] loop2: detected capacity change from 0 to 1024 [pid 7013] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7014] truncate("./file1", 0 [pid 7015] ioctl(4, LOOP_SET_FD, 3 [pid 7011] <... truncate resumed>) = 0 [pid 7011] memfd_create("syzkaller", 0) = 4 [pid 7010] <... write resumed>) = 524288 [pid 7014] <... truncate resumed>) = 0 [pid 7012] munmap(0x7f943d000000, 138412032 [pid 7011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7014] memfd_create("syzkaller", 0 [pid 7012] <... munmap resumed>) = 0 [pid 7011] <... mmap resumed>) = 0x7f943d000000 [pid 7014] <... memfd_create resumed>) = 4 [pid 7012] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7012] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7014] <... mmap resumed>) = 0x7f943d000000 [pid 7012] close(4 [pid 7011] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7013] <... mount resumed>) = 0 [pid 7013] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7013] chdir("./file1" [pid 7010] munmap(0x7f943d000000, 138412032 [pid 7013] <... chdir resumed>) = 0 [pid 7012] <... close resumed>) = 0 [pid 7014] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7011] <... write resumed>) = 524288 [pid 7010] <... munmap resumed>) = 0 [pid 7015] <... ioctl resumed>) = 0 [pid 7013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7012] exit_group(0 [pid 7015] close(3 [pid 7013] truncate("./file1", 0 [pid 7012] <... exit_group resumed>) = ? [pid 7012] +++ exited with 0 +++ [pid 7010] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7012, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7015] <... close resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7015] close(4 [pid 5074] <... restart_syscall resumed>) = 0 [pid 7015] <... close resumed>) = 0 [pid 7011] munmap(0x7f943d000000, 138412032 [pid 7010] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7015] mkdir("./file1", 0777) = 0 [pid 7010] close(4 [pid 7015] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7011] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7013] <... truncate resumed>) = 0 [pid 7011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 7014] <... write resumed>) = 524288 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7014] munmap(0x7f943d000000, 138412032 [pid 7013] memfd_create("syzkaller", 0 [pid 7011] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 246.340575][ T7015] loop4: detected capacity change from 0 to 1024 [pid 5074] getdents64(3, [pid 7014] <... munmap resumed>) = 0 [pid 7013] <... memfd_create resumed>) = 4 [pid 7011] close(4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7015] <... mount resumed>) = 0 [pid 7013] <... mmap resumed>) = 0x7f943d000000 [pid 5074] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7015] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7014] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7010] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7015] <... openat resumed>) = 3 [pid 7014] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./320/binderfs", [pid 7015] chdir("./file1") = 0 [pid 7014] close(4 [pid 7015] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7014] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7013] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7011] <... close resumed>) = 0 [pid 7010] exit_group(0 [pid 7015] truncate("./file1", 0 [pid 5074] unlink("./320/binderfs" [pid 7010] <... exit_group resumed>) = ? [pid 5074] <... unlink resumed>) = 0 [pid 7014] exit_group(0 [pid 5074] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7014] <... exit_group resumed>) = ? [pid 7011] exit_group(0 [pid 7010] +++ exited with 0 +++ [pid 7015] <... truncate resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7010, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7015] memfd_create("syzkaller", 0) = 4 [pid 7011] <... exit_group resumed>) = ? [pid 7015] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7011] +++ exited with 0 +++ [pid 5076] umount2("./316", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7014] +++ exited with 0 +++ [pid 7013] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 7015] <... mmap resumed>) = 0x7f943d000000 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7011, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7014, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(3, "", [pid 5071] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 7013] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "./316", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(3, "", [pid 7013] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./320/file1", [pid 5072] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(3, "", [pid 5071] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7015] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5074] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./319/binderfs", [pid 5071] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] unlink("./319/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7013] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5072] <... unlink resumed>) = 0 [pid 7013] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 4 [pid 5072] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7013] close(4 [pid 5074] newfstatat(4, "", [pid 5071] unlink("./321/binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] getdents64(4, [pid 5076] umount2("./316/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./316/binderfs", [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4 [pid 5076] unlink("./316/binderfs" [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./320/file1") = 0 [pid 5072] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7013] <... close resumed>) = 0 [pid 5074] close(3) = 0 [pid 5072] newfstatat(AT_FDCWD, "./319/file1", [pid 7013] exit_group(0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] rmdir("./320" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7013] <... exit_group resumed>) = ? [pid 5074] <... rmdir resumed>) = 0 [pid 5072] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] mkdir("./321", 0777 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7015] <... write resumed>) = 524288 [pid 7013] +++ exited with 0 +++ [pid 5076] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7013, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5072] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./321/file1", [pid 5073] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(4, "", [pid 5071] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] getdents64(4, [pid 5071] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... openat resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] getdents64(4, [pid 5071] newfstatat(4, "", [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(4 [pid 5071] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./319/file1" [pid 5071] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 7015] munmap(0x7f943d000000, 138412032 [pid 5073] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7015] <... munmap resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./321/file1") = 0 [pid 5074] <... close resumed>) = 0 [pid 7015] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] getdents64(3, [pid 5071] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7015] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(3 [pid 5071] close(3 [pid 7015] close(4 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5072] rmdir("./319" [pid 5071] rmdir("./321" [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5072] mkdir("./320", 0777 [pid 5071] mkdir("./322", 0777 [pid 7015] <... close resumed>) = 0 [pid 5076] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7016 [pid 5073] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7016 attached [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7016] set_robust_list(0x555583d53660, 24 [pid 5076] newfstatat(AT_FDCWD, "./316/file1", [pid 5073] unlink("./320/binderfs" [pid 5071] <... openat resumed>) = 3 [pid 7016] <... set_robust_list resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7016] chdir("./321" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7016] <... chdir resumed>) = 0 [pid 5076] umount2("./316/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 7016] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7016] <... prctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./316/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7016] setpgid(0, 0) = 0 [pid 7016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7015] exit_group(0 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5073] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 7016] write(3, "1000", 4 [pid 7015] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(AT_FDCWD, "./320/file1", [pid 5076] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7016] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7016] close(3 [pid 5076] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7016] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7016] symlink("/dev/binderfs", "./binderfs" [pid 5076] rmdir("./316/file1" [pid 5073] <... openat resumed>) = 4 [pid 7016] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7015] +++ exited with 0 +++ [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7016] memfd_create("syzkaller", 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7015, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7016] <... memfd_create resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 7016] <... mmap resumed>) = 0x7f943d000000 [pid 5076] close(3 [pid 5075] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] close(4 [pid 5075] newfstatat(3, "", [pid 5073] <... close resumed>) = 0 [pid 5076] rmdir("./316" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] rmdir("./320/file1" [pid 7016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5076] mkdir("./317", 0777 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./319/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 5075] unlink("./319/binderfs" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] rmdir("./320" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./321", 0777 [pid 7016] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7016] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... mkdir resumed>) = 0 [pid 5072] close(3 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7016] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./319/file1", [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7017 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 7018 attached ./strace-static-x86_64: Process 7017 attached [pid 7016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7017] set_robust_list(0x555583d53660, 24 [pid 7018] set_robust_list(0x555583d53660, 24 [pid 7017] <... set_robust_list resumed>) = 0 [pid 7016] <... openat resumed>) = 4 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7018 [pid 7018] <... set_robust_list resumed>) = 0 [pid 7017] chdir("./322" [pid 7016] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7018] chdir("./320") = 0 [pid 7018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] close(3 [pid 7018] setpgid(0, 0 [pid 5076] <... close resumed>) = 0 [pid 7018] <... setpgid resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7018] write(3, "1000", 4 [pid 7016] <... ioctl resumed>) = 0 [pid 7018] <... write resumed>) = 4 [pid 7018] close(3) = 0 [pid 7018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7016] close(3 [pid 5075] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7019 attached [pid 7018] memfd_create("syzkaller", 0 [pid 7017] <... chdir resumed>) = 0 [pid 7019] set_robust_list(0x555583d53660, 24 [pid 7018] <... memfd_create resumed>) = 3 [pid 7017] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7016] <... close resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 7019] <... set_robust_list resumed>) = 0 [pid 7018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7016] close(4 [pid 7019] chdir("./317" [pid 7018] <... mmap resumed>) = 0x7f943d000000 [pid 7017] <... prctl resumed>) = 0 [pid 7016] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7019] <... chdir resumed>) = 0 [pid 7017] setpgid(0, 0 [pid 7016] mkdir("./file1", 0777 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7019 [pid 5075] getdents64(4, [pid 7019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7019] setpgid(0, 0) = 0 [pid 7016] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7017] <... setpgid resumed>) = 0 [pid 5075] getdents64(4, [pid 7019] <... openat resumed>) = 3 [pid 7018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 7016] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7019] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 7019] <... write resumed>) = 4 [pid 5075] rmdir("./319/file1" [pid 7019] close(3) = 0 [pid 7019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7018] <... write resumed>) = 524288 [pid 7017] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 7019] memfd_create("syzkaller", 0) = 3 [pid 7019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7017] write(3, "1000", 4 [pid 5075] getdents64(3, [pid 7017] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7017] close(3 [pid 5075] close(3 [pid 7017] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7017] symlink("/dev/binderfs", "./binderfs" [pid 5075] rmdir("./319" [pid 7018] munmap(0x7f943d000000, 138412032 [pid 7017] <... symlink resumed>) = 0 [pid 7016] <... mount resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7017] memfd_create("syzkaller", 0 [pid 7016] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] mkdir("./320", 0777 [pid 7018] <... munmap resumed>) = 0 [pid 7017] <... memfd_create resumed>) = 3 [pid 7016] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 7017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 246.676650][ T7016] loop3: detected capacity change from 0 to 1024 [pid 7016] chdir("./file1" [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7018] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7017] <... mmap resumed>) = 0x7f943d000000 [pid 7016] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] close(3 [pid 7019] <... write resumed>) = 524288 [pid 7018] <... openat resumed>) = 4 [pid 7016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7019] munmap(0x7f943d000000, 138412032 [pid 7016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7019] <... munmap resumed>) = 0 [pid 7018] ioctl(4, LOOP_SET_FD, 3 [pid 7016] truncate("./file1", 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7019] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 7019] <... openat resumed>) = 4 [pid 7017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7019] ioctl(4, LOOP_SET_FD, 3 [pid 7017] <... write resumed>) = 524288 [pid 7016] <... truncate resumed>) = 0 [pid 7016] memfd_create("syzkaller", 0) = 4 [pid 7017] munmap(0x7f943d000000, 138412032 [pid 7016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7020 [pid 7016] <... mmap resumed>) = 0x7f943d000000 [pid 7017] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 7020 attached [pid 7017] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7020] set_robust_list(0x555583d53660, 24 [pid 7017] <... openat resumed>) = 4 [pid 7017] ioctl(4, LOOP_SET_FD, 3 [pid 7020] <... set_robust_list resumed>) = 0 [pid 7018] <... ioctl resumed>) = 0 [pid 7020] chdir("./321" [pid 7018] close(3) = 0 [pid 7018] close(4) = 0 [pid 7018] mkdir("./file1", 0777) = 0 [pid 7018] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7016] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7019] <... ioctl resumed>) = 0 [pid 7019] close(3) = 0 [pid 7020] <... chdir resumed>) = 0 [pid 7019] close(4 [pid 7020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7019] <... close resumed>) = 0 [pid 7020] <... prctl resumed>) = 0 [pid 7019] mkdir("./file1", 0777 [pid 7020] setpgid(0, 0 [pid 7019] <... mkdir resumed>) = 0 [pid 7018] <... mount resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 7018] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7018] chdir("./file1") = 0 [pid 7020] <... setpgid resumed>) = 0 [pid 7016] <... write resumed>) = 524288 [pid 7019] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7018] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] close(3 [pid 7018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... close resumed>) = 0 [pid 7020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7018] truncate("./file1", 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7020] <... openat resumed>) = 3 [pid 7020] write(3, "1000", 4 [pid 7017] <... ioctl resumed>) = 0 [pid 7020] <... write resumed>) = 4 [pid 7017] close(3 [pid 7020] close(3 [pid 7019] <... mount resumed>) = 0 [pid 7018] <... truncate resumed>) = 0 [pid 7017] <... close resumed>) = 0 [pid 7016] munmap(0x7f943d000000, 138412032 [pid 7020] <... close resumed>) = 0 [ 246.747467][ T7018] loop1: detected capacity change from 0 to 1024 [ 246.764987][ T7019] loop5: detected capacity change from 0 to 1024 [ 246.777987][ T7017] loop0: detected capacity change from 0 to 1024 [pid 7019] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7018] memfd_create("syzkaller", 0 [pid 7017] close(4./strace-static-x86_64: Process 7021 attached [pid 7020] symlink("/dev/binderfs", "./binderfs" [pid 7019] <... openat resumed>) = 3 [pid 7018] <... memfd_create resumed>) = 4 [pid 7017] <... close resumed>) = 0 [pid 7016] <... munmap resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7021 [pid 7021] set_robust_list(0x555583d53660, 24 [pid 7020] <... symlink resumed>) = 0 [pid 7019] chdir("./file1" [pid 7018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7017] mkdir("./file1", 0777 [pid 7021] <... set_robust_list resumed>) = 0 [pid 7020] memfd_create("syzkaller", 0 [pid 7019] <... chdir resumed>) = 0 [pid 7018] <... mmap resumed>) = 0x7f943d000000 [pid 7016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7021] chdir("./320" [pid 7020] <... memfd_create resumed>) = 3 [pid 7019] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7017] <... mkdir resumed>) = 0 [pid 7020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7019] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7017] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7016] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7021] <... chdir resumed>) = 0 [pid 7020] <... mmap resumed>) = 0x7f943d000000 [pid 7019] truncate("./file1", 0 [pid 7021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7016] close(4 [pid 7021] <... prctl resumed>) = 0 [pid 7021] setpgid(0, 0) = 0 [pid 7018] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7018] <... write resumed>) = 524288 [pid 7021] <... openat resumed>) = 3 [pid 7021] write(3, "1000", 4) = 4 [pid 7021] close(3) = 0 [pid 7016] <... close resumed>) = 0 [pid 7021] symlink("/dev/binderfs", "./binderfs" [pid 7019] <... truncate resumed>) = 0 [pid 7021] <... symlink resumed>) = 0 [pid 7020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7019] memfd_create("syzkaller", 0 [pid 7021] memfd_create("syzkaller", 0 [pid 7019] <... memfd_create resumed>) = 4 [pid 7021] <... memfd_create resumed>) = 3 [pid 7019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7018] munmap(0x7f943d000000, 138412032 [pid 7019] <... mmap resumed>) = 0x7f943d000000 [pid 7021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7019] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7021] <... mmap resumed>) = 0x7f943d000000 [pid 7018] <... munmap resumed>) = 0 [pid 7021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7016] exit_group(0) = ? [pid 7018] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7017] <... mount resumed>) = 0 [pid 7018] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7018] close(4) = 0 [pid 7017] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7016] +++ exited with 0 +++ [pid 7017] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7016, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7017] chdir("./file1" [pid 7020] <... write resumed>) = 524288 [pid 7019] <... write resumed>) = 524288 [pid 7017] <... chdir resumed>) = 0 [pid 7020] munmap(0x7f943d000000, 138412032 [pid 7017] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7017] truncate("./file1", 0 [pid 5074] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 7018] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7021] <... write resumed>) = 524288 [pid 7018] <... exit_group resumed>) = ? [pid 5074] getdents64(3, [pid 7020] <... munmap resumed>) = 0 [pid 7018] +++ exited with 0 +++ [pid 7017] <... truncate resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7017] memfd_create("syzkaller", 0) = 4 [pid 5074] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7018, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7020] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7020] <... openat resumed>) = 4 [pid 7017] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5072] <... restart_syscall resumed>) = 0 [pid 7020] ioctl(4, LOOP_SET_FD, 3 [pid 7021] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7021] <... munmap resumed>) = 0 [pid 7021] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7019] munmap(0x7f943d000000, 138412032 [pid 7021] <... openat resumed>) = 4 [pid 7019] <... munmap resumed>) = 0 [pid 7021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5072] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7019] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7019] close(4) = 0 [pid 5074] unlink("./321/binderfs" [pid 5072] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7020] <... ioctl resumed>) = 0 [pid 7017] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5074] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7019] exit_group(0) = ? [pid 7020] close(3 [pid 7019] +++ exited with 0 +++ [pid 7017] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 7020] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7019, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7020] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7021] close(3 [pid 7020] <... close resumed>) = 0 [pid 7021] <... close resumed>) = 0 [pid 7020] mkdir("./file1", 0777 [pid 5074] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 7021] close(4 [pid 7020] <... mkdir resumed>) = 0 [ 246.909527][ T7020] loop2: detected capacity change from 0 to 1024 [ 246.914544][ T7021] loop4: detected capacity change from 0 to 1024 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7021] <... close resumed>) = 0 [pid 7020] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] umount2("./317", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7017] munmap(0x7f943d000000, 138412032 [pid 5072] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] mkdir("./file1", 0777 [pid 7017] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7021] <... mkdir resumed>) = 0 [pid 7017] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] openat(AT_FDCWD, "./317", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./321/file1", [pid 5072] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(3, "", [pid 5074] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7017] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 5072] unlink("./320/binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7017] close(4 [pid 5074] <... openat resumed>) = 4 [pid 5072] <... unlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5072] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./317/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./317/binderfs", [pid 5074] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./317/binderfs" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./321/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./321") = 0 [pid 7020] <... mount resumed>) = 0 [pid 7020] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7017] <... close resumed>) = 0 [pid 5074] mkdir("./322", 0777 [pid 5072] <... umount2 resumed>) = 0 [pid 7021] <... mount resumed>) = 0 [pid 7020] <... openat resumed>) = 3 [pid 7017] exit_group(0 [pid 5074] <... mkdir resumed>) = 0 [pid 7020] chdir("./file1" [pid 7017] <... exit_group resumed>) = ? [pid 7021] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7020] <... chdir resumed>) = 0 [pid 7017] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7020] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 7021] <... openat resumed>) = 3 [pid 7020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7017, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7021] chdir("./file1" [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7021] <... chdir resumed>) = 0 [pid 7020] truncate("./file1", 0 [pid 5076] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... restart_syscall resumed>) = 0 [pid 7021] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./317/file1", [pid 7021] truncate("./file1", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7020] <... truncate resumed>) = 0 [pid 5076] umount2("./317/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./320/file1", [pid 7020] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] <... truncate resumed>) = 0 [pid 7020] <... memfd_create resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./317/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7021] memfd_create("syzkaller", 0 [pid 7020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7021] <... memfd_create resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5072] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 7021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 7021] <... mmap resumed>) = 0x7f943d000000 [pid 7020] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(4, [pid 5072] newfstatat(4, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7021] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7020] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7020] <... write resumed>) = 524288 [pid 5072] getdents64(4, [pid 7020] munmap(0x7f943d000000, 138412032 [pid 7021] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7021] munmap(0x7f943d000000, 138412032 [pid 5076] close(4 [pid 5072] close(4 [pid 7020] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./322/binderfs", [pid 5076] rmdir("./317/file1" [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./320/file1" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7020] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... rmdir resumed>) = 0 [pid 5071] unlink("./322/binderfs" [pid 7020] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7022 attached [pid 7021] <... munmap resumed>) = 0 [pid 5072] getdents64(3, [pid 7022] set_robust_list(0x555583d53660, 24 [pid 5076] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7022] <... set_robust_list resumed>) = 0 [pid 7021] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7020] close(4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7022 [pid 5072] close(3 [pid 7022] chdir("./322" [pid 7021] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] close(3 [pid 5072] <... close resumed>) = 0 [pid 7022] <... chdir resumed>) = 0 [pid 7021] close(4 [pid 5076] <... close resumed>) = 0 [pid 5072] rmdir("./320" [pid 7022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7021] <... close resumed>) = 0 [pid 7020] <... close resumed>) = 0 [pid 5076] rmdir("./317" [pid 5072] <... rmdir resumed>) = 0 [pid 7022] <... prctl resumed>) = 0 [pid 7022] setpgid(0, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7022] <... setpgid resumed>) = 0 [pid 7021] exit_group(0 [pid 7020] exit_group(0 [pid 5072] mkdir("./321", 0777 [pid 5071] <... umount2 resumed>) = 0 [pid 7022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7020] <... exit_group resumed>) = ? [pid 5072] <... mkdir resumed>) = 0 [pid 5071] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7022] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7022] write(3, "1000", 4 [pid 7021] <... exit_group resumed>) = ? [pid 5076] mkdir("./318", 0777 [pid 5072] <... openat resumed>) = 3 [pid 7022] <... write resumed>) = 4 [pid 7021] +++ exited with 0 +++ [pid 7020] +++ exited with 0 +++ [pid 5076] <... mkdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7021, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7020, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7022] close(3 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 7022] <... close resumed>) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 7022] symlink("/dev/binderfs", "./binderfs" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7022] <... symlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./322/file1", [pid 5073] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7022] memfd_create("syzkaller", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 7022] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7022] <... mmap resumed>) = 0x7f943d000000 [pid 5075] newfstatat(3, "", [pid 5073] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] getdents64(3, [pid 5073] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 7022] <... write resumed>) = 524288 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(3 [pid 7022] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5072] <... close resumed>) = 0 [pid 7022] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(4, "", [pid 5075] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5073] unlink("./321/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] unlink("./320/binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7023 attached [pid 7022] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 7023] set_robust_list(0x555583d53660, 24 [pid 7022] <... openat resumed>) = 4 [pid 7023] <... set_robust_list resumed>) = 0 [pid 7022] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7023 [pid 7023] chdir("./321" [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7023] <... chdir resumed>) = 0 [pid 7023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(4, [pid 7023] <... prctl resumed>) = 0 [pid 7023] setpgid(0, 0) = 0 [pid 7023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7023] <... openat resumed>) = 3 [pid 7023] write(3, "1000", 4) = 4 [pid 7023] close(3) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./322/file1" [pid 5076] close(3) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7023] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./321/file1", [pid 5071] getdents64(3, [pid 7023] <... symlink resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./320/file1", [pid 5073] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 7022] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7022] close(3 [pid 5075] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./322" [pid 7022] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7024 ./strace-static-x86_64: Process 7024 attached [pid 7023] memfd_create("syzkaller", 0 [pid 7022] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 5071] <... rmdir resumed>) = 0 [pid 7024] set_robust_list(0x555583d53660, 24 [pid 7023] <... memfd_create resumed>) = 3 [pid 7022] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7024] <... set_robust_list resumed>) = 0 [pid 7023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7024] chdir("./318" [pid 7023] <... mmap resumed>) = 0x7f943d000000 [pid 5073] getdents64(4, [pid 7022] mkdir("./file1", 0777 [pid 5075] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7024] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(4, [pid 7024] <... prctl resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7024] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] close(4 [pid 7022] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] mkdir("./323", 0777 [pid 7022] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] rmdir("./321/file1" [pid 5075] getdents64(4, [pid 7024] <... setpgid resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] close(4 [pid 7024] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 247.163470][ T7022] loop3: detected capacity change from 0 to 1024 [pid 7024] write(3, "1000", 4 [pid 5075] rmdir("./320/file1" [pid 7024] <... write resumed>) = 4 [pid 7022] <... mount resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7022] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7024] close(3 [pid 5075] getdents64(3, [pid 5073] close(3 [pid 7024] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 7024] symlink("/dev/binderfs", "./binderfs" [pid 5075] close(3 [pid 5073] rmdir("./321" [pid 7024] <... symlink resumed>) = 0 [pid 7022] chdir("./file1" [pid 5075] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7022] <... chdir resumed>) = 0 [pid 7024] memfd_create("syzkaller", 0 [pid 7022] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] rmdir("./320" [pid 7022] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 7024] <... memfd_create resumed>) = 3 [pid 7022] truncate("./file1", 0 [pid 5073] mkdir("./322", 0777 [pid 7024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] mkdir("./321", 0777 [pid 5073] <... mkdir resumed>) = 0 [pid 7024] <... mmap resumed>) = 0x7f943d000000 [pid 7023] <... write resumed>) = 524288 [pid 7022] <... truncate resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 7022] memfd_create("syzkaller", 0 [pid 7024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7022] <... memfd_create resumed>) = 4 [pid 7022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7023] munmap(0x7f943d000000, 138412032 [pid 7022] <... mmap resumed>) = 0x7f943d000000 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 7023] <... munmap resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7022] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7023] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7023] ioctl(4, LOOP_SET_FD, 3 [pid 7022] <... write resumed>) = 524288 [pid 7023] <... ioctl resumed>) = 0 [pid 7022] munmap(0x7f943d000000, 138412032 [pid 5071] <... ioctl resumed>) = 0 [pid 7024] <... write resumed>) = 524288 [pid 7024] munmap(0x7f943d000000, 138412032 [pid 7022] <... munmap resumed>) = 0 [pid 5071] close(3 [pid 7023] close(3) = 0 [pid 7023] close(4 [pid 7022] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7023] <... close resumed>) = 0 [pid 7024] <... munmap resumed>) = 0 [pid 7023] mkdir("./file1", 0777 [pid 7022] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 7024] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7024] <... openat resumed>) = 4 [pid 7023] <... mkdir resumed>) = 0 [pid 7022] close(4 [pid 7023] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7024] ioctl(4, LOOP_SET_FD, 3 [pid 7022] <... close resumed>) = 0 [ 247.251509][ T7023] loop1: detected capacity change from 0 to 1024 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7022] exit_group(0) = ? ./strace-static-x86_64: Process 7025 attached [pid 7022] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7025 [pid 7025] set_robust_list(0x555583d53660, 24 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7022, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] close(3 [pid 7025] <... set_robust_list resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7025] chdir("./323" [pid 5075] close(3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7025] <... chdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7025] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7026 attached [pid 7025] <... prctl resumed>) = 0 [pid 7024] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7027 attached [pid 7026] set_robust_list(0x555583d53660, 24 [pid 7025] setpgid(0, 0 [pid 7024] close(3 [pid 5074] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7026 [pid 7027] set_robust_list(0x555583d53660, 24 [pid 7026] <... set_robust_list resumed>) = 0 [pid 7025] <... setpgid resumed>) = 0 [pid 7024] <... close resumed>) = 0 [pid 7027] <... set_robust_list resumed>) = 0 [pid 7026] chdir("./322" [pid 7025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7024] close(4 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7027 [pid 5074] <... openat resumed>) = 3 [pid 7026] <... chdir resumed>) = 0 [pid 7027] chdir("./321" [pid 7026] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7025] <... openat resumed>) = 3 [pid 7024] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 7026] <... prctl resumed>) = 0 [pid 7024] mkdir("./file1", 0777 [pid 7027] <... chdir resumed>) = 0 [pid 7023] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7024] <... mkdir resumed>) = 0 [pid 7023] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] getdents64(3, [pid 7027] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7026] setpgid(0, 0 [pid 7023] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7027] <... prctl resumed>) = 0 [pid 7026] <... setpgid resumed>) = 0 [pid 7025] write(3, "1000", 4 [pid 7024] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7023] chdir("./file1" [pid 7027] setpgid(0, 0 [pid 7026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7025] <... write resumed>) = 4 [pid 7023] <... chdir resumed>) = 0 [pid 5074] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7027] <... setpgid resumed>) = 0 [pid 7025] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7026] <... openat resumed>) = 3 [pid 7025] <... close resumed>) = 0 [pid 7023] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./322/binderfs", [pid 7027] <... openat resumed>) = 3 [pid 7026] write(3, "1000", 4 [pid 7025] symlink("/dev/binderfs", "./binderfs" [pid 7023] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7027] write(3, "1000", 4 [pid 7023] truncate("./file1", 0 [pid 5074] unlink("./322/binderfs" [pid 7027] <... write resumed>) = 4 [pid 7026] <... write resumed>) = 4 [pid 7025] <... symlink resumed>) = 0 [pid 7024] <... mount resumed>) = 0 [pid 7023] <... truncate resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7027] close(3 [pid 7026] close(3 [pid 7025] memfd_create("syzkaller", 0 [pid 7024] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7023] memfd_create("syzkaller", 0 [pid 7026] <... close resumed>) = 0 [pid 7027] <... close resumed>) = 0 [pid 7026] symlink("/dev/binderfs", "./binderfs" [pid 7024] <... openat resumed>) = 3 [pid 7023] <... memfd_create resumed>) = 4 [pid 5074] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7027] symlink("/dev/binderfs", "./binderfs" [pid 7026] <... symlink resumed>) = 0 [pid 7025] <... memfd_create resumed>) = 3 [pid 7024] chdir("./file1" [pid 7023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7027] <... symlink resumed>) = 0 [pid 7025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7024] <... chdir resumed>) = 0 [pid 7023] <... mmap resumed>) = 0x7f943d000000 [ 247.292917][ T7024] loop5: detected capacity change from 0 to 1024 [pid 7027] memfd_create("syzkaller", 0 [pid 7025] <... mmap resumed>) = 0x7f943d000000 [pid 7024] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7023] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7027] <... memfd_create resumed>) = 3 [pid 7026] memfd_create("syzkaller", 0 [pid 7024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7026] <... memfd_create resumed>) = 3 [pid 7026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7024] truncate("./file1", 0 [pid 7027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7026] <... mmap resumed>) = 0x7f943d000000 [pid 7025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7024] <... truncate resumed>) = 0 [pid 7027] <... mmap resumed>) = 0x7f943d000000 [pid 7024] memfd_create("syzkaller", 0 [pid 7027] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7024] <... memfd_create resumed>) = 4 [pid 7023] <... write resumed>) = 524288 [pid 5074] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./322/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7026] <... write resumed>) = 524288 [pid 7024] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 4 [pid 7025] <... write resumed>) = 524288 [pid 7026] munmap(0x7f943d000000, 138412032 [pid 5074] newfstatat(4, "", [pid 7025] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7027] <... write resumed>) = 524288 [pid 7025] <... munmap resumed>) = 0 [pid 5074] getdents64(4, [pid 7026] <... munmap resumed>) = 0 [pid 7025] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7026] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7025] <... openat resumed>) = 4 [pid 5074] getdents64(4, [pid 7026] <... openat resumed>) = 4 [pid 7025] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7026] ioctl(4, LOOP_SET_FD, 3 [pid 7024] <... write resumed>) = 524288 [pid 7023] munmap(0x7f943d000000, 138412032 [pid 7027] munmap(0x7f943d000000, 138412032 [pid 7023] <... munmap resumed>) = 0 [pid 7027] <... munmap resumed>) = 0 [pid 7023] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] close(4 [pid 7023] close(4 [pid 7024] munmap(0x7f943d000000, 138412032 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./322/file1" [pid 7027] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7026] <... ioctl resumed>) = 0 [pid 7024] <... munmap resumed>) = 0 [pid 7023] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7027] ioctl(4, LOOP_SET_FD, 3 [pid 7024] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] getdents64(3, [pid 7026] close(3) = 0 [pid 7024] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7023] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7026] close(4 [pid 7024] close(4 [pid 7023] <... exit_group resumed>) = ? [pid 5074] close(3 [pid 7026] <... close resumed>) = 0 [pid 7023] +++ exited with 0 +++ [pid 5074] <... close resumed>) = 0 [pid 7025] <... ioctl resumed>) = 0 [pid 5074] rmdir("./322" [pid 7026] mkdir("./file1", 0777 [pid 7025] close(3 [pid 7026] <... mkdir resumed>) = 0 [pid 7025] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7023, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] mkdir("./323", 0777 [pid 7026] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7025] close(4) = 0 [pid 7024] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./321/binderfs", [pid 7027] <... ioctl resumed>) = 0 [pid 7025] mkdir("./file1", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 247.401977][ T7025] loop0: detected capacity change from 0 to 1024 [ 247.408884][ T7026] loop2: detected capacity change from 0 to 1024 [ 247.429601][ T7027] loop4: detected capacity change from 0 to 1024 [pid 7027] close(3 [pid 7024] exit_group(0 [pid 5074] <... openat resumed>) = 3 [pid 5072] unlink("./321/binderfs" [pid 7025] <... mkdir resumed>) = 0 [pid 7026] <... mount resumed>) = 0 [pid 7025] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7024] <... exit_group resumed>) = ? [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... unlink resumed>) = 0 [pid 7026] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7027] <... close resumed>) = 0 [pid 7026] <... openat resumed>) = 3 [pid 7024] +++ exited with 0 +++ [pid 5072] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7026] chdir("./file1") = 0 [pid 7027] close(4 [pid 7026] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7025] <... mount resumed>) = 0 [pid 7027] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7024, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7027] mkdir("./file1", 0777 [pid 7026] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7025] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7027] <... mkdir resumed>) = 0 [pid 7026] truncate("./file1", 0 [pid 7025] <... openat resumed>) = 3 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7027] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7025] chdir("./file1" [pid 7026] <... truncate resumed>) = 0 [pid 7025] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7026] memfd_create("syzkaller", 0 [pid 7025] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./318", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7026] <... memfd_create resumed>) = 4 [pid 7025] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./318", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5072] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./321/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] umount2("./318/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./318/binderfs", [pid 5072] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] unlink("./318/binderfs" [pid 5072] getdents64(4, [pid 5076] <... unlink resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5076] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./321/file1") = 0 [pid 7026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7025] truncate("./file1", 0 [pid 7027] <... mount resumed>) = 0 [pid 5072] getdents64(3, [pid 7027] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7027] <... openat resumed>) = 3 [pid 5072] close(3) = 0 [pid 5072] rmdir("./321" [pid 7026] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... rmdir resumed>) = 0 [pid 7027] chdir("./file1" [pid 5072] mkdir("./322", 0777 [pid 7027] <... chdir resumed>) = 0 [pid 7025] <... truncate resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7027] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7026] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7025] memfd_create("syzkaller", 0 [pid 5074] close(3 [pid 7027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7025] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 7027] truncate("./file1", 0 [pid 7025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7027] <... truncate resumed>) = 0 [pid 7026] <... write resumed>) = 524288 [pid 7025] <... mmap resumed>) = 0x7f943d000000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... openat resumed>) = 3 [pid 7027] memfd_create("syzkaller", 0 [pid 5076] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7027] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./318/file1", [pid 7027] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7027] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./318/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./318/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7028 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4./strace-static-x86_64: Process 7028 attached [pid 7025] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./318/file1" [pid 7028] set_robust_list(0x555583d53660, 24 [pid 5076] <... rmdir resumed>) = 0 [pid 7026] munmap(0x7f943d000000, 138412032 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./318" [pid 7026] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7028] <... set_robust_list resumed>) = 0 [pid 5076] mkdir("./319", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 7028] chdir("./323" [pid 7026] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7028] <... chdir resumed>) = 0 [pid 7026] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7027] <... write resumed>) = 524288 [pid 7026] close(4 [pid 7028] <... prctl resumed>) = 0 [pid 7025] <... write resumed>) = 524288 [pid 5072] <... ioctl resumed>) = 0 [pid 7025] munmap(0x7f943d000000, 138412032 [pid 7028] setpgid(0, 0) = 0 [pid 7027] munmap(0x7f943d000000, 138412032 [pid 7025] <... munmap resumed>) = 0 [pid 7028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7027] <... munmap resumed>) = 0 [pid 5072] close(3) = 0 [pid 7028] <... openat resumed>) = 3 [pid 7025] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7028] write(3, "1000", 4) = 4 [pid 7028] close(3 [pid 7027] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7025] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7028] <... close resumed>) = 0 [pid 7027] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7025] close(4 [pid 7028] symlink("/dev/binderfs", "./binderfs" [pid 7027] close(4 [pid 7025] <... close resumed>) = 0 [pid 7028] <... symlink resumed>) = 0 [pid 7026] <... close resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7029 ./strace-static-x86_64: Process 7029 attached [pid 7028] memfd_create("syzkaller", 0 [pid 7026] exit_group(0 [pid 7029] set_robust_list(0x555583d53660, 24 [pid 7028] <... memfd_create resumed>) = 3 [pid 7027] <... close resumed>) = 0 [pid 7026] <... exit_group resumed>) = ? [pid 7029] <... set_robust_list resumed>) = 0 [pid 7028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7029] chdir("./322") = 0 [pid 7029] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7028] <... mmap resumed>) = 0x7f943d000000 [pid 7027] exit_group(0 [pid 7029] <... prctl resumed>) = 0 [pid 7029] setpgid(0, 0) = 0 [pid 7027] <... exit_group resumed>) = ? [pid 7029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7025] exit_group(0 [pid 7029] <... openat resumed>) = 3 [pid 7027] +++ exited with 0 +++ [pid 7026] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 7029] write(3, "1000", 4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7027, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7029] <... write resumed>) = 4 [pid 7025] <... exit_group resumed>) = ? [pid 7025] +++ exited with 0 +++ [pid 7029] close(3) = 0 [pid 5075] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7029] symlink("/dev/binderfs", "./binderfs" [pid 7028] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7026, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7025, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7029] <... symlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7029] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 3 [pid 7029] <... memfd_create resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 7029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7029] <... mmap resumed>) = 0x7f943d000000 [pid 5075] getdents64(3, [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./321/binderfs") = 0 [pid 5075] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7028] munmap(0x7f943d000000, 138412032 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 5075] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7030 attached [pid 7028] <... munmap resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./321/file1", [pid 5073] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7030 [pid 5073] newfstatat(3, "", [pid 7028] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7030] set_robust_list(0x555583d53660, 24 [pid 7028] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 7030] <... set_robust_list resumed>) = 0 [pid 7029] <... write resumed>) = 524288 [pid 7028] ioctl(4, LOOP_SET_FD, 3 [pid 5075] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 5073] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5075] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./322/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7030] chdir("./319") = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./323/binderfs" [pid 7030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] getdents64(4, [pid 7030] <... prctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 7030] setpgid(0, 0 [pid 5073] unlink("./322/binderfs" [pid 7030] <... setpgid resumed>) = 0 [pid 5075] close(4 [pid 5071] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 7030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] rmdir("./321/file1" [pid 7029] munmap(0x7f943d000000, 138412032 [pid 7030] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7029] <... munmap resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7030] write(3, "1000", 4 [pid 5075] getdents64(3, [pid 7030] <... write resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7029] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] close(3 [pid 5071] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7029] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7029] ioctl(4, LOOP_SET_FD, 3 [pid 5075] rmdir("./321" [pid 7030] close(3 [pid 7028] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./323/file1", [pid 7030] <... close resumed>) = 0 [pid 7028] close(3 [pid 7030] symlink("/dev/binderfs", "./binderfs" [pid 7028] <... close resumed>) = 0 [pid 5075] mkdir("./322", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7028] close(4 [pid 7030] <... symlink resumed>) = 0 [pid 7028] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7028] mkdir("./file1", 0777 [pid 7030] memfd_create("syzkaller", 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7030] <... memfd_create resumed>) = 3 [pid 7028] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7028] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./323/file1" [pid 7030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 7029] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 7029] close(3 [pid 5073] newfstatat(AT_FDCWD, "./322/file1", [pid 5071] rmdir("./323" [pid 7029] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7029] close(4) = 0 [pid 5073] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] mkdir("./324", 0777 [pid 7029] mkdir("./file1", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7029] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 7029] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [ 247.705649][ T7028] loop3: detected capacity change from 0 to 1024 [ 247.737577][ T7029] loop1: detected capacity change from 0 to 1024 [pid 5073] close(4) = 0 [pid 7030] <... write resumed>) = 524288 [pid 7029] <... mount resumed>) = 0 [pid 7028] <... mount resumed>) = 0 [pid 7029] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... ioctl resumed>) = 0 [pid 5073] rmdir("./322/file1" [pid 7029] <... openat resumed>) = 3 [pid 7029] chdir("./file1") = 0 [pid 7029] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 7029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7029] truncate("./file1", 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 7028] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7030] munmap(0x7f943d000000, 138412032 [pid 7028] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 7029] <... truncate resumed>) = 0 [pid 7028] chdir("./file1" [pid 5073] rmdir("./322" [pid 7030] <... munmap resumed>) = 0 [pid 7028] <... chdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7029] memfd_create("syzkaller", 0 [pid 7028] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7029] <... memfd_create resumed>) = 4 [pid 7028] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 5073] mkdir("./323", 0777 [pid 7030] <... openat resumed>) = 4 [pid 7029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7028] truncate("./file1", 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 7029] <... mmap resumed>) = 0x7f943d000000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7029] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7032 attached [pid 7030] ioctl(4, LOOP_SET_FD, 3 [pid 7032] set_robust_list(0x555583d53660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7031 [pid 7032] <... set_robust_list resumed>) = 0 [pid 7032] chdir("./323" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7032 [pid 7032] <... chdir resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7031 attached [pid 7032] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7028] <... truncate resumed>) = 0 [pid 7031] set_robust_list(0x555583d53660, 24 [pid 7028] memfd_create("syzkaller", 0) = 4 [pid 7028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7031] <... set_robust_list resumed>) = 0 [pid 7031] chdir("./322" [pid 7032] <... prctl resumed>) = 0 [pid 7028] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7031] <... chdir resumed>) = 0 [pid 7031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7032] setpgid(0, 0 [pid 7031] <... prctl resumed>) = 0 [pid 7032] <... setpgid resumed>) = 0 [pid 7031] setpgid(0, 0) = 0 [pid 7032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7032] write(3, "1000", 4) = 4 [pid 7032] close(3 [pid 5071] close(3 [pid 7031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7032] <... close resumed>) = 0 [pid 7032] symlink("/dev/binderfs", "./binderfs" [pid 7029] <... write resumed>) = 524288 [pid 7028] <... write resumed>) = 524288 [pid 5071] <... close resumed>) = 0 [pid 7031] <... openat resumed>) = 3 [pid 7032] <... symlink resumed>) = 0 [pid 7031] write(3, "1000", 4 [pid 7030] <... ioctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7031] <... write resumed>) = 4 [pid 7030] close(3 [pid 7031] close(3 [pid 7032] memfd_create("syzkaller", 0 [pid 7030] <... close resumed>) = 0 [pid 7029] munmap(0x7f943d000000, 138412032 [pid 7031] <... close resumed>) = 0 [pid 7030] close(4 [pid 7029] <... munmap resumed>) = 0 [pid 7031] symlink("/dev/binderfs", "./binderfs" [pid 7030] <... close resumed>) = 0 [pid 7032] <... memfd_create resumed>) = 3 [pid 7031] <... symlink resumed>) = 0 [pid 7032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7030] mkdir("./file1", 0777 [pid 7029] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7031] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7033 attached [pid 7032] <... mmap resumed>) = 0x7f943d000000 [pid 7030] <... mkdir resumed>) = 0 [pid 7031] <... memfd_create resumed>) = 3 [pid 7029] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7033] set_robust_list(0x555583d53660, 24 [pid 7031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7030] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [ 247.823592][ T7030] loop5: detected capacity change from 0 to 1024 [pid 7029] close(4 [pid 7031] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7033 [pid 7033] <... set_robust_list resumed>) = 0 [pid 7028] munmap(0x7f943d000000, 138412032) = 0 [pid 7033] chdir("./324" [pid 7031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7032] <... write resumed>) = 524288 [pid 7030] <... mount resumed>) = 0 [pid 7029] <... close resumed>) = 0 [pid 7028] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7029] exit_group(0 [pid 7028] close(4 [pid 7029] <... exit_group resumed>) = ? [pid 7028] <... close resumed>) = 0 [pid 7033] <... chdir resumed>) = 0 [pid 7030] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7029] +++ exited with 0 +++ [pid 7033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7030] <... openat resumed>) = 3 [pid 7033] <... prctl resumed>) = 0 [pid 7030] chdir("./file1" [pid 7033] setpgid(0, 0 [pid 7030] <... chdir resumed>) = 0 [pid 7033] <... setpgid resumed>) = 0 [pid 7030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7029, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7030] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7030] truncate("./file1", 0 [pid 7033] <... openat resumed>) = 3 [pid 7033] write(3, "1000", 4) = 4 [pid 5072] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7033] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7033] <... close resumed>) = 0 [pid 7030] <... truncate resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7033] symlink("/dev/binderfs", "./binderfs" [pid 7031] <... write resumed>) = 524288 [pid 7032] munmap(0x7f943d000000, 138412032 [pid 7030] memfd_create("syzkaller", 0 [pid 7032] <... munmap resumed>) = 0 [pid 7032] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7028] exit_group(0 [pid 5072] <... openat resumed>) = 3 [pid 7032] <... openat resumed>) = 4 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7032] ioctl(4, LOOP_SET_FD, 3 [pid 5072] newfstatat(AT_FDCWD, "./322/binderfs", [pid 7033] <... symlink resumed>) = 0 [pid 7031] munmap(0x7f943d000000, 138412032 [pid 7030] <... memfd_create resumed>) = 4 [pid 7028] <... exit_group resumed>) = ? [pid 7033] memfd_create("syzkaller", 0 [pid 7031] <... munmap resumed>) = 0 [pid 7030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7028] +++ exited with 0 +++ [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7033] <... memfd_create resumed>) = 3 [pid 7030] <... mmap resumed>) = 0x7f943d000000 [pid 5072] unlink("./322/binderfs" [pid 7031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7028, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] <... unlink resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5072] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... restart_syscall resumed>) = 0 [pid 5074] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7031] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7031] ioctl(4, LOOP_SET_FD, 3 [pid 5074] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7031] <... ioctl resumed>) = 0 [pid 7030] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5072] <... umount2 resumed>) = 0 [pid 7033] <... mmap resumed>) = 0x7f943d000000 [pid 7031] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./323/binderfs" [pid 7032] <... ioctl resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7031] <... close resumed>) = 0 [pid 7032] close(3 [pid 7031] close(4 [pid 7032] <... close resumed>) = 0 [pid 7032] close(4 [pid 5072] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7032] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7031] <... close resumed>) = 0 [pid 7032] mkdir("./file1", 0777 [pid 7031] mkdir("./file1", 0777 [pid 7032] <... mkdir resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./322/file1", [pid 7032] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7031] <... mkdir resumed>) = 0 [pid 7030] <... write resumed>) = 524288 [ 247.948093][ T7032] loop2: detected capacity change from 0 to 1024 [ 247.964445][ T7031] loop4: detected capacity change from 0 to 1024 [pid 5072] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7031] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7030] munmap(0x7f943d000000, 138412032 [pid 5072] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7030] <... munmap resumed>) = 0 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7031] <... mount resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7031] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7030] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7031] <... openat resumed>) = 3 [pid 5072] getdents64(4, [pid 5074] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(4 [pid 7031] chdir("./file1" [pid 5074] newfstatat(AT_FDCWD, "./323/file1", [pid 5072] <... close resumed>) = 0 [pid 7031] <... chdir resumed>) = 0 [pid 7032] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] rmdir("./322/file1" [pid 7033] <... write resumed>) = 524288 [pid 7031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7030] close(4 [pid 5074] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7032] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 7031] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7032] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 7032] chdir("./file1" [pid 5074] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7032] <... chdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 7031] truncate("./file1", 0 [pid 7032] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] close(3 [pid 7032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7032] truncate("./file1", 0 [pid 5074] getdents64(4, [pid 5072] rmdir("./322" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./323/file1" [pid 7030] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7033] munmap(0x7f943d000000, 138412032 [pid 7031] <... truncate resumed>) = 0 [pid 7030] exit_group(0 [pid 5072] mkdir("./323", 0777 [pid 7033] <... munmap resumed>) = 0 [pid 7031] memfd_create("syzkaller", 0 [pid 7032] <... truncate resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] <... mkdir resumed>) = 0 [pid 7031] <... memfd_create resumed>) = 4 [pid 7032] memfd_create("syzkaller", 0 [pid 7030] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7032] <... memfd_create resumed>) = 4 [pid 5074] close(3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7031] <... mmap resumed>) = 0x7f943d000000 [pid 7032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... close resumed>) = 0 [pid 7033] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 7032] <... mmap resumed>) = 0x7f943d000000 [pid 5074] rmdir("./323" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7033] ioctl(4, LOOP_SET_FD, 3 [pid 7031] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7030] +++ exited with 0 +++ [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./324", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7032] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7030, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7032] <... write resumed>) = 524288 [pid 7032] munmap(0x7f943d000000, 138412032 [pid 7033] <... ioctl resumed>) = 0 [pid 7031] <... write resumed>) = 524288 [pid 5076] umount2("./319", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./319", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./319/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7033] close(3 [pid 5076] newfstatat(AT_FDCWD, "./319/binderfs", [pid 7033] <... close resumed>) = 0 [pid 7031] munmap(0x7f943d000000, 138412032 [pid 7032] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7031] <... munmap resumed>) = 0 [pid 5076] unlink("./319/binderfs" [pid 7033] close(4 [pid 5076] <... unlink resumed>) = 0 [pid 7033] <... close resumed>) = 0 [pid 7031] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7032] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7033] mkdir("./file1", 0777 [pid 7031] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7032] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 7033] <... mkdir resumed>) = 0 [pid 7031] close(4 [pid 7033] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7032] close(4 [pid 5076] <... umount2 resumed>) = 0 [pid 5072] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 248.080071][ T7033] loop0: detected capacity change from 0 to 1024 [pid 5076] newfstatat(AT_FDCWD, "./319/file1", [pid 5072] <... close resumed>) = 0 [pid 7031] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7032] <... close resumed>) = 0 [pid 7031] exit_group(0 [pid 5076] umount2("./319/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3./strace-static-x86_64: Process 7034 attached [pid 7032] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 7031] <... exit_group resumed>) = ? [pid 7032] <... exit_group resumed>) = ? [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7031] +++ exited with 0 +++ [pid 7032] +++ exited with 0 +++ [pid 7034] set_robust_list(0x555583d53660, 24) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7034 [pid 7034] chdir("./323" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7034] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./319/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7032, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7034] setpgid(0, 0 [pid 5076] newfstatat(4, "", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7031, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7034] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7033] <... mount resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7034] <... openat resumed>) = 3 [pid 7033] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7034] write(3, "1000", 4 [pid 5076] getdents64(4, [pid 7034] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7035 attached [pid 7034] close(3 [pid 7033] <... openat resumed>) = 3 [pid 5076] close(4 [pid 7035] set_robust_list(0x555583d53660, 24 [pid 7034] <... close resumed>) = 0 [pid 7033] chdir("./file1" [pid 5076] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7035 [pid 7035] <... set_robust_list resumed>) = 0 [pid 7034] symlink("/dev/binderfs", "./binderfs" [pid 7033] <... chdir resumed>) = 0 [pid 5076] rmdir("./319/file1" [pid 5075] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7035] chdir("./324" [pid 7033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7035] <... chdir resumed>) = 0 [pid 7034] <... symlink resumed>) = 0 [pid 7033] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7034] memfd_create("syzkaller", 0 [pid 7033] truncate("./file1", 0 [pid 5076] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7035] <... prctl resumed>) = 0 [pid 7034] <... memfd_create resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 7035] setpgid(0, 0 [pid 7034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 7035] <... setpgid resumed>) = 0 [pid 7034] <... mmap resumed>) = 0x7f943d000000 [pid 7033] <... truncate resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] getdents64(3, [pid 7035] <... openat resumed>) = 3 [pid 5075] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7035] write(3, "1000", 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7035] <... write resumed>) = 4 [pid 5076] rmdir("./319" [pid 5075] newfstatat(AT_FDCWD, "./322/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7035] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./323/binderfs", [pid 7035] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] unlink("./322/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7035] symlink("/dev/binderfs", "./binderfs" [pid 7033] memfd_create("syzkaller", 0 [pid 5076] mkdir("./320", 0777 [pid 5075] <... unlink resumed>) = 0 [pid 5073] unlink("./323/binderfs" [pid 7035] <... symlink resumed>) = 0 [pid 7033] <... memfd_create resumed>) = 4 [pid 5075] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 7034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7033] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = 0 [pid 7035] memfd_create("syzkaller", 0 [pid 7034] <... write resumed>) = 524288 [pid 7033] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7035] <... memfd_create resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 3 [pid 7034] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./323/file1", [pid 7034] <... munmap resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7034] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7034] <... openat resumed>) = 4 [pid 7033] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7034] ioctl(4, LOOP_SET_FD, 3 [pid 5075] newfstatat(AT_FDCWD, "./322/file1", [pid 7035] <... write resumed>) = 524288 [pid 5073] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7034] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 7034] close(3 [pid 5075] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7034] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7034] close(4 [pid 5075] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7035] munmap(0x7f943d000000, 138412032 [pid 7034] <... close resumed>) = 0 [pid 7033] munmap(0x7f943d000000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7035] <... munmap resumed>) = 0 [pid 7034] mkdir("./file1", 0777 [pid 7033] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] getdents64(4, [pid 7033] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7034] <... mkdir resumed>) = 0 [pid 7033] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(4, "", [pid 5073] getdents64(4, [pid 7035] <... openat resumed>) = 4 [pid 7034] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7033] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5073] close(4 [pid 7035] ioctl(4, LOOP_SET_FD, 3 [pid 7033] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 7034] <... mount resumed>) = 0 [pid 5073] rmdir("./323/file1" [pid 7034] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 7034] chdir("./file1" [pid 5075] getdents64(4, [pid 5073] getdents64(3, [pid 7034] <... chdir resumed>) = 0 [pid 7034] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5075] close(4 [pid 5073] <... close resumed>) = 0 [pid 7034] truncate("./file1", 0 [pid 5075] <... close resumed>) = 0 [pid 5073] rmdir("./323" [pid 7033] exit_group(0 [pid 5075] rmdir("./322/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 7033] <... exit_group resumed>) = ? [pid 5075] <... rmdir resumed>) = 0 [pid 5073] mkdir("./324", 0777 [pid 7033] +++ exited with 0 +++ [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7033, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./322" [pid 7034] <... truncate resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7034] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7034] <... memfd_create resumed>) = 4 [pid 5076] close(3 [pid 5075] mkdir("./323", 0777 [pid 5071] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 7035] <... ioctl resumed>) = 0 [pid 7034] <... mmap resumed>) = 0x7f943d000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7035] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7035] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7035] close(4 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] newfstatat(3, "", [pid 7035] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7035] mkdir("./file1", 0777 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] getdents64(3, [pid 7035] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7035] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7036 attached ) = -1 EINVAL (Invalid argument) [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7036 [pid 5071] newfstatat(AT_FDCWD, "./324/binderfs", [ 248.254890][ T7034] loop1: detected capacity change from 0 to 1024 [ 248.289268][ T7035] loop3: detected capacity change from 0 to 1024 [pid 7036] set_robust_list(0x555583d53660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7036] <... set_robust_list resumed>) = 0 [pid 5071] unlink("./324/binderfs") = 0 [pid 5071] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7036] chdir("./320") = 0 [pid 7035] <... mount resumed>) = 0 [pid 7034] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7035] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7036] <... prctl resumed>) = 0 [pid 7035] <... openat resumed>) = 3 [pid 7034] <... write resumed>) = 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7036] setpgid(0, 0 [pid 7035] chdir("./file1") = 0 [pid 7035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7037 attached [pid 7036] <... setpgid resumed>) = 0 [pid 7035] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(3 [pid 5071] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] set_robust_list(0x555583d53660, 24 [pid 7036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7035] truncate("./file1", 0 [pid 7034] munmap(0x7f943d000000, 138412032 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7037 [pid 5073] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7037] <... set_robust_list resumed>) = 0 [pid 7035] <... truncate resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./324/file1", [pid 7037] chdir("./323" [pid 7035] memfd_create("syzkaller", 0 [pid 7034] <... munmap resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7037] <... chdir resumed>) = 0 [pid 7036] <... openat resumed>) = 3 [pid 7035] <... memfd_create resumed>) = 4 [pid 7034] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7038 attached [pid 7037] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7036] write(3, "1000", 4 [pid 7035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7034] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7038] set_robust_list(0x555583d53660, 24 [pid 7037] <... prctl resumed>) = 0 [pid 7036] <... write resumed>) = 4 [pid 7035] <... mmap resumed>) = 0x7f943d000000 [pid 7034] close(4 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7038 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7038] <... set_robust_list resumed>) = 0 [pid 7037] setpgid(0, 0 [pid 7036] close(3 [pid 7035] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7038] chdir("./324" [pid 7037] <... setpgid resumed>) = 0 [pid 7036] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7036] symlink("/dev/binderfs", "./binderfs" [pid 7038] <... chdir resumed>) = 0 [pid 7037] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 4 [pid 7038] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7037] write(3, "1000", 4 [pid 7036] <... symlink resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7038] <... prctl resumed>) = 0 [pid 7037] <... write resumed>) = 4 [pid 7038] setpgid(0, 0 [pid 7037] close(3 [pid 7036] memfd_create("syzkaller", 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7038] <... setpgid resumed>) = 0 [pid 7037] <... close resumed>) = 0 [pid 7038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7037] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(4, [pid 7038] <... openat resumed>) = 3 [pid 7037] <... symlink resumed>) = 0 [pid 7036] <... memfd_create resumed>) = 3 [pid 7035] <... write resumed>) = 524288 [pid 7034] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7037] memfd_create("syzkaller", 0 [pid 7034] exit_group(0 [pid 7036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] getdents64(4, [pid 7034] <... exit_group resumed>) = ? [pid 7036] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7038] write(3, "1000", 4 [pid 7037] <... memfd_create resumed>) = 3 [pid 7038] <... write resumed>) = 4 [pid 7037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7038] close(3 [pid 7037] <... mmap resumed>) = 0x7f943d000000 [pid 7038] <... close resumed>) = 0 [pid 7037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7034] +++ exited with 0 +++ [pid 5071] close(4 [pid 7038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... close resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7034, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] rmdir("./324/file1" [pid 7038] memfd_create("syzkaller", 0) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 7038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] getdents64(3, [pid 7038] <... mmap resumed>) = 0x7f943d000000 [pid 5072] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 5072] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7035] munmap(0x7f943d000000, 138412032 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 7035] <... munmap resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 5071] rmdir("./324" [pid 7036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7037] <... write resumed>) = 524288 [pid 7035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7035] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7038] <... write resumed>) = 524288 [pid 7035] close(4 [pid 5072] getdents64(3, [pid 5071] mkdir("./325", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... mkdir resumed>) = 0 [pid 5072] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7036] <... write resumed>) = 524288 [pid 5072] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5071] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7037] munmap(0x7f943d000000, 138412032) = 0 [pid 7035] <... close resumed>) = 0 [pid 5072] unlink("./323/binderfs" [pid 7037] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7035] exit_group(0 [pid 5072] <... unlink resumed>) = 0 [pid 7037] ioctl(4, LOOP_SET_FD, 3 [pid 7036] munmap(0x7f943d000000, 138412032 [pid 7035] <... exit_group resumed>) = ? [pid 7038] munmap(0x7f943d000000, 138412032 [pid 5072] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7038] <... munmap resumed>) = 0 [pid 7037] <... ioctl resumed>) = 0 [pid 7036] <... munmap resumed>) = 0 [pid 7035] +++ exited with 0 +++ [pid 7038] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7037] close(3 [pid 7036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7038] ioctl(4, LOOP_SET_FD, 3 [pid 7037] <... close resumed>) = 0 [pid 7036] <... openat resumed>) = 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7035, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7037] close(4) = 0 [pid 7037] mkdir("./file1", 0777) = 0 [pid 7038] <... ioctl resumed>) = 0 [pid 7036] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7037] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7038] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... ioctl resumed>) = 0 [pid 7038] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./323/file1", [pid 5074] newfstatat(3, "", [pid 7038] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 5072] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7038] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7038] mkdir("./file1", 0777 [pid 5072] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7038] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7036] <... ioctl resumed>) = 0 [pid 7038] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7037] <... mount resumed>) = 0 [pid 5074] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] close(3 [pid 7037] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7036] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 7036] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 7037] <... openat resumed>) = 3 [pid 7036] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7037] chdir("./file1" [pid 7036] <... close resumed>) = 0 [ 248.472687][ T7037] loop4: detected capacity change from 0 to 1024 [ 248.488261][ T7038] loop2: detected capacity change from 0 to 1024 [ 248.508102][ T7036] loop5: detected capacity change from 0 to 1024 [pid 5074] unlink("./324/binderfs" [pid 5072] <... close resumed>) = 0 [pid 7038] <... mount resumed>) = 0 [pid 7037] <... chdir resumed>) = 0 [pid 7036] mkdir("./file1", 0777 [pid 5072] rmdir("./323/file1" [pid 7037] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7037] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] truncate("./file1", 0 [pid 7038] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7036] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7039 attached [pid 7038] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7039 [pid 7039] set_robust_list(0x555583d53660, 24 [pid 7038] chdir("./file1" [pid 7036] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7039] <... set_robust_list resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 7039] chdir("./325") = 0 [pid 7039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7039] setpgid(0, 0 [pid 7038] <... chdir resumed>) = 0 [pid 7039] <... setpgid resumed>) = 0 [pid 7038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7038] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... close resumed>) = 0 [pid 7039] <... openat resumed>) = 3 [pid 7038] truncate("./file1", 0 [pid 7037] <... truncate resumed>) = 0 [pid 5072] rmdir("./323") = 0 [pid 7037] memfd_create("syzkaller", 0 [pid 5072] mkdir("./324", 0777 [pid 7039] write(3, "1000", 4 [pid 7037] <... memfd_create resumed>) = 4 [pid 7039] <... write resumed>) = 4 [pid 5072] <... mkdir resumed>) = 0 [pid 7039] close(3 [pid 7037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7039] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7039] symlink("/dev/binderfs", "./binderfs" [pid 7038] <... truncate resumed>) = 0 [pid 7037] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 3 [pid 7039] <... symlink resumed>) = 0 [pid 7038] memfd_create("syzkaller", 0 [pid 7036] <... mount resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7039] memfd_create("syzkaller", 0 [pid 7038] <... memfd_create resumed>) = 4 [pid 7036] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7039] <... memfd_create resumed>) = 3 [pid 7039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7036] <... openat resumed>) = 3 [pid 7039] <... mmap resumed>) = 0x7f943d000000 [pid 7038] <... mmap resumed>) = 0x7f943d000000 [pid 7036] chdir("./file1" [pid 7038] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7036] <... chdir resumed>) = 0 [pid 7036] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7036] truncate("./file1", 0 [pid 5074] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7038] <... write resumed>) = 524288 [pid 5074] newfstatat(AT_FDCWD, "./324/file1", [pid 7039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7039] <... write resumed>) = 524288 [pid 7037] <... write resumed>) = 524288 [pid 7036] <... truncate resumed>) = 0 [pid 5074] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7037] munmap(0x7f943d000000, 138412032 [pid 7036] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7036] <... memfd_create resumed>) = 4 [pid 7036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7037] <... munmap resumed>) = 0 [pid 7036] <... mmap resumed>) = 0x7f943d000000 [pid 5074] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7036] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 7038] munmap(0x7f943d000000, 138412032 [pid 7037] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7038] <... munmap resumed>) = 0 [pid 7037] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(4, [pid 7037] close(4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7038] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] getdents64(4, [pid 5072] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7038] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7038] close(4 [pid 5074] close(4 [pid 7037] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./324/file1") = 0 [pid 5072] close(3 [pid 7036] <... write resumed>) = 524288 [pid 5072] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7039] munmap(0x7f943d000000, 138412032 [pid 7037] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7039] <... munmap resumed>) = 0 [pid 7039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7038] <... close resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7040 [pid 5074] close(3) = 0 ./strace-static-x86_64: Process 7040 attached [pid 7039] ioctl(4, LOOP_SET_FD, 3 [pid 7038] exit_group(0 [pid 7037] <... exit_group resumed>) = ? [pid 5074] rmdir("./324" [pid 7040] set_robust_list(0x555583d53660, 24 [pid 7038] <... exit_group resumed>) = ? [pid 7037] +++ exited with 0 +++ [pid 7040] <... set_robust_list resumed>) = 0 [pid 7038] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7037, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... rmdir resumed>) = 0 [pid 7040] chdir("./324" [pid 7036] munmap(0x7f943d000000, 138412032 [pid 5074] mkdir("./325", 0777 [pid 7036] <... munmap resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7038, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] <... chdir resumed>) = 0 [pid 7036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7040] <... prctl resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 7040] setpgid(0, 0 [pid 5075] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 7040] <... setpgid resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 7040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7036] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 7036] close(4 [pid 7040] <... openat resumed>) = 3 [pid 7036] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] getdents64(3, [pid 7039] <... ioctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7039] close(3 [pid 5075] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] write(3, "1000", 4 [pid 5073] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7039] <... close resumed>) = 0 [pid 7039] close(4 [pid 7040] <... write resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7040] close(3) = 0 [pid 7039] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7039] mkdir("./file1", 0777) = 0 [pid 7039] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7040] symlink("/dev/binderfs", "./binderfs" [pid 5075] unlink("./323/binderfs" [pid 5073] newfstatat(AT_FDCWD, "./324/binderfs", [pid 7040] <... symlink resumed>) = 0 [pid 7040] memfd_create("syzkaller", 0) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] unlink("./324/binderfs") = 0 [pid 7040] <... mmap resumed>) = 0x7f943d000000 [pid 5073] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 7040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7039] <... mount resumed>) = 0 [pid 5075] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [ 248.658166][ T7039] loop0: detected capacity change from 0 to 1024 [pid 7039] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7036] exit_group(0 [pid 7039] <... openat resumed>) = 3 [pid 7036] <... exit_group resumed>) = ? [pid 7039] chdir("./file1" [pid 7036] +++ exited with 0 +++ [pid 7039] <... chdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7036, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7039] truncate("./file1", 0 [pid 5076] umount2("./320", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./324/file1", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7040] <... write resumed>) = 524288 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] newfstatat(AT_FDCWD, "./323/file1", [pid 7040] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./320/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7040] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5073] newfstatat(4, "", [pid 7040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7039] <... truncate resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7040] <... openat resumed>) = 4 [pid 7039] memfd_create("syzkaller", 0 [pid 5076] unlink("./320/binderfs" [pid 5075] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 7040] ioctl(4, LOOP_SET_FD, 3 [pid 7039] <... memfd_create resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 7039] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7039] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(3 [pid 5073] close(4 [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] rmdir("./324/file1" [pid 5075] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7041 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 ./strace-static-x86_64: Process 7041 attached [pid 5075] <... openat resumed>) = 4 [pid 5073] rmdir("./324") = 0 [pid 7041] set_robust_list(0x555583d53660, 24 [pid 5075] newfstatat(4, "", [pid 7041] <... set_robust_list resumed>) = 0 [pid 5073] mkdir("./325", 0777 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 7041] chdir("./325" [pid 5075] getdents64(4, [pid 7041] <... chdir resumed>) = 0 [pid 7039] <... write resumed>) = 524288 [pid 5076] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7040] <... ioctl resumed>) = 0 [pid 7040] close(3 [pid 7041] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7040] <... close resumed>) = 0 [pid 7040] close(4 [pid 7041] <... prctl resumed>) = 0 [pid 7040] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7040] mkdir("./file1", 0777 [pid 5073] <... openat resumed>) = 3 [pid 7041] setpgid(0, 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7041] <... setpgid resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7040] <... mkdir resumed>) = 0 [pid 7041] write(3, "1000", 4) = 4 [pid 7041] close(3) = 0 [pid 7041] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7041] memfd_create("syzkaller", 0 [pid 7040] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 7041] <... memfd_create resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./320/file1", [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(4 [pid 5076] umount2("./320/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7039] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./323/file1" [pid 7041] <... mmap resumed>) = 0x7f943d000000 [pid 7039] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./320/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 7039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7039] close(4) = 0 [ 248.751804][ T7040] loop1: detected capacity change from 0 to 1024 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7040] <... mount resumed>) = 0 [pid 7039] exit_group(0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7039] <... exit_group resumed>) = ? [pid 5075] close(3 [pid 7040] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7039] +++ exited with 0 +++ [pid 5076] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7041] <... write resumed>) = 524288 [pid 7040] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] rmdir("./323" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7039, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7040] chdir("./file1" [pid 5076] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5071] umount2("./325", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] mkdir("./324", 0777 [pid 7040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] close(4 [pid 7041] munmap(0x7f943d000000, 138412032 [pid 5076] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7041] <... munmap resumed>) = 0 [pid 7040] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] rmdir("./320/file1" [pid 5075] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7040] truncate("./file1", 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5076] <... rmdir resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 5076] getdents64(3, [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7040] <... truncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] umount2("./325/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7040] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7041] <... openat resumed>) = 4 [pid 7040] <... memfd_create resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7041] ioctl(4, LOOP_SET_FD, 3 [pid 5076] rmdir("./320" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7042 [pid 5071] newfstatat(AT_FDCWD, "./325/binderfs", [pid 7040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./325/binderfs"./strace-static-x86_64: Process 7042 attached [pid 7040] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... unlink resumed>) = 0 [pid 7042] set_robust_list(0x555583d53660, 24 [pid 5071] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7042] <... set_robust_list resumed>) = 0 [pid 5076] mkdir("./321", 0777 [pid 7042] chdir("./325") = 0 [pid 7042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7042] setpgid(0, 0) = 0 [pid 7042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7042] write(3, "1000", 4) = 4 [pid 7042] close(3) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7042] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7042] <... symlink resumed>) = 0 [pid 7041] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7042] memfd_create("syzkaller", 0 [pid 7041] close(3 [pid 7040] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./325/file1", [pid 7042] <... memfd_create resumed>) = 3 [pid 7041] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7041] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7042] <... mmap resumed>) = 0x7f943d000000 [pid 7041] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7041] mkdir("./file1", 0777) = 0 [pid 5071] openat(AT_FDCWD, "./325/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", [pid 7041] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./325/file1") = 0 [pid 7041] <... mount resumed>) = 0 [pid 7040] <... write resumed>) = 524288 [pid 5071] getdents64(3, [pid 7041] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7041] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 7041] chdir("./file1") = 0 [pid 5071] close(3 [pid 7041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 7041] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] rmdir("./325") = 0 [pid 7041] truncate("./file1", 0) = 0 [pid 7041] memfd_create("syzkaller", 0 [pid 5071] mkdir("./326", 0777 [pid 7041] <... memfd_create resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [ 248.859046][ T7041] loop3: detected capacity change from 0 to 1024 [pid 7041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7041] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7040] munmap(0x7f943d000000, 138412032 [pid 5075] close(3 [pid 5071] <... openat resumed>) = 3 [pid 7042] <... write resumed>) = 524288 [pid 7040] <... munmap resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7040] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7040] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7042] munmap(0x7f943d000000, 138412032 [pid 7040] close(4./strace-static-x86_64: Process 7043 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7043 [pid 7042] <... munmap resumed>) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7043] set_robust_list(0x555583d53660, 24 [pid 7042] ioctl(4, LOOP_SET_FD, 3 [pid 7041] <... write resumed>) = 524288 [pid 7040] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7043] <... set_robust_list resumed>) = 0 [pid 7042] <... ioctl resumed>) = 0 [pid 7041] munmap(0x7f943d000000, 138412032 [pid 7040] exit_group(0 [pid 7043] chdir("./324" [pid 7041] <... munmap resumed>) = 0 [pid 7040] <... exit_group resumed>) = ? [pid 7043] <... chdir resumed>) = 0 [pid 7042] close(3 [pid 7040] +++ exited with 0 +++ [pid 5076] close(3 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7043] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7040, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7043] <... prctl resumed>) = 0 [pid 7042] <... close resumed>) = 0 [pid 7041] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7043] setpgid(0, 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7043] <... setpgid resumed>) = 0 [pid 7043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7042] close(4 [pid 7041] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7042] <... close resumed>) = 0 [pid 7041] close(4 [pid 7043] <... openat resumed>) = 3 [pid 5072] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7043] write(3, "1000", 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7043] <... write resumed>) = 4 [pid 7042] mkdir("./file1", 0777 [pid 5072] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7043] close(3 [pid 7042] <... mkdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7044 [pid 7043] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7044 attached [pid 7043] symlink("/dev/binderfs", "./binderfs" [pid 7042] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7041] <... close resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 7044] set_robust_list(0x555583d53660, 24 [pid 7043] <... symlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7044] <... set_robust_list resumed>) = 0 [pid 7043] memfd_create("syzkaller", 0 [pid 5072] getdents64(3, [ 248.940084][ T7042] loop2: detected capacity change from 0 to 1024 [pid 5071] close(3 [pid 7044] chdir("./321" [pid 7043] <... memfd_create resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... close resumed>) = 0 [pid 7043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7044] <... chdir resumed>) = 0 [pid 7043] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./324/binderfs", ./strace-static-x86_64: Process 7045 attached [pid 7044] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7045 [pid 7044] <... prctl resumed>) = 0 [pid 5072] unlink("./324/binderfs") = 0 [pid 7045] set_robust_list(0x555583d53660, 24 [pid 7044] setpgid(0, 0 [pid 5072] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7045] <... set_robust_list resumed>) = 0 [pid 7044] <... setpgid resumed>) = 0 [pid 7045] chdir("./326" [pid 7044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7045] <... chdir resumed>) = 0 [pid 7045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7044] <... openat resumed>) = 3 [pid 7042] <... mount resumed>) = 0 [pid 7043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7042] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7041] exit_group(0 [pid 7045] setpgid(0, 0) = 0 [pid 7044] write(3, "1000", 4 [pid 7042] <... openat resumed>) = 3 [pid 7044] <... write resumed>) = 4 [pid 7042] chdir("./file1" [pid 7041] <... exit_group resumed>) = ? [pid 7045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7044] close(3 [pid 7042] <... chdir resumed>) = 0 [pid 7041] +++ exited with 0 +++ [pid 5072] <... umount2 resumed>) = 0 [pid 7044] <... close resumed>) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7045] <... openat resumed>) = 3 [pid 7044] symlink("/dev/binderfs", "./binderfs" [pid 7042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7041, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7044] <... symlink resumed>) = 0 [pid 7042] truncate("./file1", 0 [pid 5074] umount2("./325", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7044] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7042] <... truncate resumed>) = 0 [pid 5074] umount2("./325/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./324/file1", [pid 7044] <... memfd_create resumed>) = 3 [pid 7042] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7045] write(3, "1000", 4 [pid 7044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7042] <... memfd_create resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./325/binderfs", [pid 5072] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7045] <... write resumed>) = 4 [pid 7044] <... mmap resumed>) = 0x7f943d000000 [pid 7042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7042] <... mmap resumed>) = 0x7f943d000000 [pid 5074] unlink("./325/binderfs" [pid 5072] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7042] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7045] close(3 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5074] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7045] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 7045] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7045] <... symlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./324/file1") = 0 [pid 5072] getdents64(3, [pid 7044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7045] memfd_create("syzkaller", 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 7045] <... memfd_create resumed>) = 3 [pid 7043] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7043] munmap(0x7f943d000000, 138412032 [pid 7045] <... mmap resumed>) = 0x7f943d000000 [pid 7043] <... munmap resumed>) = 0 [pid 7042] <... write resumed>) = 524288 [pid 5072] rmdir("./324") = 0 [pid 5072] mkdir("./325", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] newfstatat(AT_FDCWD, "./325/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] openat(AT_FDCWD, "./325/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7043] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7043] ioctl(4, LOOP_SET_FD, 3 [pid 5074] getdents64(4, [pid 7042] munmap(0x7f943d000000, 138412032 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7042] <... munmap resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./325/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 7042] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] rmdir("./325") = 0 [pid 7042] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7042] close(4 [pid 5074] mkdir("./326", 0777 [pid 7044] <... write resumed>) = 524288 [pid 5074] <... mkdir resumed>) = 0 [pid 7045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7044] munmap(0x7f943d000000, 138412032 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7044] <... munmap resumed>) = 0 [pid 7042] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7044] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7044] ioctl(4, LOOP_SET_FD, 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7042] exit_group(0 [pid 7045] <... write resumed>) = 524288 [pid 7044] <... ioctl resumed>) = 0 [pid 7043] <... ioctl resumed>) = 0 [pid 7045] munmap(0x7f943d000000, 138412032 [pid 7044] close(3 [pid 7043] close(3 [pid 7042] <... exit_group resumed>) = ? [pid 7045] <... munmap resumed>) = 0 [pid 7044] <... close resumed>) = 0 [pid 7043] <... close resumed>) = 0 [pid 7045] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7044] close(4 [pid 7043] close(4 [pid 7045] <... openat resumed>) = 4 [pid 7044] <... close resumed>) = 0 [pid 7044] mkdir("./file1", 0777 [pid 7045] ioctl(4, LOOP_SET_FD, 3 [pid 7044] <... mkdir resumed>) = 0 [pid 7043] <... close resumed>) = 0 [pid 7042] +++ exited with 0 +++ [pid 7045] <... ioctl resumed>) = 0 [pid 7044] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7043] mkdir("./file1", 0777 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7042, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./325", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7045] close(3) = 0 [pid 7045] close(4) = 0 [pid 7045] mkdir("./file1", 0777 [pid 7044] <... mount resumed>) = 0 [pid 7043] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... ioctl resumed>) = 0 [pid 7044] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7043] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7045] <... mkdir resumed>) = 0 [pid 7044] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] close(3 [pid 5073] <... openat resumed>) = 3 [ 249.081649][ T7043] loop4: detected capacity change from 0 to 1024 [ 249.098299][ T7044] loop5: detected capacity change from 0 to 1024 [ 249.115829][ T7045] loop0: detected capacity change from 0 to 1024 [pid 5073] newfstatat(3, "", [pid 7045] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7044] chdir("./file1" [pid 7043] <... mount resumed>) = 0 [pid 5074] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... close resumed>) = 0 [pid 7044] <... chdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7044] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./325/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7044] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7043] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(AT_FDCWD, "./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7044] truncate("./file1", 0 [pid 5073] unlink("./325/binderfs" [pid 7043] <... openat resumed>) = 3 [pid 5073] <... unlink resumed>) = 0 [pid 5073] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7045] <... mount resumed>) = 0 [pid 7043] chdir("./file1" [pid 7045] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7043] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7047 attached [pid 7045] <... openat resumed>) = 3 [pid 7043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7047 ./strace-static-x86_64: Process 7046 attached [pid 7047] set_robust_list(0x555583d53660, 24 [pid 7043] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7047] <... set_robust_list resumed>) = 0 [pid 7045] chdir("./file1" [pid 7044] <... truncate resumed>) = 0 [pid 7043] truncate("./file1", 0 [pid 7046] set_robust_list(0x555583d53660, 24 [pid 7047] chdir("./325" [pid 7045] <... chdir resumed>) = 0 [pid 7044] memfd_create("syzkaller", 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7046 [pid 7046] <... set_robust_list resumed>) = 0 [pid 7047] <... chdir resumed>) = 0 [pid 7045] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7044] <... memfd_create resumed>) = 4 [pid 7046] chdir("./326" [pid 7047] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7045] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7047] <... prctl resumed>) = 0 [pid 7045] truncate("./file1", 0 [pid 7044] <... mmap resumed>) = 0x7f943d000000 [pid 7046] <... chdir resumed>) = 0 [pid 7047] setpgid(0, 0 [pid 7044] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7043] <... truncate resumed>) = 0 [pid 5073] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7047] <... setpgid resumed>) = 0 [pid 7046] <... prctl resumed>) = 0 [pid 7046] setpgid(0, 0 [pid 7043] memfd_create("syzkaller", 0 [pid 7046] <... setpgid resumed>) = 0 [pid 7046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7045] <... truncate resumed>) = 0 [pid 7043] <... memfd_create resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./325/file1", [pid 7045] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7046] <... openat resumed>) = 3 [pid 7047] <... openat resumed>) = 3 [pid 7043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7047] write(3, "1000", 4 [pid 7045] <... memfd_create resumed>) = 4 [pid 5073] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7047] <... write resumed>) = 4 [pid 7045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7043] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7046] write(3, "1000", 4 [pid 7047] close(3 [pid 7046] <... write resumed>) = 4 [pid 7046] close(3) = 0 [pid 7046] symlink("/dev/binderfs", "./binderfs" [pid 7047] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./325/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7046] <... symlink resumed>) = 0 [pid 7047] symlink("/dev/binderfs", "./binderfs" [pid 7045] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... openat resumed>) = 4 [pid 7046] memfd_create("syzkaller", 0 [pid 7047] <... symlink resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7047] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7046] <... memfd_create resumed>) = 3 [pid 7047] <... memfd_create resumed>) = 3 [pid 7045] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(4, [pid 7047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7047] <... mmap resumed>) = 0x7f943d000000 [pid 5073] getdents64(4, [pid 7047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7045] <... write resumed>) = 524288 [pid 7044] <... write resumed>) = 524288 [pid 7043] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7046] <... mmap resumed>) = 0x7f943d000000 [pid 5073] close(4) = 0 [pid 5073] rmdir("./325/file1") = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./325") = 0 [pid 7044] munmap(0x7f943d000000, 138412032) = 0 [pid 7046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] mkdir("./326", 0777 [pid 7044] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... mkdir resumed>) = 0 [pid 7044] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7045] munmap(0x7f943d000000, 138412032 [pid 7044] close(4 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7045] <... munmap resumed>) = 0 [pid 7045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7045] close(4 [pid 7044] <... close resumed>) = 0 [pid 7047] <... write resumed>) = 524288 [pid 7043] <... write resumed>) = 524288 [pid 7047] munmap(0x7f943d000000, 138412032 [pid 7044] exit_group(0 [pid 7047] <... munmap resumed>) = 0 [pid 7044] <... exit_group resumed>) = ? [pid 7043] munmap(0x7f943d000000, 138412032) = 0 [pid 7046] <... write resumed>) = 524288 [pid 7047] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7045] <... close resumed>) = 0 [pid 7044] +++ exited with 0 +++ [pid 7045] exit_group(0) = ? [pid 7043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7044, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] umount2("./321", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7047] <... openat resumed>) = 4 [pid 7043] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... openat resumed>) = 3 [pid 7047] ioctl(4, LOOP_SET_FD, 3 [pid 7043] close(4 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 7046] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7045] +++ exited with 0 +++ [pid 7043] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7045, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7046] <... munmap resumed>) = 0 [pid 5076] umount2("./321/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 7046] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7046] <... openat resumed>) = 4 [pid 7043] exit_group(0 [pid 5076] newfstatat(AT_FDCWD, "./321/binderfs", [pid 7046] ioctl(4, LOOP_SET_FD, 3 [pid 7043] <... exit_group resumed>) = ? [pid 7043] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./321/binderfs" [pid 5071] umount2("./326", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7043, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7047] <... ioctl resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] close(3 [pid 5071] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7047] close(3 [pid 5075] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7046] <... ioctl resumed>) = 0 [pid 7047] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(3, "", [pid 7046] close(3 [pid 7047] close(4 [pid 5075] newfstatat(3, "", [pid 7046] <... close resumed>) = 0 [pid 7047] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7046] close(4 [pid 7047] mkdir("./file1", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7048 attached [pid 7046] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 7048] set_robust_list(0x555583d53660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7048 [pid 7048] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7048] chdir("./326") = 0 [pid 7048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7048] setpgid(0, 0 [pid 5071] umount2("./326/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7048] <... setpgid resumed>) = 0 [pid 7047] <... mkdir resumed>) = 0 [pid 7048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7046] mkdir("./file1", 0777 [pid 5075] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7048] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./326/binderfs", [pid 7048] write(3, "1000", 4 [pid 7046] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7048] <... write resumed>) = 4 [pid 7048] close(3) = 0 [pid 7048] symlink("/dev/binderfs", "./binderfs" [pid 7047] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] unlink("./326/binderfs" [pid 7048] <... symlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7048] memfd_create("syzkaller", 0 [pid 5075] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5071] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7048] <... memfd_create resumed>) = 3 [pid 7046] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] unlink("./324/binderfs" [pid 5071] <... umount2 resumed>) = 0 [ 249.282134][ T7047] loop1: detected capacity change from 0 to 1024 [ 249.317489][ T7046] loop3: detected capacity change from 0 to 1024 [pid 7048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./326/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./326/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./326/file1") = 0 [pid 7048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] getdents64(3, [pid 7047] <... mount resumed>) = 0 [pid 5076] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7047] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(AT_FDCWD, "./321/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7047] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7047] chdir("./file1" [pid 5076] umount2("./321/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 7047] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7047] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7048] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "./321/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7048] munmap(0x7f943d000000, 138412032 [pid 7046] <... mount resumed>) = 0 [pid 7047] truncate("./file1", 0 [pid 5071] rmdir("./326" [pid 7048] <... munmap resumed>) = 0 [pid 7046] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 7048] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./324/file1", [pid 7048] <... openat resumed>) = 4 [pid 7046] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7048] ioctl(4, LOOP_SET_FD, 3 [pid 7046] chdir("./file1" [pid 5076] newfstatat(4, "", [pid 5075] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7047] <... truncate resumed>) = 0 [pid 5071] mkdir("./327", 0777 [pid 7046] <... chdir resumed>) = 0 [pid 7047] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7046] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] getdents64(4, [pid 7047] <... memfd_create resumed>) = 4 [pid 7046] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7046] truncate("./file1", 0 [pid 7047] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5076] rmdir("./321/file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7048] <... ioctl resumed>) = 0 [pid 7046] <... truncate resumed>) = 0 [pid 7047] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5075] getdents64(4, [pid 7048] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7048] <... close resumed>) = 0 [pid 5075] close(4 [pid 7048] close(4 [pid 5075] <... close resumed>) = 0 [pid 7046] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 7048] <... close resumed>) = 0 [pid 7046] <... memfd_create resumed>) = 4 [pid 7047] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 5075] rmdir("./324/file1" [pid 7048] mkdir("./file1", 0777 [pid 7046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7047] munmap(0x7f943d000000, 138412032 [pid 5076] rmdir("./321" [pid 5075] <... rmdir resumed>) = 0 [pid 7046] <... mmap resumed>) = 0x7f943d000000 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./324" [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [ 249.402685][ T7048] loop2: detected capacity change from 0 to 1024 [pid 5075] mkdir("./325", 0777 [pid 7048] <... mkdir resumed>) = 0 [pid 7046] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7047] <... munmap resumed>) = 0 [pid 5076] mkdir("./322", 0777 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7048] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7046] <... write resumed>) = 524288 [pid 7047] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 7047] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] close(3 [pid 7047] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7047] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7049 attached [pid 7049] set_robust_list(0x555583d53660, 24 [pid 7047] exit_group(0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7049 [pid 7049] <... set_robust_list resumed>) = 0 [pid 7047] <... exit_group resumed>) = ? [pid 7049] chdir("./327") = 0 [pid 7049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7048] <... mount resumed>) = 0 [pid 7047] +++ exited with 0 +++ [pid 7049] setpgid(0, 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7047, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7049] <... setpgid resumed>) = 0 [pid 7048] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7048] <... openat resumed>) = 3 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7048] chdir("./file1" [pid 7049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7048] <... chdir resumed>) = 0 [pid 7048] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7046] munmap(0x7f943d000000, 138412032 [pid 7048] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7049] <... openat resumed>) = 3 [pid 7048] truncate("./file1", 0 [pid 7046] <... munmap resumed>) = 0 [pid 5072] umount2("./325", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7049] write(3, "1000", 4 [pid 5072] <... openat resumed>) = 3 [pid 7049] <... write resumed>) = 4 [pid 5072] newfstatat(3, "", [pid 7048] <... truncate resumed>) = 0 [pid 7046] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7049] close(3 [pid 7048] memfd_create("syzkaller", 0 [pid 7046] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] getdents64(3, [pid 7049] <... close resumed>) = 0 [pid 7048] <... memfd_create resumed>) = 4 [pid 7046] close(4 [pid 7049] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7049] <... symlink resumed>) = 0 [pid 7048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] umount2("./325/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7049] memfd_create("syzkaller", 0 [pid 7048] <... mmap resumed>) = 0x7f943d000000 [pid 7046] <... close resumed>) = 0 [pid 7049] <... memfd_create resumed>) = 3 [pid 7048] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] newfstatat(AT_FDCWD, "./325/binderfs", [pid 7049] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./325/binderfs") = 0 [pid 5072] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7046] exit_group(0 [pid 7048] <... write resumed>) = 524288 [pid 7046] <... exit_group resumed>) = ? [pid 7049] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7046] +++ exited with 0 +++ [pid 7048] munmap(0x7f943d000000, 138412032 [pid 7049] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7048] <... munmap resumed>) = 0 [pid 7048] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7048] close(4) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7046, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./326", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./325/file1", [pid 5076] <... close resumed>) = 0 [pid 5075] close(3 [pid 5074] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] newfstatat(3, "", ./strace-static-x86_64: Process 7050 attached [pid 7048] exit_group(0 [pid 7050] set_robust_list(0x555583d53660, 24) = 0 [pid 7048] <... exit_group resumed>) = ? [pid 7050] chdir("./322" [pid 7049] munmap(0x7f943d000000, 138412032 [pid 7048] +++ exited with 0 +++ [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7050 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7051 attached [pid 7050] <... chdir resumed>) = 0 [pid 7049] <... munmap resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] openat(AT_FDCWD, "./325/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7051] set_robust_list(0x555583d53660, 24 [pid 7050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7051 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7048, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7051] <... set_robust_list resumed>) = 0 [pid 7050] <... prctl resumed>) = 0 [pid 7049] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./326/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... openat resumed>) = 4 [pid 7051] chdir("./325" [pid 7050] setpgid(0, 0 [pid 7049] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... restart_syscall resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 7051] <... chdir resumed>) = 0 [pid 7050] <... setpgid resumed>) = 0 [pid 7049] ioctl(4, LOOP_SET_FD, 3 [pid 5074] newfstatat(AT_FDCWD, "./326/binderfs", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] umount2("./326", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7051] <... prctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7051] setpgid(0, 0 [pid 7050] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7051] <... setpgid resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7050] write(3, "1000", 4 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7050] <... write resumed>) = 4 [pid 7049] <... ioctl resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] getdents64(4, [pid 7051] <... openat resumed>) = 3 [pid 7050] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7050] <... close resumed>) = 0 [pid 5073] umount2("./326/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7051] write(3, "1000", 4 [pid 7050] symlink("/dev/binderfs", "./binderfs" [pid 5074] unlink("./326/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 7051] <... write resumed>) = 4 [pid 7050] <... symlink resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./326/binderfs", [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7051] close(3 [pid 7050] memfd_create("syzkaller", 0 [pid 5074] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7051] <... close resumed>) = 0 [pid 5073] unlink("./326/binderfs" [pid 5072] close(4 [pid 7051] symlink("/dev/binderfs", "./binderfs" [pid 7050] <... memfd_create resumed>) = 3 [pid 7051] <... symlink resumed>) = 0 [pid 7050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./325/file1" [pid 7050] <... mmap resumed>) = 0x7f943d000000 [pid 5073] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 7051] memfd_create("syzkaller", 0 [pid 5072] getdents64(3, [pid 7050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7051] <... memfd_create resumed>) = 3 [pid 5072] close(3 [pid 7051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./325" [pid 7051] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] mkdir("./326", 0777 [pid 7049] close(3 [pid 5074] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7050] <... write resumed>) = 524288 [pid 7049] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7049] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7049] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7049] mkdir("./file1", 0777 [pid 5072] <... openat resumed>) = 3 [pid 7049] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./326/file1", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7049] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./326/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./326/file1", [ 249.566721][ T7049] loop0: detected capacity change from 0 to 1024 [pid 7051] <... write resumed>) = 524288 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7051] munmap(0x7f943d000000, 138412032 [pid 7050] munmap(0x7f943d000000, 138412032 [pid 7049] <... mount resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7051] <... munmap resumed>) = 0 [pid 7050] <... munmap resumed>) = 0 [pid 7049] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 7049] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./326/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7051] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... openat resumed>) = 4 [pid 7051] <... openat resumed>) = 4 [pid 7050] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7049] chdir("./file1" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(4, "", [pid 7051] ioctl(4, LOOP_SET_FD, 3 [pid 7049] <... chdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7050] <... openat resumed>) = 4 [pid 7049] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] getdents64(4, [pid 7050] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./326/file1" [pid 7049] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./326" [pid 7049] truncate("./file1", 0 [pid 5074] close(4 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./327", 0777 [pid 5074] <... close resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5074] rmdir("./326/file1" [pid 7050] <... ioctl resumed>) = 0 [pid 7049] <... truncate resumed>) = 0 [pid 7051] <... ioctl resumed>) = 0 [pid 7049] memfd_create("syzkaller", 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 7051] close(3 [pid 5073] <... openat resumed>) = 3 [pid 7051] <... close resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7051] close(4) = 0 [pid 7051] mkdir("./file1", 0777) = 0 [pid 7051] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... ioctl resumed>) = 0 [pid 5072] close(3 [pid 5074] getdents64(3, [pid 7049] <... memfd_create resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 7049] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... close resumed>) = 0 [pid 7049] <... mmap resumed>) = 0x7f943d000000 [pid 5074] rmdir("./326") = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7052 [pid 7050] close(3./strace-static-x86_64: Process 7052 attached [pid 7049] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] mkdir("./327", 0777 [pid 7052] set_robust_list(0x555583d53660, 24 [pid 5074] <... mkdir resumed>) = 0 [pid 7050] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7050] close(4) = 0 [ 249.637837][ T7051] loop4: detected capacity change from 0 to 1024 [ 249.665338][ T7050] loop5: detected capacity change from 0 to 1024 [pid 7050] mkdir("./file1", 0777 [pid 7052] <... set_robust_list resumed>) = 0 [pid 7051] <... mount resumed>) = 0 [pid 7050] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7052] chdir("./326" [pid 7051] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7052] <... chdir resumed>) = 0 [pid 7051] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 7052] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7051] chdir("./file1" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7052] <... prctl resumed>) = 0 [pid 7051] <... chdir resumed>) = 0 [pid 7050] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7051] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7052] setpgid(0, 0 [pid 7051] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7052] <... setpgid resumed>) = 0 [pid 7051] truncate("./file1", 0 [pid 5073] close(3 [pid 7052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... close resumed>) = 0 [pid 7052] <... openat resumed>) = 3 [pid 7049] <... write resumed>) = 524288 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7052] write(3, "1000", 4 [pid 7051] <... truncate resumed>) = 0 [pid 7050] <... mount resumed>) = 0 [pid 7052] <... write resumed>) = 4 [pid 7052] close(3 [pid 7051] memfd_create("syzkaller", 0 [pid 7049] munmap(0x7f943d000000, 138412032 [pid 7051] <... memfd_create resumed>) = 4 [pid 7050] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7050] <... openat resumed>) = 3 [pid 7051] <... mmap resumed>) = 0x7f943d000000 [pid 7050] chdir("./file1") = 0 [pid 7052] <... close resumed>) = 0 [pid 7050] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 7053 attached [pid 7052] symlink("/dev/binderfs", "./binderfs" [pid 7051] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7050] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7049] <... munmap resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7053 [pid 7053] set_robust_list(0x555583d53660, 24 [pid 7052] <... symlink resumed>) = 0 [pid 7050] truncate("./file1", 0 [pid 7053] <... set_robust_list resumed>) = 0 [pid 7052] memfd_create("syzkaller", 0 [pid 7053] chdir("./327") = 0 [pid 7053] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7052] <... memfd_create resumed>) = 3 [pid 7049] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7053] <... prctl resumed>) = 0 [pid 7052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7051] <... write resumed>) = 524288 [pid 7050] <... truncate resumed>) = 0 [pid 7049] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7053] setpgid(0, 0) = 0 [pid 7053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7050] memfd_create("syzkaller", 0) = 4 [pid 7050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7052] <... mmap resumed>) = 0x7f943d000000 [pid 7050] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7049] close(4 [pid 5074] <... ioctl resumed>) = 0 [pid 7053] write(3, "1000", 4) = 4 [pid 7053] close(3) = 0 [pid 7053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7053] memfd_create("syzkaller", 0 [pid 7049] <... close resumed>) = 0 [pid 7053] <... memfd_create resumed>) = 3 [pid 7053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7051] munmap(0x7f943d000000, 138412032 [pid 7053] <... mmap resumed>) = 0x7f943d000000 [pid 7051] <... munmap resumed>) = 0 [pid 7052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7051] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7051] close(4 [pid 7050] <... write resumed>) = 524288 [pid 7049] exit_group(0 [pid 5074] close(3 [pid 7049] <... exit_group resumed>) = ? [pid 7049] +++ exited with 0 +++ [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7053] <... write resumed>) = 524288 ./strace-static-x86_64: Process 7054 attached [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7049, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] umount2("./327", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7054] set_robust_list(0x555583d53660, 24 [pid 7052] <... write resumed>) = 524288 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7054] <... set_robust_list resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7054 [pid 5071] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7054] chdir("./327" [pid 5071] <... openat resumed>) = 3 [pid 7054] <... chdir resumed>) = 0 [pid 7054] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] newfstatat(3, "", [pid 7050] munmap(0x7f943d000000, 138412032 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7054] <... prctl resumed>) = 0 [pid 7051] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 7051] exit_group(0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7054] setpgid(0, 0 [pid 7052] munmap(0x7f943d000000, 138412032 [pid 7051] <... exit_group resumed>) = ? [pid 7050] <... munmap resumed>) = 0 [pid 5071] umount2("./327/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7054] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7052] <... munmap resumed>) = 0 [pid 7051] +++ exited with 0 +++ [pid 7050] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./327/binderfs", [pid 7054] <... openat resumed>) = 3 [pid 7052] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7050] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7051, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7054] write(3, "1000", 4 [pid 7052] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7054] <... write resumed>) = 4 [pid 7053] munmap(0x7f943d000000, 138412032 [pid 7052] ioctl(4, LOOP_SET_FD, 3 [pid 7050] close(4 [pid 5071] unlink("./327/binderfs" [pid 7054] close(3 [pid 7053] <... munmap resumed>) = 0 [pid 7050] <... close resumed>) = 0 [pid 5075] umount2("./325", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 7053] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7054] <... close resumed>) = 0 [pid 7053] ioctl(4, LOOP_SET_FD, 3 [pid 7052] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7054] symlink("/dev/binderfs", "./binderfs" [pid 7053] <... ioctl resumed>) = 0 [pid 7052] close(3 [pid 5075] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7054] <... symlink resumed>) = 0 [pid 7052] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7052] close(4 [pid 5075] newfstatat(3, "", [pid 7052] <... close resumed>) = 0 [pid 7050] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7052] mkdir("./file1", 0777 [pid 7050] <... exit_group resumed>) = ? [pid 5075] getdents64(3, [pid 7052] <... mkdir resumed>) = 0 [pid 7050] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7050, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] umount2("./325/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./325/binderfs", [pid 5076] umount2("./322", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] unlink("./325/binderfs" [pid 5076] newfstatat(3, "", [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7054] memfd_create("syzkaller", 0 [pid 7052] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] getdents64(3, [pid 5071] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7054] <... memfd_create resumed>) = 3 [pid 5076] umount2("./322/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] newfstatat(AT_FDCWD, "./327/file1", [pid 7054] <... mmap resumed>) = 0x7f943d000000 [pid 7053] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7053] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7053] close(4 [pid 5076] newfstatat(AT_FDCWD, "./322/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./327/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7053] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 4 [ 249.845951][ T7052] loop1: detected capacity change from 0 to 1024 [ 249.855228][ T7053] loop2: detected capacity change from 0 to 1024 [pid 7053] mkdir("./file1", 0777 [pid 5076] unlink("./322/binderfs" [pid 5075] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 7053] <... mkdir resumed>) = 0 [pid 7052] <... mount resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./325/file1", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(4, [pid 5075] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7053] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7052] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7052] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./325/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 7053] <... mount resumed>) = 0 [pid 7052] chdir("./file1" [pid 5076] <... umount2 resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7054] <... write resumed>) = 524288 [pid 7052] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(4 [pid 7054] munmap(0x7f943d000000, 138412032 [pid 7053] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7052] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] getdents64(4, [pid 5071] <... close resumed>) = 0 [pid 7053] <... openat resumed>) = 3 [pid 7052] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] rmdir("./327/file1" [pid 7054] <... munmap resumed>) = 0 [pid 7053] chdir("./file1" [pid 7052] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 7053] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./322/file1", [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7054] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7053] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(4 [pid 5071] getdents64(3, [pid 7054] <... openat resumed>) = 4 [pid 7053] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./322/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 7054] ioctl(4, LOOP_SET_FD, 3 [pid 7053] truncate("./file1", 0 [pid 7052] <... truncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./325/file1" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "./322/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(3, [pid 7052] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5076] getdents64(4, [pid 5075] close(3 [pid 7053] <... truncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7053] memfd_create("syzkaller", 0 [pid 5076] close(4 [pid 5075] rmdir("./325" [pid 7052] <... memfd_create resumed>) = 4 [pid 7053] <... memfd_create resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] rmdir("./327" [pid 7053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] rmdir("./322/file1" [pid 7053] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... rmdir resumed>) = 0 [pid 7052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] mkdir("./326", 0777 [pid 7052] <... mmap resumed>) = 0x7f943d000000 [pid 5071] mkdir("./328", 0777 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./322" [pid 7052] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7053] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7054] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7054] close(3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7054] <... close resumed>) = 0 [pid 5076] mkdir("./323", 0777 [pid 5071] <... openat resumed>) = 3 [pid 7054] close(4 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7054] <... close resumed>) = 0 [pid 7053] <... write resumed>) = 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 7054] mkdir("./file1", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7053] munmap(0x7f943d000000, 138412032 [pid 7054] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7052] <... write resumed>) = 524288 [pid 7053] <... munmap resumed>) = 0 [ 249.937374][ T7054] loop3: detected capacity change from 0 to 1024 [pid 7053] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7052] munmap(0x7f943d000000, 138412032 [pid 5075] <... ioctl resumed>) = 0 [pid 7053] close(4 [pid 7054] <... mount resumed>) = 0 [pid 7053] <... close resumed>) = 0 [pid 7052] <... munmap resumed>) = 0 [pid 7054] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7052] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7052] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7054] <... openat resumed>) = 3 [pid 7052] close(4 [pid 5076] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7054] chdir("./file1" [pid 7053] exit_group(0 [pid 7054] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7055 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7055 [pid 7055] set_robust_list(0x555583d53660, 24 [pid 7053] <... exit_group resumed>) = ? [pid 7054] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7055] <... set_robust_list resumed>) = 0 [pid 7054] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7055] chdir("./326" [pid 7054] truncate("./file1", 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7053] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7053, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=1 /* 0.01 s */} --- [pid 7055] <... chdir resumed>) = 0 [pid 7055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7055] setpgid(0, 0) = 0 [pid 7055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7056 [pid 5073] umount2("./327", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7055] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./327/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7056 attached [pid 7055] write(3, "1000", 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7056] set_robust_list(0x555583d53660, 24 [pid 7055] <... write resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./327/binderfs", [pid 7056] <... set_robust_list resumed>) = 0 [pid 7055] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7056] chdir("./323" [pid 7055] <... close resumed>) = 0 [pid 5073] unlink("./327/binderfs" [pid 7056] <... chdir resumed>) = 0 [pid 7055] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 7056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7055] <... symlink resumed>) = 0 [pid 7052] <... close resumed>) = 0 [pid 5071] close(3 [pid 7056] <... prctl resumed>) = 0 [pid 7055] memfd_create("syzkaller", 0 [pid 7054] <... truncate resumed>) = 0 [pid 7052] exit_group(0 [pid 5073] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7056] setpgid(0, 0 [pid 7055] <... memfd_create resumed>) = 3 [pid 7054] memfd_create("syzkaller", 0 [pid 7052] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = 0 [pid 7056] <... setpgid resumed>) = 0 [pid 7055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7055] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7057 attached [pid 7056] <... openat resumed>) = 3 [pid 7055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7054] <... memfd_create resumed>) = 4 [pid 7052] +++ exited with 0 +++ [pid 5073] newfstatat(AT_FDCWD, "./327/file1", [pid 7057] set_robust_list(0x555583d53660, 24 [pid 7056] write(3, "1000", 4 [pid 7054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7057] <... set_robust_list resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7057 [pid 7056] <... write resumed>) = 4 [pid 7054] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7052, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7057] chdir("./328" [pid 7056] close(3 [pid 5073] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7057] <... chdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... restart_syscall resumed>) = 0 [pid 7057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] openat(AT_FDCWD, "./327/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7057] <... prctl resumed>) = 0 [pid 7056] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 7057] setpgid(0, 0 [pid 7056] symlink("/dev/binderfs", "./binderfs" [pid 5073] newfstatat(4, "", [pid 7057] <... setpgid resumed>) = 0 [pid 7056] <... symlink resumed>) = 0 [pid 5072] umount2("./326", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7056] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7057] <... openat resumed>) = 3 [pid 7056] <... memfd_create resumed>) = 3 [pid 5073] getdents64(4, [pid 5072] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... openat resumed>) = 3 [pid 7057] write(3, "1000", 4 [pid 7056] <... mmap resumed>) = 0x7f943d000000 [pid 7055] <... write resumed>) = 524288 [pid 5073] getdents64(4, [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 5073] close(4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... close resumed>) = 0 [pid 5072] umount2("./326/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./327/file1" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./326/binderfs", [pid 7057] <... write resumed>) = 4 [pid 7054] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7057] close(3) = 0 [pid 7056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] unlink("./326/binderfs" [pid 7057] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7055] munmap(0x7f943d000000, 138412032 [pid 7054] <... write resumed>) = 524288 [pid 5073] close(3 [pid 5072] <... unlink resumed>) = 0 [pid 7057] memfd_create("syzkaller", 0 [pid 5073] <... close resumed>) = 0 [pid 7057] <... memfd_create resumed>) = 3 [pid 5073] rmdir("./327" [pid 5072] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7055] <... munmap resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./328", 0777) = 0 [pid 7057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7055] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... umount2 resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7055] <... openat resumed>) = 4 [pid 7054] munmap(0x7f943d000000, 138412032 [pid 7055] ioctl(4, LOOP_SET_FD, 3 [pid 7054] <... munmap resumed>) = 0 [pid 5072] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7056] <... write resumed>) = 524288 [pid 5072] newfstatat(AT_FDCWD, "./326/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7056] munmap(0x7f943d000000, 138412032) = 0 [pid 7054] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./326/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7056] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... openat resumed>) = 4 [pid 7056] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7056] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7057] <... write resumed>) = 524288 [pid 7055] <... ioctl resumed>) = 0 [pid 7054] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7055] close(3 [pid 7054] close(4 [pid 5072] getdents64(4, [pid 7055] <... close resumed>) = 0 [pid 7055] close(4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7055] <... close resumed>) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./326/file1" [pid 7055] mkdir("./file1", 0777) = 0 [pid 7057] munmap(0x7f943d000000, 138412032 [pid 7054] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [ 250.127692][ T7055] loop4: detected capacity change from 0 to 1024 [ 250.141701][ T7056] loop5: detected capacity change from 0 to 1024 [pid 7057] <... munmap resumed>) = 0 [pid 7055] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7054] exit_group(0 [pid 7057] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7054] <... exit_group resumed>) = ? [pid 7057] <... openat resumed>) = 4 [pid 5073] <... ioctl resumed>) = 0 [pid 7057] ioctl(4, LOOP_SET_FD, 3 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./326") = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] mkdir("./327", 0777) = 0 [pid 7056] <... ioctl resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7056] close(3 [pid 5072] <... openat resumed>) = 3 [pid 7056] <... close resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7056] close(4./strace-static-x86_64: Process 7058 attached ) = 0 [pid 7054] +++ exited with 0 +++ [pid 7056] mkdir("./file1", 0777 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7058 [pid 7056] <... mkdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7054, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7058] set_robust_list(0x555583d53660, 24) = 0 [pid 7058] chdir("./328" [pid 7056] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7058] <... chdir resumed>) = 0 [pid 7058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] umount2("./327", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7058] <... prctl resumed>) = 0 [pid 7058] setpgid(0, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7058] <... setpgid resumed>) = 0 [pid 7058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7058] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7058] write(3, "1000", 4 [pid 5074] getdents64(3, [pid 7058] <... write resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7058] close(3 [pid 5074] umount2("./327/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7058] <... close resumed>) = 0 [pid 7058] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7058] <... symlink resumed>) = 0 [pid 7055] <... mount resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./327/binderfs", [pid 7058] memfd_create("syzkaller", 0) = 3 [pid 7055] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7055] <... openat resumed>) = 3 [pid 5074] unlink("./327/binderfs" [pid 7058] <... mmap resumed>) = 0x7f943d000000 [pid 7055] chdir("./file1" [pid 7058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7057] <... ioctl resumed>) = 0 [pid 7056] <... mount resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7056] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7056] chdir("./file1") = 0 [pid 7056] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7056] truncate("./file1", 0 [pid 7055] <... chdir resumed>) = 0 [pid 5074] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 250.180285][ T7057] loop0: detected capacity change from 0 to 1024 [pid 7057] close(3) = 0 [pid 7057] close(4 [pid 7055] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7057] <... close resumed>) = 0 [pid 7057] mkdir("./file1", 0777 [pid 7055] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7057] <... mkdir resumed>) = 0 [pid 7055] truncate("./file1", 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7056] <... truncate resumed>) = 0 [pid 7057] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7056] memfd_create("syzkaller", 0 [pid 7055] <... truncate resumed>) = 0 [pid 7056] <... memfd_create resumed>) = 4 [pid 7056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7055] memfd_create("syzkaller", 0 [pid 7056] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7055] <... memfd_create resumed>) = 4 [pid 7055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7058] <... write resumed>) = 524288 [pid 7057] <... mount resumed>) = 0 [pid 7055] <... mmap resumed>) = 0x7f943d000000 [pid 5074] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7057] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7055] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./327/file1", [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7059 [pid 7057] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7059 attached [pid 7059] set_robust_list(0x555583d53660, 24 [pid 7057] chdir("./file1" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7059] <... set_robust_list resumed>) = 0 [pid 7058] munmap(0x7f943d000000, 138412032 [pid 7057] <... chdir resumed>) = 0 [pid 7059] chdir("./327" [pid 7058] <... munmap resumed>) = 0 [pid 7057] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7056] <... write resumed>) = 524288 [pid 5074] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7059] <... chdir resumed>) = 0 [pid 7057] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7057] truncate("./file1", 0 [pid 7056] munmap(0x7f943d000000, 138412032 [pid 7055] <... write resumed>) = 524288 [pid 5074] openat(AT_FDCWD, "./327/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7059] <... prctl resumed>) = 0 [pid 7058] <... openat resumed>) = 4 [pid 7056] <... munmap resumed>) = 0 [pid 7055] munmap(0x7f943d000000, 138412032 [pid 5074] <... openat resumed>) = 4 [pid 7059] setpgid(0, 0 [pid 7058] ioctl(4, LOOP_SET_FD, 3 [pid 7057] <... truncate resumed>) = 0 [pid 7056] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7055] <... munmap resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 7059] <... setpgid resumed>) = 0 [pid 7058] <... ioctl resumed>) = 0 [pid 7057] memfd_create("syzkaller", 0 [pid 7056] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7055] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7057] <... memfd_create resumed>) = 4 [pid 7055] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(4, [pid 7057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7059] <... openat resumed>) = 3 [pid 7057] <... mmap resumed>) = 0x7f943d000000 [pid 7055] close(4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7057] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7059] write(3, "1000", 4 [pid 5074] getdents64(4, [pid 7059] <... write resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7059] close(3 [pid 7057] <... write resumed>) = 524288 [pid 7056] close(4 [pid 7055] <... close resumed>) = 0 [pid 5074] close(4 [pid 7059] <... close resumed>) = 0 [pid 7059] symlink("/dev/binderfs", "./binderfs" [pid 7058] close(3 [pid 7057] munmap(0x7f943d000000, 138412032 [pid 7055] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 7059] <... symlink resumed>) = 0 [pid 7058] <... close resumed>) = 0 [pid 7057] <... munmap resumed>) = 0 [pid 5074] rmdir("./327/file1" [pid 7059] memfd_create("syzkaller", 0 [pid 7058] close(4 [pid 7057] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7056] <... close resumed>) = 0 [pid 7055] <... exit_group resumed>) = ? [pid 7059] <... memfd_create resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 7059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(3, [pid 7059] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 7058] <... close resumed>) = 0 [pid 5074] rmdir("./327") = 0 [ 250.296843][ T7058] loop2: detected capacity change from 0 to 1024 [pid 5074] mkdir("./328", 0777 [pid 7059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7058] mkdir("./file1", 0777 [pid 7057] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7056] exit_group(0 [pid 7055] +++ exited with 0 +++ [pid 7058] <... mkdir resumed>) = 0 [pid 7057] close(4 [pid 7056] <... exit_group resumed>) = ? [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7055, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... mkdir resumed>) = 0 [pid 7056] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7056, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7059] <... write resumed>) = 524288 [pid 7058] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7057] <... close resumed>) = 0 [pid 5075] umount2("./326", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7059] munmap(0x7f943d000000, 138412032 [pid 7057] exit_group(0 [pid 5076] umount2("./323", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 7059] <... munmap resumed>) = 0 [pid 7057] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(3, "", [pid 5076] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(3, "", [pid 5075] getdents64(3, [pid 7059] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7059] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 5075] umount2("./326/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7058] <... mount resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7059] ioctl(4, LOOP_SET_FD, 3 [pid 7058] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] newfstatat(AT_FDCWD, "./326/binderfs", [pid 7058] <... openat resumed>) = 3 [pid 7057] +++ exited with 0 +++ [pid 5076] umount2("./323/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7058] chdir("./file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./326/binderfs" [pid 7058] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5075] <... unlink resumed>) = 0 [pid 7058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./323/binderfs" [pid 5075] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7058] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... unlink resumed>) = 0 [pid 7058] truncate("./file1", 0 [pid 5076] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7059] <... ioctl resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7057, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] umount2("./328", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7058] <... truncate resumed>) = 0 [pid 7058] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 7058] <... memfd_create resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 7058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./328/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7058] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7059] close(3 [pid 7058] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./328/binderfs", [pid 7059] <... close resumed>) = 0 [pid 5076] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./326/file1", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7059] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./328/binderfs" [pid 7059] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./323/file1", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 7059] mkdir("./file1", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7059] <... mkdir resumed>) = 0 [pid 7058] <... write resumed>) = 524288 [pid 5076] umount2("./323/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 7058] munmap(0x7f943d000000, 138412032 [pid 5075] openat(AT_FDCWD, "./326/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7059] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./323/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(4, "", [pid 7058] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7060 attached [pid 7058] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] newfstatat(4, "", [pid 5075] getdents64(4, [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7060 [pid 7060] set_robust_list(0x555583d53660, 24 [pid 7058] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7060] <... set_robust_list resumed>) = 0 [pid 7058] close(4 [ 250.390321][ T7059] loop1: detected capacity change from 0 to 1024 [pid 5076] getdents64(4, [pid 7060] chdir("./328" [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5075] close(4) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./326/file1" [pid 7060] <... chdir resumed>) = 0 [pid 7058] <... close resumed>) = 0 [pid 5076] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 7060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7060] setpgid(0, 0 [pid 7059] <... mount resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7060] <... setpgid resumed>) = 0 [pid 7059] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] rmdir("./323/file1" [pid 5075] getdents64(3, [pid 7060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7058] exit_group(0 [pid 7059] <... openat resumed>) = 3 [pid 7058] <... exit_group resumed>) = ? [pid 7060] <... openat resumed>) = 3 [pid 7059] chdir("./file1" [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7059] <... chdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] close(3 [pid 7060] write(3, "1000", 4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7060] <... write resumed>) = 4 [pid 5076] close(3 [pid 5075] rmdir("./326" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7060] close(3 [pid 7059] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7058] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./328/file1", [pid 7060] <... close resumed>) = 0 [pid 7059] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] rmdir("./323" [pid 7060] symlink("/dev/binderfs", "./binderfs" [pid 7059] truncate("./file1", 0 [pid 5075] mkdir("./327", 0777 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7058, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7060] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5071] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7060] memfd_create("syzkaller", 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7060] <... memfd_create resumed>) = 3 [pid 5076] mkdir("./324", 0777 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./328/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... openat resumed>) = 4 [pid 7060] <... mmap resumed>) = 0x7f943d000000 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] close(4) = 0 [pid 7060] <... write resumed>) = 524288 [pid 7059] <... truncate resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] rmdir("./328/file1" [pid 7060] munmap(0x7f943d000000, 138412032 [pid 7059] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 7060] <... munmap resumed>) = 0 [pid 7059] <... memfd_create resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./328", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 7060] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7059] <... mmap resumed>) = 0x7f943d000000 [pid 5073] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7060] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5071] close(3 [pid 7060] ioctl(4, LOOP_SET_FD, 3 [pid 5073] newfstatat(3, "", [pid 5071] <... close resumed>) = 0 [pid 7059] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./328/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./328/binderfs", [pid 5071] rmdir("./328" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5073] unlink("./328/binderfs" [pid 5071] mkdir("./329", 0777 [pid 5073] <... unlink resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5073] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7060] <... ioctl resumed>) = 0 [pid 7059] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 7060] close(3 [pid 7059] munmap(0x7f943d000000, 138412032 [pid 7060] <... close resumed>) = 0 [pid 7059] <... munmap resumed>) = 0 [pid 5073] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7060] close(4 [pid 7059] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7059] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] newfstatat(AT_FDCWD, "./328/file1", [pid 7060] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7060] mkdir("./file1", 0777 [pid 7059] close(4 [pid 5073] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./328/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 7060] <... mkdir resumed>) = 0 [pid 7059] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7059] exit_group(0 [pid 5073] getdents64(4, [pid 7059] <... exit_group resumed>) = ? [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7060] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7059] +++ exited with 0 +++ [pid 5076] close(3 [pid 5075] close(3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7059, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 250.500261][ T7060] loop3: detected capacity change from 0 to 1024 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7062 attached [pid 5073] close(4) = 0 [pid 5072] umount2("./327", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./328/file1") = 0 [pid 5073] getdents64(3, [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7061 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 ./strace-static-x86_64: Process 7061 attached [pid 5073] rmdir("./328" [pid 7061] set_robust_list(0x555583d53660, 24 [pid 5073] <... rmdir resumed>) = 0 [pid 7061] <... set_robust_list resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7062 [pid 7061] chdir("./327" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./329", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5072] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... ioctl resumed>) = 0 [pid 7062] set_robust_list(0x555583d53660, 24 [pid 7061] <... chdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 3 [pid 7061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7062] <... set_robust_list resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 7061] <... prctl resumed>) = 0 [pid 7062] chdir("./324" [pid 7060] <... mount resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7062] <... chdir resumed>) = 0 [pid 7061] setpgid(0, 0) = 0 [pid 7061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] getdents64(3, [pid 7062] <... prctl resumed>) = 0 [pid 7061] write(3, "1000", 4 [pid 7060] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7062] setpgid(0, 0 [pid 7061] <... write resumed>) = 4 [pid 7062] <... setpgid resumed>) = 0 [pid 7060] <... openat resumed>) = 3 [pid 5072] umount2("./327/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7061] close(3 [pid 7060] chdir("./file1" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] newfstatat(AT_FDCWD, "./327/binderfs", [pid 7061] <... close resumed>) = 0 [pid 7062] <... openat resumed>) = 3 [pid 7060] <... chdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7062] write(3, "1000", 4 [pid 5071] close(3 [pid 7062] <... write resumed>) = 4 [pid 5072] unlink("./327/binderfs" [pid 5071] <... close resumed>) = 0 [pid 7062] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7061] symlink("/dev/binderfs", "./binderfs" [pid 7060] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7061] <... symlink resumed>) = 0 [pid 7060] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... unlink resumed>) = 0 [pid 7060] truncate("./file1", 0./strace-static-x86_64: Process 7063 attached [pid 7062] <... close resumed>) = 0 [pid 5072] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7062] symlink("/dev/binderfs", "./binderfs" [pid 7063] set_robust_list(0x555583d53660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7063 [pid 7063] <... set_robust_list resumed>) = 0 [pid 7061] memfd_create("syzkaller", 0 [pid 7062] <... symlink resumed>) = 0 [pid 7063] chdir("./329" [pid 7061] <... memfd_create resumed>) = 3 [pid 7062] memfd_create("syzkaller", 0 [pid 7061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7062] <... memfd_create resumed>) = 3 [pid 7060] <... truncate resumed>) = 0 [pid 7061] <... mmap resumed>) = 0x7f943d000000 [pid 7060] memfd_create("syzkaller", 0 [pid 7063] <... chdir resumed>) = 0 [pid 7062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7062] <... mmap resumed>) = 0x7f943d000000 [pid 7060] <... memfd_create resumed>) = 4 [pid 7063] <... prctl resumed>) = 0 [pid 7062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7063] setpgid(0, 0 [pid 7061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7062] <... write resumed>) = 524288 [pid 7060] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7063] <... setpgid resumed>) = 0 [pid 7060] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./327/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./327/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7063] <... openat resumed>) = 3 [pid 5072] <... openat resumed>) = 4 [pid 7063] write(3, "1000", 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7063] <... write resumed>) = 4 [pid 5072] getdents64(4, [pid 7063] close(3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7063] <... close resumed>) = 0 [pid 7062] munmap(0x7f943d000000, 138412032 [pid 5073] close(3 [pid 7063] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 7063] <... symlink resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7063] memfd_create("syzkaller", 0 [pid 7062] <... munmap resumed>) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./327/file1") = 0 [pid 7063] <... memfd_create resumed>) = 3 [pid 5072] getdents64(3, [pid 7063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7061] <... write resumed>) = 524288 [pid 7062] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7064 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 7063] <... mmap resumed>) = 0x7f943d000000 [pid 7062] <... openat resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./327"./strace-static-x86_64: Process 7064 attached [pid 7061] munmap(0x7f943d000000, 138412032 [pid 7060] <... write resumed>) = 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 7064] set_robust_list(0x555583d53660, 24 [pid 7061] <... munmap resumed>) = 0 [pid 7062] ioctl(4, LOOP_SET_FD, 3 [pid 7064] <... set_robust_list resumed>) = 0 [pid 7064] chdir("./329") = 0 [pid 7064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7064] setpgid(0, 0) = 0 [pid 7064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7061] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] mkdir("./328", 0777 [pid 7064] write(3, "1000", 4 [pid 7061] <... openat resumed>) = 4 [pid 7060] munmap(0x7f943d000000, 138412032 [pid 5072] <... mkdir resumed>) = 0 [pid 7064] <... write resumed>) = 4 [pid 7061] ioctl(4, LOOP_SET_FD, 3 [pid 7060] <... munmap resumed>) = 0 [pid 7064] close(3 [pid 7063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7060] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7064] <... close resumed>) = 0 [pid 7064] symlink("/dev/binderfs", "./binderfs" [pid 7060] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7064] <... symlink resumed>) = 0 [pid 7060] close(4 [pid 7064] memfd_create("syzkaller", 0 [pid 7060] <... close resumed>) = 0 [pid 7064] <... memfd_create resumed>) = 3 [pid 7063] <... write resumed>) = 524288 [pid 7061] <... ioctl resumed>) = 0 [pid 7062] <... ioctl resumed>) = 0 [pid 7064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7060] exit_group(0 [pid 7063] munmap(0x7f943d000000, 138412032 [pid 7061] close(3 [pid 7062] close(3 [pid 7060] <... exit_group resumed>) = ? [pid 7062] <... close resumed>) = 0 [pid 7062] close(4) = 0 [pid 7062] mkdir("./file1", 0777) = 0 [pid 7061] <... close resumed>) = 0 [pid 7061] close(4 [pid 7062] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7063] <... munmap resumed>) = 0 [pid 7061] <... close resumed>) = 0 [pid 7060] +++ exited with 0 +++ [pid 5072] <... ioctl resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7060, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 250.680898][ T7062] loop5: detected capacity change from 0 to 1024 [ 250.688309][ T7061] loop4: detected capacity change from 0 to 1024 [pid 7061] mkdir("./file1", 0777) = 0 [pid 5074] umount2("./328", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7064] <... write resumed>) = 524288 [pid 7063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7061] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 7063] <... openat resumed>) = 4 [pid 7062] <... mount resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] close(3 [pid 5074] umount2("./328/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 7062] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./328/binderfs", [pid 7063] ioctl(4, LOOP_SET_FD, 3 [pid 7062] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7063] <... ioctl resumed>) = 0 [pid 7062] chdir("./file1" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7064] munmap(0x7f943d000000, 138412032) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7065 ./strace-static-x86_64: Process 7065 attached [pid 7064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7065] set_robust_list(0x555583d53660, 24 [pid 7064] <... openat resumed>) = 4 [pid 7062] <... chdir resumed>) = 0 [pid 5074] unlink("./328/binderfs" [pid 7062] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7064] ioctl(4, LOOP_SET_FD, 3 [pid 7062] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7065] <... set_robust_list resumed>) = 0 [pid 7065] chdir("./328") = 0 [pid 7065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7065] setpgid(0, 0) = 0 [pid 7065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7063] close(3 [pid 7065] <... openat resumed>) = 3 [pid 7063] <... close resumed>) = 0 [pid 7063] close(4) = 0 [pid 7063] mkdir("./file1", 0777) = 0 [pid 7061] <... mount resumed>) = 0 [pid 7062] truncate("./file1", 0 [pid 5074] <... unlink resumed>) = 0 [pid 7061] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7065] write(3, "1000", 4 [pid 7063] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7061] <... openat resumed>) = 3 [pid 7065] <... write resumed>) = 4 [pid 7061] chdir("./file1" [pid 7065] close(3 [pid 7063] <... mount resumed>) = 0 [pid 7061] <... chdir resumed>) = 0 [pid 7065] <... close resumed>) = 0 [ 250.756064][ T7063] loop0: detected capacity change from 0 to 1024 [ 250.772145][ T7064] loop2: detected capacity change from 0 to 1024 [pid 7061] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7062] <... truncate resumed>) = 0 [pid 7065] symlink("/dev/binderfs", "./binderfs" [pid 7063] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7061] truncate("./file1", 0 [pid 7065] <... symlink resumed>) = 0 [pid 7064] <... ioctl resumed>) = 0 [pid 7063] <... openat resumed>) = 3 [pid 7062] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7065] memfd_create("syzkaller", 0 [pid 7064] close(3 [pid 7063] chdir("./file1" [pid 7062] <... memfd_create resumed>) = 4 [pid 5074] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7064] <... close resumed>) = 0 [pid 7063] <... chdir resumed>) = 0 [pid 7062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7065] <... memfd_create resumed>) = 3 [pid 7064] close(4 [pid 7063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7062] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./328/file1", [pid 7065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7064] <... close resumed>) = 0 [pid 7063] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7065] <... mmap resumed>) = 0x7f943d000000 [pid 7064] mkdir("./file1", 0777 [pid 7063] truncate("./file1", 0 [pid 7065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7064] <... mkdir resumed>) = 0 [pid 7062] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7064] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7063] <... truncate resumed>) = 0 [pid 7061] <... truncate resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7063] memfd_create("syzkaller", 0 [pid 7061] memfd_create("syzkaller", 0 [pid 5074] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7063] <... memfd_create resumed>) = 4 [pid 7061] <... memfd_create resumed>) = 4 [pid 7065] <... write resumed>) = 524288 [pid 7064] <... mount resumed>) = 0 [pid 7063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7063] <... mmap resumed>) = 0x7f943d000000 [pid 7061] <... mmap resumed>) = 0x7f943d000000 [pid 5074] openat(AT_FDCWD, "./328/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7061] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 4 [pid 7064] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 7064] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7064] chdir("./file1" [pid 5074] getdents64(4, [pid 7064] <... chdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] getdents64(4, [pid 7064] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7064] truncate("./file1", 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./328/file1") = 0 [pid 7064] <... truncate resumed>) = 0 [pid 7063] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7061] <... write resumed>) = 524288 [pid 5074] getdents64(3, [pid 7064] memfd_create("syzkaller", 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7064] <... memfd_create resumed>) = 4 [pid 7063] <... write resumed>) = 524288 [pid 5074] close(3 [pid 7065] munmap(0x7f943d000000, 138412032 [pid 7064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./328" [pid 7062] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 7065] <... munmap resumed>) = 0 [pid 7064] <... mmap resumed>) = 0x7f943d000000 [pid 5074] mkdir("./329", 0777 [pid 7064] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7062] munmap(0x7f943d000000, 138412032 [pid 5074] <... openat resumed>) = 3 [pid 7065] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7065] <... openat resumed>) = 4 [pid 7065] ioctl(4, LOOP_SET_FD, 3 [pid 7062] <... munmap resumed>) = 0 [pid 7062] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7061] munmap(0x7f943d000000, 138412032) = 0 [pid 7062] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7062] close(4 [pid 7063] munmap(0x7f943d000000, 138412032) = 0 [pid 7061] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7061] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7063] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7061] close(4) = 0 [pid 7063] close(4) = 0 [pid 7062] <... close resumed>) = 0 [pid 7065] <... ioctl resumed>) = 0 [pid 7064] <... write resumed>) = 524288 [pid 7061] exit_group(0 [pid 7062] exit_group(0) = ? [pid 7064] munmap(0x7f943d000000, 138412032 [pid 7062] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7062, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7065] close(3 [pid 7061] <... exit_group resumed>) = ? [pid 5074] <... ioctl resumed>) = 0 [pid 7064] <... munmap resumed>) = 0 [pid 7064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7063] exit_group(0 [pid 5076] umount2("./324", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7064] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7063] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7065] <... close resumed>) = 0 [pid 7064] close(4 [pid 7061] +++ exited with 0 +++ [pid 7065] close(4 [pid 7064] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7061, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7065] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./327", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7063] +++ exited with 0 +++ [pid 5074] close(3 [pid 7065] mkdir("./file1", 0777 [pid 5076] newfstatat(3, "", [pid 5075] umount2("./327/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7063, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7064] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7065] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(AT_FDCWD, "./327/binderfs", [pid 7064] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7066 attached [pid 7065] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7064] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7066] set_robust_list(0x555583d53660, 24 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] unlink("./327/binderfs" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7064, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 250.892043][ T7065] loop1: detected capacity change from 0 to 1024 [pid 7066] <... set_robust_list resumed>) = 0 [pid 5076] umount2("./324/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7066 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 7066] chdir("./329" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... restart_syscall resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./324/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./324/binderfs" [pid 5073] umount2("./329", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7066] <... chdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./329", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... unlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7066] <... prctl resumed>) = 0 [pid 5076] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(3, "", [pid 5071] <... openat resumed>) = 3 [pid 7066] setpgid(0, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(3, "", [pid 7066] <... setpgid resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7065] <... mount resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] getdents64(3, [pid 7066] <... openat resumed>) = 3 [pid 5073] umount2("./329/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./329/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7065] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./329/binderfs", [pid 7066] write(3, "1000", 4 [pid 7065] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7066] <... write resumed>) = 4 [pid 5073] unlink("./329/binderfs" [pid 5071] newfstatat(AT_FDCWD, "./329/binderfs", [pid 7066] close(3 [pid 5073] <... unlink resumed>) = 0 [pid 7066] <... close resumed>) = 0 [pid 7066] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./327/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7066] <... symlink resumed>) = 0 [pid 5075] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./327/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7065] chdir("./file1" [pid 5071] unlink("./329/binderfs" [pid 7065] <... chdir resumed>) = 0 [pid 5076] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 7065] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./324/file1", [pid 7065] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7066] memfd_create("syzkaller", 0 [pid 7065] truncate("./file1", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7066] <... memfd_create resumed>) = 3 [pid 5076] umount2("./324/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./324/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", [pid 7066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7066] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] close(4) = 0 [pid 5076] rmdir("./324/file1" [pid 7065] <... truncate resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7065] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7065] <... memfd_create resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(4 [pid 5073] newfstatat(AT_FDCWD, "./329/file1", [pid 5071] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(AT_FDCWD, "./329/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(3 [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./324" [pid 5071] openat(AT_FDCWD, "./329/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5075] rmdir("./327/file1" [pid 5073] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7065] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 4 [pid 5076] mkdir("./325", 0777 [pid 5071] newfstatat(4, "", [pid 5076] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, [pid 7065] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] openat(AT_FDCWD, "./329/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(3, [pid 5071] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] rmdir("./329/file1" [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(4, "", [pid 5075] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5075] rmdir("./327") = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] mkdir("./328", 0777 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5075] <... mkdir resumed>) = 0 [pid 5073] close(4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./329") = 0 [pid 5071] mkdir("./330", 0777 [pid 7066] <... write resumed>) = 524288 [pid 7065] <... write resumed>) = 524288 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] rmdir("./329/file1" [pid 7066] munmap(0x7f943d000000, 138412032 [pid 7065] munmap(0x7f943d000000, 138412032 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 7065] <... munmap resumed>) = 0 [pid 5073] getdents64(3, [pid 5071] <... mkdir resumed>) = 0 [pid 7066] <... munmap resumed>) = 0 [pid 7066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7065] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] close(3) = 0 [pid 7065] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7066] <... openat resumed>) = 4 [pid 5073] rmdir("./329" [pid 7065] close(4 [pid 5071] <... openat resumed>) = 3 [pid 7066] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./330", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7066] <... ioctl resumed>) = 0 [pid 7065] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7066] close(3) = 0 [pid 7065] exit_group(0 [pid 5073] <... openat resumed>) = 3 [pid 7066] close(4) = 0 [pid 7066] mkdir("./file1", 0777) = 0 [pid 7066] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... ioctl resumed>) = 0 [pid 7065] <... exit_group resumed>) = ? [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7066] <... mount resumed>) = 0 [pid 7065] +++ exited with 0 +++ [pid 5076] close(3) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7065, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7066] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7066] chdir("./file1" [pid 5072] umount2("./328", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7066] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7067 attached [pid 7066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7067] set_robust_list(0x555583d53660, 24 [pid 7066] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7067 [pid 7067] <... set_robust_list resumed>) = 0 [pid 7066] truncate("./file1", 0 [pid 5072] <... openat resumed>) = 3 [pid 7067] chdir("./325" [pid 5072] newfstatat(3, "", [pid 7067] <... chdir resumed>) = 0 [ 251.070681][ T7066] loop3: detected capacity change from 0 to 1024 [pid 7067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7066] <... truncate resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7067] <... prctl resumed>) = 0 [pid 7066] memfd_create("syzkaller", 0 [pid 7067] setpgid(0, 0 [pid 7066] <... memfd_create resumed>) = 4 [pid 5072] getdents64(3, [pid 7067] <... setpgid resumed>) = 0 [pid 7066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7066] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] umount2("./328/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7067] <... openat resumed>) = 3 [pid 5072] newfstatat(AT_FDCWD, "./328/binderfs", [pid 7067] write(3, "1000", 4) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7067] close(3) = 0 [pid 7066] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5072] unlink("./328/binderfs" [pid 7067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5072] <... unlink resumed>) = 0 [pid 7067] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7066] munmap(0x7f943d000000, 138412032 [pid 7067] <... memfd_create resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 5071] close(3 [pid 7067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 ./strace-static-x86_64: Process 7068 attached [pid 7067] <... mmap resumed>) = 0x7f943d000000 [pid 7066] <... munmap resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7068] set_robust_list(0x555583d53660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7068 [pid 7068] <... set_robust_list resumed>) = 0 [pid 7068] chdir("./328" [pid 5072] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7068] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7066] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] newfstatat(AT_FDCWD, "./328/file1", ./strace-static-x86_64: Process 7070 attached [pid 7068] <... prctl resumed>) = 0 [pid 7068] setpgid(0, 0 [pid 7066] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7070 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7069 [pid 7070] set_robust_list(0x555583d53660, 24 [pid 7068] <... setpgid resumed>) = 0 [pid 7066] close(4 [pid 5072] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7069 attached [pid 7070] <... set_robust_list resumed>) = 0 [pid 7068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7066] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7069] set_robust_list(0x555583d53660, 24 [pid 7068] <... openat resumed>) = 3 [pid 7067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] openat(AT_FDCWD, "./328/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7070] chdir("./330" [pid 7069] <... set_robust_list resumed>) = 0 [pid 7068] write(3, "1000", 4 [pid 7067] <... write resumed>) = 524288 [pid 5072] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 7070] <... chdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7068] <... write resumed>) = 4 [pid 7068] close(3 [pid 7069] chdir("./330" [pid 7068] <... close resumed>) = 0 [pid 7070] <... prctl resumed>) = 0 [pid 7069] <... chdir resumed>) = 0 [pid 7068] symlink("/dev/binderfs", "./binderfs" [pid 7069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7068] <... symlink resumed>) = 0 [pid 7069] <... prctl resumed>) = 0 [pid 7070] setpgid(0, 0 [pid 7069] setpgid(0, 0 [pid 7068] memfd_create("syzkaller", 0 [pid 7066] exit_group(0 [pid 5072] getdents64(4, [pid 7068] <... memfd_create resumed>) = 3 [pid 7070] <... setpgid resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7069] <... setpgid resumed>) = 0 [pid 7068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7066] <... exit_group resumed>) = ? [pid 5072] getdents64(4, [pid 7070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7068] <... mmap resumed>) = 0x7f943d000000 [pid 7066] +++ exited with 0 +++ [pid 7070] <... openat resumed>) = 3 [pid 7068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7067] munmap(0x7f943d000000, 138412032 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7070] write(3, "1000", 4 [pid 7069] <... openat resumed>) = 3 [pid 7067] <... munmap resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7066, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5072] close(4 [pid 7070] <... write resumed>) = 4 [pid 7069] write(3, "1000", 4 [pid 5074] umount2("./329", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 7070] close(3 [pid 7069] <... write resumed>) = 4 [pid 7067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] rmdir("./328/file1" [pid 7070] <... close resumed>) = 0 [pid 7069] close(3 [pid 7067] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7070] symlink("/dev/binderfs", "./binderfs" [pid 7069] <... close resumed>) = 0 [pid 7067] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... rmdir resumed>) = 0 [pid 7070] <... symlink resumed>) = 0 [pid 7069] symlink("/dev/binderfs", "./binderfs" [pid 5074] newfstatat(3, "", [pid 5072] getdents64(3, [pid 7070] memfd_create("syzkaller", 0 [pid 7069] <... symlink resumed>) = 0 [pid 7068] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7069] memfd_create("syzkaller", 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./329/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./329/binderfs", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7069] <... memfd_create resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7070] <... memfd_create resumed>) = 3 [pid 7069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] unlink("./329/binderfs" [pid 7070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7069] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... unlink resumed>) = 0 [pid 7070] <... mmap resumed>) = 0x7f943d000000 [pid 7069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] close(3 [pid 7068] munmap(0x7f943d000000, 138412032 [pid 7067] <... ioctl resumed>) = 0 [pid 5074] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7068] <... munmap resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7068] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7067] close(3 [pid 5072] rmdir("./328" [pid 7068] <... openat resumed>) = 4 [pid 7067] <... close resumed>) = 0 [pid 7068] ioctl(4, LOOP_SET_FD, 3 [pid 7067] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 7067] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7070] <... write resumed>) = 524288 [pid 7068] <... ioctl resumed>) = 0 [pid 7067] mkdir("./file1", 0777 [pid 5072] mkdir("./329", 0777 [pid 5074] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./329/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./329/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 7067] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7067] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7068] close(3 [pid 5074] getdents64(4, [pid 7070] munmap(0x7f943d000000, 138412032 [pid 7069] <... write resumed>) = 524288 [pid 7068] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 7070] <... munmap resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./329/file1") = 0 [pid 7068] close(4 [pid 5074] getdents64(3, [pid 7070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7069] munmap(0x7f943d000000, 138412032 [pid 7068] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7070] <... openat resumed>) = 4 [ 251.234547][ T7067] loop5: detected capacity change from 0 to 1024 [ 251.265752][ T7068] loop4: detected capacity change from 0 to 1024 [pid 5074] close(3 [pid 7070] ioctl(4, LOOP_SET_FD, 3 [pid 7069] <... munmap resumed>) = 0 [pid 7068] mkdir("./file1", 0777 [pid 7067] <... mount resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7068] <... mkdir resumed>) = 0 [pid 7067] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7069] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] rmdir("./329" [pid 7069] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 7069] ioctl(4, LOOP_SET_FD, 3 [pid 5074] mkdir("./330", 0777 [pid 7068] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7067] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 7067] chdir("./file1") = 0 [pid 7067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7069] <... ioctl resumed>) = 0 [pid 7067] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... ioctl resumed>) = 0 [pid 7069] close(3 [pid 7067] truncate("./file1", 0 [pid 5074] <... openat resumed>) = 3 [pid 7069] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7069] close(4) = 0 [pid 7069] mkdir("./file1", 0777) = 0 [pid 7070] <... ioctl resumed>) = 0 [pid 7069] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7070] close(3 [pid 7068] <... mount resumed>) = 0 [pid 7067] <... truncate resumed>) = 0 [pid 7070] <... close resumed>) = 0 [pid 7070] close(4) = 0 [pid 7069] <... mount resumed>) = 0 [pid 7068] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7067] memfd_create("syzkaller", 0 [pid 5072] close(3 [pid 7070] mkdir("./file1", 0777 [pid 7069] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7068] <... openat resumed>) = 3 [pid 7067] <... memfd_create resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 7069] <... openat resumed>) = 3 [pid 7067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 251.303168][ T7070] loop2: detected capacity change from 0 to 1024 [ 251.314776][ T7069] loop0: detected capacity change from 0 to 1024 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7070] <... mkdir resumed>) = 0 [pid 7069] chdir("./file1" [pid 7068] chdir("./file1" [pid 7067] <... mmap resumed>) = 0x7f943d000000 ./strace-static-x86_64: Process 7071 attached [pid 7069] <... chdir resumed>) = 0 [pid 7068] <... chdir resumed>) = 0 [pid 7070] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7069] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7068] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7071 [pid 7069] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7068] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7069] truncate("./file1", 0 [pid 7068] truncate("./file1", 0 [pid 7071] set_robust_list(0x555583d53660, 24) = 0 [pid 7070] <... mount resumed>) = 0 [pid 7070] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7071] chdir("./329" [pid 7069] <... truncate resumed>) = 0 [pid 7071] <... chdir resumed>) = 0 [pid 7069] memfd_create("syzkaller", 0 [pid 7068] <... truncate resumed>) = 0 [pid 7071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7070] <... openat resumed>) = 3 [pid 7069] <... memfd_create resumed>) = 4 [pid 7068] memfd_create("syzkaller", 0 [pid 7067] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 7071] <... prctl resumed>) = 0 [pid 7069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7068] <... memfd_create resumed>) = 4 [pid 7067] <... write resumed>) = 524288 [pid 7069] <... mmap resumed>) = 0x7f943d000000 [pid 7068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 7068] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... close resumed>) = 0 [pid 7071] setpgid(0, 0 [pid 7070] chdir("./file1" [pid 7069] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7068] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7071] <... setpgid resumed>) = 0 [pid 7070] <... chdir resumed>) = 0 [pid 7070] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7070] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7070] truncate("./file1", 0 [pid 7069] <... write resumed>) = 524288 [pid 7067] munmap(0x7f943d000000, 138412032 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7072 ./strace-static-x86_64: Process 7072 attached [pid 7071] <... openat resumed>) = 3 [pid 7070] <... truncate resumed>) = 0 [pid 7068] <... write resumed>) = 524288 [pid 7072] set_robust_list(0x555583d53660, 24 [pid 7071] write(3, "1000", 4 [pid 7070] memfd_create("syzkaller", 0 [pid 7072] <... set_robust_list resumed>) = 0 [pid 7071] <... write resumed>) = 4 [pid 7070] <... memfd_create resumed>) = 4 [pid 7072] chdir("./330" [pid 7071] close(3 [pid 7070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7067] <... munmap resumed>) = 0 [pid 7071] <... close resumed>) = 0 [pid 7070] <... mmap resumed>) = 0x7f943d000000 [pid 7072] <... chdir resumed>) = 0 [pid 7071] symlink("/dev/binderfs", "./binderfs" [pid 7068] munmap(0x7f943d000000, 138412032 [pid 7067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7070] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7067] close(4 [pid 7072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7071] <... symlink resumed>) = 0 [pid 7069] munmap(0x7f943d000000, 138412032 [pid 7072] <... prctl resumed>) = 0 [pid 7071] memfd_create("syzkaller", 0 [pid 7072] setpgid(0, 0 [pid 7071] <... memfd_create resumed>) = 3 [pid 7069] <... munmap resumed>) = 0 [pid 7068] <... munmap resumed>) = 0 [pid 7072] <... setpgid resumed>) = 0 [pid 7071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7069] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7071] <... mmap resumed>) = 0x7f943d000000 [pid 7070] <... write resumed>) = 524288 [pid 7068] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7067] <... close resumed>) = 0 [pid 7069] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7069] close(4 [pid 7072] <... openat resumed>) = 3 [pid 7071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7070] munmap(0x7f943d000000, 138412032 [pid 7069] <... close resumed>) = 0 [pid 7068] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7068] close(4 [pid 7072] write(3, "1000", 4 [pid 7070] <... munmap resumed>) = 0 [pid 7068] <... close resumed>) = 0 [pid 7072] <... write resumed>) = 4 [pid 7070] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7072] close(3) = 0 [pid 7067] exit_group(0 [pid 7072] symlink("/dev/binderfs", "./binderfs" [pid 7070] close(4 [pid 7067] <... exit_group resumed>) = ? [pid 7072] <... symlink resumed>) = 0 [pid 7067] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7067, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7072] memfd_create("syzkaller", 0 [pid 7069] exit_group(0) = ? [pid 7072] <... memfd_create resumed>) = 3 [pid 7069] +++ exited with 0 +++ [pid 7068] exit_group(0 [pid 7072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7070] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7069, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7068] <... exit_group resumed>) = ? [pid 7072] <... mmap resumed>) = 0x7f943d000000 [pid 7071] <... write resumed>) = 524288 [pid 7070] exit_group(0 [pid 5076] umount2("./325", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7070] <... exit_group resumed>) = ? [pid 5076] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7068] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 5071] umount2("./330", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", [pid 7070] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7068, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7071] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5075] umount2("./328", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7071] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7070, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7071] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./325/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./325/binderfs", [pid 5075] newfstatat(3, "", [pid 5071] newfstatat(3, "", [pid 7071] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7071] ioctl(4, LOOP_SET_FD, 3 [pid 5076] unlink("./325/binderfs" [pid 5075] getdents64(3, [pid 5073] umount2("./330", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./330/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./328/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] unlink("./330/binderfs" [pid 5071] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./330/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7072] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] unlink("./328/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./330/binderfs", [pid 7072] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7072] <... munmap resumed>) = 0 [pid 7071] <... ioctl resumed>) = 0 [pid 5076] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5071] unlink("./330/binderfs" [pid 7072] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7071] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 7072] <... openat resumed>) = 4 [pid 7071] <... close resumed>) = 0 [pid 5071] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7072] ioctl(4, LOOP_SET_FD, 3 [pid 7071] close(4 [pid 5076] newfstatat(AT_FDCWD, "./325/file1", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 251.508767][ T7071] loop1: detected capacity change from 0 to 1024 [pid 7071] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7072] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./328/file1", [pid 5073] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7071] mkdir("./file1", 0777) = 0 [pid 5076] umount2("./325/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./330/file1", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "./325/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7071] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... openat resumed>) = 4 [pid 7072] close(3 [pid 5075] openat(AT_FDCWD, "./328/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 7072] <... close resumed>) = 0 [pid 7071] <... mount resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7071] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(4, "", [pid 5073] openat(AT_FDCWD, "./330/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7072] close(4 [pid 7071] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5071] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7072] <... close resumed>) = 0 [pid 7071] chdir("./file1" [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5073] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7072] mkdir("./file1", 0777 [pid 7071] <... chdir resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7072] <... mkdir resumed>) = 0 [pid 7071] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5073] getdents64(4, [pid 5071] newfstatat(AT_FDCWD, "./330/file1", [pid 7071] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7071] truncate("./file1", 0 [pid 5076] close(4 [pid 5075] close(4 [pid 5073] getdents64(4, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7072] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] rmdir("./325/file1" [pid 5075] rmdir("./328/file1" [pid 5073] close(4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./330/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] rmdir("./330/file1" [pid 5071] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7071] <... truncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 7071] memfd_create("syzkaller", 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7071] <... memfd_create resumed>) = 4 [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(3, [pid 5071] getdents64(4, [pid 7071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 5075] close(3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7071] <... mmap resumed>) = 0x7f943d000000 [pid 5076] rmdir("./325" [pid 5075] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 5075] rmdir("./328" [pid 5073] <... close resumed>) = 0 [pid 5071] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] mkdir("./326", 0777 [pid 5073] rmdir("./330" [pid 5071] close(4 [pid 7072] <... mount resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] mkdir("./329", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7072] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7071] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] rmdir("./330/file1" [pid 7072] chdir("./file1" [pid 5073] mkdir("./331", 0777 [pid 5071] <... rmdir resumed>) = 0 [ 251.555392][ T7072] loop3: detected capacity change from 0 to 1024 [pid 5073] <... mkdir resumed>) = 0 [pid 7072] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7072] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5071] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./330" [pid 7072] truncate("./file1", 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./331", 0777) = 0 [pid 7072] <... truncate resumed>) = 0 [pid 7071] <... write resumed>) = 524288 [pid 7072] memfd_create("syzkaller", 0 [pid 7071] munmap(0x7f943d000000, 138412032 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7072] <... memfd_create resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7071] <... munmap resumed>) = 0 [pid 7072] <... mmap resumed>) = 0x7f943d000000 [pid 7071] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7071] close(4 [pid 7072] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7071] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 7072] <... write resumed>) = 524288 [pid 7071] exit_group(0 [pid 5073] close(3) = 0 [pid 7071] <... exit_group resumed>) = ? [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7071] +++ exited with 0 +++ [pid 5076] close(3 [pid 5075] close(3 [pid 7072] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7073 [pid 7072] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7072] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7072] close(4./strace-static-x86_64: Process 7073 attached [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7071, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7074 [pid 7073] set_robust_list(0x555583d53660, 24) = 0 [pid 7073] chdir("./331" [pid 7072] <... close resumed>) = 0 ./strace-static-x86_64: Process 7074 attached [pid 7073] <... chdir resumed>) = 0 [pid 7074] set_robust_list(0x555583d53660, 24 [pid 7073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7074] <... set_robust_list resumed>) = 0 [pid 7073] <... prctl resumed>) = 0 [pid 7074] chdir("./329" [pid 7073] setpgid(0, 0) = 0 [pid 5076] <... close resumed>) = 0 [pid 7074] <... chdir resumed>) = 0 [pid 7073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7072] exit_group(0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7073] <... openat resumed>) = 3 [pid 7072] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7075 attached [pid 7074] <... prctl resumed>) = 0 [pid 7073] write(3, "1000", 4 [pid 7072] +++ exited with 0 +++ [pid 5072] umount2("./329", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... ioctl resumed>) = 0 [pid 7075] set_robust_list(0x555583d53660, 24 [pid 7074] setpgid(0, 0 [pid 7073] <... write resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7075 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7072, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] close(3 [pid 7075] <... set_robust_list resumed>) = 0 [pid 7074] <... setpgid resumed>) = 0 [pid 7073] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7075] chdir("./326" [pid 7074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7073] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 7075] <... chdir resumed>) = 0 [pid 7074] <... openat resumed>) = 3 [pid 7073] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7074] write(3, "1000", 4 [pid 5072] newfstatat(3, "", [pid 7075] <... prctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7075] setpgid(0, 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7076 [pid 5072] getdents64(3, ./strace-static-x86_64: Process 7076 attached [pid 7075] <... setpgid resumed>) = 0 [pid 7074] <... write resumed>) = 4 [pid 7073] <... symlink resumed>) = 0 [pid 5074] umount2("./330", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7076] set_robust_list(0x555583d53660, 24 [pid 7075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7074] close(3 [pid 7073] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./329/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7076] <... set_robust_list resumed>) = 0 [pid 7075] <... openat resumed>) = 3 [pid 7074] <... close resumed>) = 0 [pid 7073] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7076] chdir("./331" [pid 7075] write(3, "1000", 4 [pid 7074] symlink("/dev/binderfs", "./binderfs" [pid 7073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7076] <... chdir resumed>) = 0 [pid 7075] <... write resumed>) = 4 [pid 7074] <... symlink resumed>) = 0 [pid 7073] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... openat resumed>) = 3 [pid 5072] newfstatat(AT_FDCWD, "./329/binderfs", [pid 7076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7075] close(3 [pid 7074] memfd_create("syzkaller", 0 [pid 7073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7076] <... prctl resumed>) = 0 [pid 7075] <... close resumed>) = 0 [pid 7074] <... memfd_create resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7076] setpgid(0, 0 [pid 7075] symlink("/dev/binderfs", "./binderfs" [pid 7074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7075] <... symlink resumed>) = 0 [pid 7074] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7076] <... setpgid resumed>) = 0 [pid 7075] memfd_create("syzkaller", 0 [pid 7073] <... write resumed>) = 524288 [pid 5074] getdents64(3, [pid 5072] unlink("./329/binderfs" [pid 7076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7075] <... memfd_create resumed>) = 3 [pid 5072] <... unlink resumed>) = 0 [pid 7075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7076] <... openat resumed>) = 3 [pid 7075] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./330/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./330/binderfs" [pid 7075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7073] munmap(0x7f943d000000, 138412032) = 0 [pid 7076] write(3, "1000", 4 [pid 7074] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7076] <... write resumed>) = 4 [pid 7073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7073] ioctl(4, LOOP_SET_FD, 3 [pid 7076] close(3 [pid 7075] <... write resumed>) = 524288 [pid 7074] munmap(0x7f943d000000, 138412032 [pid 7073] <... ioctl resumed>) = 0 [pid 5074] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7076] <... close resumed>) = 0 [pid 7076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7075] munmap(0x7f943d000000, 138412032 [pid 7076] memfd_create("syzkaller", 0) = 3 [pid 7076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7075] <... munmap resumed>) = 0 [pid 7074] <... munmap resumed>) = 0 [pid 7073] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7073] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7073] close(4 [pid 5072] newfstatat(AT_FDCWD, "./329/file1", [pid 7075] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7073] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./330/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7075] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7074] <... openat resumed>) = 4 [pid 7073] mkdir("./file1", 0777 [pid 5072] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7074] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./329/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./329/file1") = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./329" [pid 7075] ioctl(4, LOOP_SET_FD, 3 [pid 7073] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 7076] <... write resumed>) = 524288 [pid 5074] openat(AT_FDCWD, "./330/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7076] munmap(0x7f943d000000, 138412032 [pid 5072] mkdir("./330", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7076] <... munmap resumed>) = 0 [pid 7076] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7076] ioctl(4, LOOP_SET_FD, 3 [pid 7075] <... ioctl resumed>) = 0 [pid 7074] <... ioctl resumed>) = 0 [ 251.810402][ T7073] loop2: detected capacity change from 0 to 1024 [ 251.831366][ T7074] loop4: detected capacity change from 0 to 1024 [ 251.844027][ T7075] loop5: detected capacity change from 0 to 1024 [pid 7073] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... openat resumed>) = 4 [pid 7075] close(3 [pid 7073] <... mount resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 7074] close(3) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7073] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7075] <... close resumed>) = 0 [pid 7075] close(4 [pid 7074] close(4 [pid 7073] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 7075] <... close resumed>) = 0 [pid 7075] mkdir("./file1", 0777 [pid 7073] chdir("./file1" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7073] <... chdir resumed>) = 0 [pid 7074] <... close resumed>) = 0 [pid 7074] mkdir("./file1", 0777 [pid 7075] <... mkdir resumed>) = 0 [pid 7074] <... mkdir resumed>) = 0 [pid 7073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(4, [pid 7075] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7073] truncate("./file1", 0 [pid 7074] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./330/file1") = 0 [pid 7073] <... truncate resumed>) = 0 [pid 7073] memfd_create("syzkaller", 0) = 4 [pid 7073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7073] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7076] <... ioctl resumed>) = 0 [pid 7074] <... mount resumed>) = 0 [pid 5074] getdents64(3, [pid 7076] close(3 [pid 7074] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7076] <... close resumed>) = 0 [pid 7074] <... openat resumed>) = 3 [pid 7076] close(4 [pid 7074] chdir("./file1" [pid 7076] <... close resumed>) = 0 [pid 7074] <... chdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [ 251.858994][ T7076] loop0: detected capacity change from 0 to 1024 [pid 7076] mkdir("./file1", 0777 [pid 7074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] close(3 [pid 5072] <... ioctl resumed>) = 0 [pid 7076] <... mkdir resumed>) = 0 [pid 7074] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... close resumed>) = 0 [pid 7076] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7074] truncate("./file1", 0 [pid 5074] rmdir("./330") = 0 [pid 7073] munmap(0x7f943d000000, 138412032) = 0 [pid 5074] mkdir("./331", 0777 [pid 7074] <... truncate resumed>) = 0 [pid 7076] <... mount resumed>) = 0 [pid 7074] memfd_create("syzkaller", 0) = 4 [pid 7074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7076] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7075] <... mount resumed>) = 0 [pid 7074] <... mmap resumed>) = 0x7f943d000000 [pid 7073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] close(3 [pid 7076] <... openat resumed>) = 3 [pid 7075] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7074] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7073] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 3 [pid 5072] <... close resumed>) = 0 [pid 7076] chdir("./file1" [pid 7075] <... openat resumed>) = 3 [pid 7073] close(4 [pid 7076] <... chdir resumed>) = 0 [pid 7075] chdir("./file1" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7075] <... chdir resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7076] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7075] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7076] truncate("./file1", 0 [pid 7075] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7073] <... close resumed>) = 0 [pid 7074] <... write resumed>) = 524288 [pid 7075] truncate("./file1", 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7077 [pid 7073] exit_group(0) = ? ./strace-static-x86_64: Process 7077 attached [pid 7073] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7073, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7076] <... truncate resumed>) = 0 [pid 5073] umount2("./331", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7076] memfd_create("syzkaller", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7076] <... memfd_create resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7077] set_robust_list(0x555583d53660, 24 [pid 7076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... openat resumed>) = 3 [pid 7077] <... set_robust_list resumed>) = 0 [pid 7076] <... mmap resumed>) = 0x7f943d000000 [pid 7075] <... truncate resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 7077] chdir("./330" [pid 7075] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7077] <... chdir resumed>) = 0 [pid 7075] <... memfd_create resumed>) = 4 [pid 7074] munmap(0x7f943d000000, 138412032 [pid 5073] getdents64(3, [pid 7077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7074] <... munmap resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7077] <... prctl resumed>) = 0 [pid 7075] <... mmap resumed>) = 0x7f943d000000 [pid 5073] umount2("./331/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7076] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7074] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7075] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7074] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7077] setpgid(0, 0 [pid 7074] close(4 [pid 5073] newfstatat(AT_FDCWD, "./331/binderfs", [pid 7077] <... setpgid resumed>) = 0 [pid 7076] <... write resumed>) = 524288 [pid 7074] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./331/binderfs") = 0 [pid 7077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = 0 [pid 7077] <... openat resumed>) = 3 [pid 7075] <... write resumed>) = 524288 [pid 5074] close(3 [pid 7077] write(3, "1000", 4) = 4 [pid 5074] <... close resumed>) = 0 [pid 7077] close(3 [pid 7075] munmap(0x7f943d000000, 138412032 [pid 7076] munmap(0x7f943d000000, 138412032 [pid 7074] exit_group(0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = 0 [pid 7077] <... close resumed>) = 0 [pid 7075] <... munmap resumed>) = 0 [pid 7074] <... exit_group resumed>) = ? [pid 7077] symlink("/dev/binderfs", "./binderfs" [pid 7076] <... munmap resumed>) = 0 [pid 7075] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7074] +++ exited with 0 +++ [pid 5073] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7078 ./strace-static-x86_64: Process 7078 attached [pid 7078] set_robust_list(0x555583d53660, 24 [pid 7075] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7074, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7078] <... set_robust_list resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] newfstatat(AT_FDCWD, "./331/file1", [pid 7077] <... symlink resumed>) = 0 [pid 7078] chdir("./331" [pid 7076] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7075] close(4 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7078] <... chdir resumed>) = 0 [pid 7077] memfd_create("syzkaller", 0 [pid 5073] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7078] setpgid(0, 0) = 0 [pid 7078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7078] write(3, "1000", 4 [pid 7075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7078] <... write resumed>) = 4 [pid 7077] <... memfd_create resumed>) = 3 [pid 7076] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./331/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7078] close(3) = 0 [pid 7077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7076] close(4 [pid 5073] <... openat resumed>) = 4 [pid 7078] symlink("/dev/binderfs", "./binderfs" [pid 7077] <... mmap resumed>) = 0x7f943d000000 [pid 7078] <... symlink resumed>) = 0 [pid 5075] umount2("./329", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 7078] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7078] <... memfd_create resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] getdents64(4, [pid 7078] <... mmap resumed>) = 0x7f943d000000 [pid 5075] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7076] <... close resumed>) = 0 [pid 7075] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5075] getdents64(3, [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 7076] exit_group(0 [pid 7075] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] rmdir("./331/file1" [pid 7076] <... exit_group resumed>) = ? [pid 5075] umount2("./329/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./329/binderfs", [pid 5073] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] unlink("./329/binderfs") = 0 [pid 5073] close(3 [pid 7075] +++ exited with 0 +++ [pid 5075] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 7076] +++ exited with 0 +++ [pid 5073] rmdir("./331" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7075, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... rmdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7076, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] mkdir("./332", 0777 [pid 5076] umount2("./326", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5071] umount2("./331", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] newfstatat(AT_FDCWD, "./329/file1", [pid 7078] <... write resumed>) = 524288 [pid 7077] <... write resumed>) = 524288 [pid 5076] newfstatat(3, "", [pid 5071] newfstatat(3, "", [pid 7078] munmap(0x7f943d000000, 138412032 [pid 7077] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7078] <... munmap resumed>) = 0 [pid 7077] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./329/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... openat resumed>) = 4 [pid 5071] umount2("./331/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./326/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7077] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7077] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./331/binderfs", [pid 7078] <... openat resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./326/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5071] unlink("./331/binderfs" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... unlink resumed>) = 0 [pid 7078] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7077] <... ioctl resumed>) = 0 [pid 5075] getdents64(4, [pid 7077] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7077] <... close resumed>) = 0 [pid 5075] close(4 [pid 7077] close(4 [pid 5075] <... close resumed>) = 0 [pid 7077] <... close resumed>) = 0 [pid 5075] rmdir("./329/file1" [pid 7077] mkdir("./file1", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 7077] <... mkdir resumed>) = 0 [pid 7078] <... ioctl resumed>) = 0 [pid 5076] unlink("./326/binderfs" [pid 5075] getdents64(3, [pid 5071] <... umount2 resumed>) = 0 [pid 7078] close(3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7077] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... unlink resumed>) = 0 [pid 5075] close(3 [pid 7078] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7078] close(4 [pid 5071] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7078] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7078] mkdir("./file1", 0777 [pid 5076] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] rmdir("./329" [pid 5073] close(3 [pid 7078] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(AT_FDCWD, "./331/file1", [pid 5075] mkdir("./330", 0777) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7079 attached [pid 7078] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7079 [pid 5071] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 7079] set_robust_list(0x555583d53660, 24 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7079] <... set_robust_list resumed>) = 0 [pid 7079] chdir("./332" [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] openat(AT_FDCWD, "./331/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7079] <... chdir resumed>) = 0 [pid 7077] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7077] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7079] <... prctl resumed>) = 0 [pid 7077] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7079] setpgid(0, 0 [pid 7077] chdir("./file1") = 0 [pid 7077] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7077] truncate("./file1", 0 [pid 7079] <... setpgid resumed>) = 0 [pid 7077] <... truncate resumed>) = 0 [pid 5071] getdents64(4, [pid 7077] memfd_create("syzkaller", 0 [pid 7079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7077] <... memfd_create resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7079] <... openat resumed>) = 3 [ 252.106896][ T7077] loop1: detected capacity change from 0 to 1024 [ 252.108705][ T7078] loop3: detected capacity change from 0 to 1024 [pid 7077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7079] write(3, "1000", 4 [pid 7077] <... mmap resumed>) = 0x7f943d000000 [pid 5071] getdents64(4, [pid 7077] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7079] <... write resumed>) = 4 [pid 5076] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7079] close(3 [pid 5071] close(4 [pid 5076] newfstatat(AT_FDCWD, "./326/file1", [pid 7079] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7079] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] rmdir("./331/file1" [pid 7079] <... symlink resumed>) = 0 [pid 5076] umount2("./326/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7078] <... mount resumed>) = 0 [pid 5071] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7079] memfd_create("syzkaller", 0 [pid 7078] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./326/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7079] <... memfd_create resumed>) = 3 [pid 7079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7078] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5071] close(3 [pid 7079] <... mmap resumed>) = 0x7f943d000000 [pid 7078] chdir("./file1" [pid 5076] newfstatat(4, "", [pid 5075] close(3 [pid 5071] <... close resumed>) = 0 [pid 7079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7078] <... chdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] rmdir("./331") = 0 [pid 7078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7080 attached [pid 7078] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] mkdir("./332", 0777 [pid 5076] getdents64(4, [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7080 [pid 7077] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7078] truncate("./file1", 0 [pid 5076] close(4 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7077] munmap(0x7f943d000000, 138412032 [pid 7080] set_robust_list(0x555583d53660, 24 [pid 7077] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7080] <... set_robust_list resumed>) = 0 [pid 5076] rmdir("./326/file1" [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7077] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 7080] chdir("./330" [pid 7077] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7077] close(4 [pid 7078] <... truncate resumed>) = 0 [pid 7080] <... chdir resumed>) = 0 [pid 7080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7079] <... write resumed>) = 524288 [pid 7078] memfd_create("syzkaller", 0 [pid 7077] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 7080] setpgid(0, 0 [pid 7079] munmap(0x7f943d000000, 138412032 [pid 7078] <... memfd_create resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7080] <... setpgid resumed>) = 0 [pid 7079] <... munmap resumed>) = 0 [pid 7078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7077] exit_group(0 [pid 5076] close(3 [pid 7080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7077] <... exit_group resumed>) = ? [pid 7080] <... openat resumed>) = 3 [pid 7078] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... close resumed>) = 0 [pid 7080] write(3, "1000", 4 [pid 7077] +++ exited with 0 +++ [pid 7080] <... write resumed>) = 4 [pid 7079] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7077, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7080] close(3 [pid 7079] <... openat resumed>) = 4 [pid 7080] <... close resumed>) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7080] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7079] ioctl(4, LOOP_SET_FD, 3 [pid 5076] rmdir("./326" [pid 7080] memfd_create("syzkaller", 0 [pid 7079] <... ioctl resumed>) = 0 [pid 7078] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 7080] <... memfd_create resumed>) = 3 [pid 5072] umount2("./330", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 7080] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7079] close(3 [pid 5076] mkdir("./327", 0777 [pid 5072] umount2("./330/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... ioctl resumed>) = 0 [pid 7079] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7079] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./330/binderfs", [pid 5071] close(3 [pid 7079] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 7079] mkdir("./file1", 0777 [pid 5072] unlink("./330/binderfs") = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7079] <... mkdir resumed>) = 0 [pid 5072] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7079] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 7081 attached ) = 3 [pid 5072] <... umount2 resumed>) = 0 [pid 7081] set_robust_list(0x555583d53660, 24 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7081] <... set_robust_list resumed>) = 0 [pid 7080] <... write resumed>) = 524288 [pid 7078] <... write resumed>) = 524288 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7081 [pid 5072] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./330/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./330/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7078] munmap(0x7f943d000000, 138412032 [pid 5072] getdents64(4, [pid 7081] chdir("./332" [pid 7078] <... munmap resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7081] <... chdir resumed>) = 0 [pid 7081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 252.257255][ T7079] loop2: detected capacity change from 0 to 1024 [pid 5072] getdents64(4, [pid 7081] setpgid(0, 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7078] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] close(4) = 0 [pid 7078] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] rmdir("./330/file1" [pid 7081] <... setpgid resumed>) = 0 [pid 7079] <... mount resumed>) = 0 [pid 7078] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 7081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7079] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7078] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7081] <... openat resumed>) = 3 [pid 7079] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 7079] chdir("./file1") = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7081] write(3, "1000", 4 [pid 7079] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] close(3 [pid 7081] <... write resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 7079] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7081] close(3 [pid 5072] rmdir("./330" [pid 7081] <... close resumed>) = 0 [pid 7079] truncate("./file1", 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7080] munmap(0x7f943d000000, 138412032 [pid 7081] symlink("/dev/binderfs", "./binderfs" [pid 7080] <... munmap resumed>) = 0 [pid 5072] mkdir("./331", 0777 [pid 7081] <... symlink resumed>) = 0 [pid 7080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 7080] <... openat resumed>) = 4 [pid 7078] exit_group(0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7081] memfd_create("syzkaller", 0 [pid 7080] ioctl(4, LOOP_SET_FD, 3 [pid 7079] <... truncate resumed>) = 0 [pid 7078] <... exit_group resumed>) = ? [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7078] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7078, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] umount2("./331", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 7081] <... memfd_create resumed>) = 3 [pid 7079] memfd_create("syzkaller", 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./331/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7079] <... memfd_create resumed>) = 4 [pid 5076] close(3 [pid 5074] unlink("./331/binderfs" [pid 7081] <... mmap resumed>) = 0x7f943d000000 [pid 7079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7080] <... ioctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7080] close(3 [pid 7079] <... mmap resumed>) = 0x7f943d000000 [pid 7080] <... close resumed>) = 0 [pid 7080] close(4) = 0 [pid 7080] mkdir("./file1", 0777) = 0 [pid 7080] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7082 attached [pid 7079] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7082 [pid 5074] <... umount2 resumed>) = 0 [pid 7082] set_robust_list(0x555583d53660, 24) = 0 [pid 5072] close(3 [ 252.348013][ T7080] loop4: detected capacity change from 0 to 1024 [pid 5074] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./331/file1", [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7082] chdir("./327" [pid 7081] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7082] <... chdir resumed>) = 0 [pid 5074] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7081] munmap(0x7f943d000000, 138412032 [pid 7080] <... mount resumed>) = 0 [pid 7079] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7083 attached [pid 7082] <... prctl resumed>) = 0 [pid 7082] setpgid(0, 0 [pid 7080] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./331/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7083 [pid 7083] set_robust_list(0x555583d53660, 24 [pid 7082] <... setpgid resumed>) = 0 [pid 7081] <... munmap resumed>) = 0 [pid 7079] munmap(0x7f943d000000, 138412032 [pid 7083] <... set_robust_list resumed>) = 0 [pid 7083] chdir("./331" [pid 5074] <... openat resumed>) = 4 [pid 7083] <... chdir resumed>) = 0 [pid 7083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7080] <... openat resumed>) = 3 [pid 7079] <... munmap resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 7083] setpgid(0, 0 [pid 7082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7079] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7083] <... setpgid resumed>) = 0 [pid 7082] <... openat resumed>) = 3 [pid 7081] <... openat resumed>) = 4 [pid 7080] chdir("./file1" [pid 7079] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7082] write(3, "1000", 4 [pid 7081] ioctl(4, LOOP_SET_FD, 3 [pid 7080] <... chdir resumed>) = 0 [pid 7079] close(4 [pid 5074] getdents64(4, [pid 7080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7080] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(4, [pid 7080] truncate("./file1", 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 7080] <... truncate resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7082] <... write resumed>) = 4 [pid 5074] rmdir("./331/file1" [pid 7083] <... openat resumed>) = 3 [pid 7082] close(3 [pid 7080] memfd_create("syzkaller", 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7083] write(3, "1000", 4 [pid 7082] <... close resumed>) = 0 [pid 7080] <... memfd_create resumed>) = 4 [pid 7080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(3, [pid 7083] <... write resumed>) = 4 [pid 7082] symlink("/dev/binderfs", "./binderfs" [pid 7081] <... ioctl resumed>) = 0 [pid 7080] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7083] close(3 [pid 7082] <... symlink resumed>) = 0 [pid 7081] close(3 [pid 7080] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7079] <... close resumed>) = 0 [pid 7083] <... close resumed>) = 0 [pid 7081] <... close resumed>) = 0 [pid 7081] close(4 [pid 7083] symlink("/dev/binderfs", "./binderfs" [pid 7082] memfd_create("syzkaller", 0 [pid 7081] <... close resumed>) = 0 [pid 7083] <... symlink resumed>) = 0 [pid 7081] mkdir("./file1", 0777 [pid 5074] close(3) = 0 [pid 7081] <... mkdir resumed>) = 0 [pid 7082] <... memfd_create resumed>) = 3 [pid 7081] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7079] exit_group(0 [pid 5074] rmdir("./331" [pid 7083] memfd_create("syzkaller", 0 [pid 7082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7080] <... write resumed>) = 524288 [pid 7079] <... exit_group resumed>) = ? [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./332", 0777) = 0 [pid 7082] <... mmap resumed>) = 0x7f943d000000 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 7083] <... memfd_create resumed>) = 3 [pid 7083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7080] munmap(0x7f943d000000, 138412032) = 0 [pid 7079] +++ exited with 0 +++ [pid 7081] <... mount resumed>) = 0 [pid 7080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7079, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 252.446453][ T7081] loop0: detected capacity change from 0 to 1024 [pid 7081] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7080] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./332", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7081] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7081] chdir("./file1" [pid 7080] close(4 [pid 5073] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7081] <... chdir resumed>) = 0 [pid 7081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./332/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./332/binderfs") = 0 [pid 5073] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7081] truncate("./file1", 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7080] <... close resumed>) = 0 [pid 7080] exit_group(0) = ? [pid 7082] <... write resumed>) = 524288 [pid 7083] <... write resumed>) = 524288 [pid 7082] munmap(0x7f943d000000, 138412032 [pid 5073] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7083] munmap(0x7f943d000000, 138412032) = 0 [pid 7082] <... munmap resumed>) = 0 [pid 7083] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7082] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7081] <... truncate resumed>) = 0 [pid 7080] +++ exited with 0 +++ [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7082] <... openat resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./332/file1", [pid 7081] memfd_create("syzkaller", 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7080, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7081] <... memfd_create resumed>) = 4 [pid 7082] ioctl(4, LOOP_SET_FD, 3 [pid 7083] <... openat resumed>) = 4 [pid 7081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5073] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./330", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7084 attached [pid 7083] ioctl(4, LOOP_SET_FD, 3 [pid 7082] <... ioctl resumed>) = 0 [pid 7081] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7084 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7084] set_robust_list(0x555583d53660, 24 [pid 5073] openat(AT_FDCWD, "./332/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7082] close(3 [pid 5073] <... openat resumed>) = 4 [pid 7084] <... set_robust_list resumed>) = 0 [pid 7082] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7084] chdir("./332" [pid 7082] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7084] <... chdir resumed>) = 0 [pid 7083] <... ioctl resumed>) = 0 [pid 7082] <... close resumed>) = 0 [pid 7081] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(3, "", [pid 5073] getdents64(4, [pid 7084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7083] close(3 [pid 7082] mkdir("./file1", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7084] <... prctl resumed>) = 0 [pid 7083] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7084] setpgid(0, 0 [pid 7083] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] getdents64(4, [pid 7084] <... setpgid resumed>) = 0 [pid 7083] <... close resumed>) = 0 [pid 7082] <... mkdir resumed>) = 0 [pid 5075] umount2("./330/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7083] mkdir("./file1", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7082] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./330/binderfs", [pid 7083] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7084] <... openat resumed>) = 3 [pid 5075] unlink("./330/binderfs" [pid 5073] close(4 [pid 7084] write(3, "1000", 4 [pid 7083] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7084] <... write resumed>) = 4 [pid 7081] <... write resumed>) = 524288 [pid 5075] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./332/file1" [pid 7084] close(3) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7084] symlink("/dev/binderfs", "./binderfs" [ 252.556667][ T7082] loop5: detected capacity change from 0 to 1024 [ 252.581539][ T7083] loop1: detected capacity change from 0 to 1024 [pid 5073] getdents64(3, [pid 7081] munmap(0x7f943d000000, 138412032 [pid 7084] <... symlink resumed>) = 0 [pid 7083] <... mount resumed>) = 0 [pid 7082] <... mount resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7083] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7084] memfd_create("syzkaller", 0 [pid 7083] <... openat resumed>) = 3 [pid 7082] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7081] <... munmap resumed>) = 0 [pid 7084] <... memfd_create resumed>) = 3 [pid 7083] chdir("./file1" [pid 7081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 7084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7083] <... chdir resumed>) = 0 [pid 7082] <... openat resumed>) = 3 [pid 7081] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7084] <... mmap resumed>) = 0x7f943d000000 [pid 7083] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7081] close(4 [pid 7084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7083] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7081] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./330/file1", [pid 7083] truncate("./file1", 0 [pid 7082] chdir("./file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 7082] <... chdir resumed>) = 0 [pid 5075] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./332" [pid 7083] <... truncate resumed>) = 0 [pid 7082] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7083] memfd_create("syzkaller", 0 [pid 7082] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "./330/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 7083] <... memfd_create resumed>) = 4 [pid 7083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 7083] <... mmap resumed>) = 0x7f943d000000 [pid 7082] truncate("./file1", 0 [pid 5075] newfstatat(4, "", [pid 5073] mkdir("./333", 0777 [pid 7083] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7081] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5073] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] close(4) = 0 [pid 7081] <... exit_group resumed>) = ? [pid 5075] rmdir("./330/file1" [pid 5073] <... openat resumed>) = 3 [pid 7081] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7083] <... write resumed>) = 524288 [pid 5075] getdents64(3, [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7081, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./330" [pid 5071] <... restart_syscall resumed>) = 0 [pid 7083] munmap(0x7f943d000000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [pid 7082] <... truncate resumed>) = 0 [pid 7082] memfd_create("syzkaller", 0 [pid 7083] <... munmap resumed>) = 0 [pid 7082] <... memfd_create resumed>) = 4 [pid 5071] umount2("./332", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] mkdir("./331", 0777 [pid 7084] <... write resumed>) = 524288 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7083] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7084] munmap(0x7f943d000000, 138412032 [pid 7083] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7084] <... munmap resumed>) = 0 [pid 7083] close(4 [pid 7082] <... mmap resumed>) = 0x7f943d000000 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7083] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7083] exit_group(0 [pid 7084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7082] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 7084] <... openat resumed>) = 4 [pid 7083] <... exit_group resumed>) = ? [pid 7084] ioctl(4, LOOP_SET_FD, 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7083] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7083, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./332/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./331", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./332/binderfs", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./332/binderfs" [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5072] getdents64(3, [pid 5071] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7082] <... write resumed>) = 524288 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... ioctl resumed>) = 0 [pid 7082] munmap(0x7f943d000000, 138412032 [pid 5072] umount2("./331/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7084] <... ioctl resumed>) = 0 [pid 7082] <... munmap resumed>) = 0 [pid 5073] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7084] close(3 [pid 5073] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./331/binderfs", [pid 7084] <... close resumed>) = 0 [pid 7082] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7084] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7082] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 7085 attached [pid 7084] <... close resumed>) = 0 [pid 7082] close(4 [pid 5072] unlink("./331/binderfs" [pid 5071] <... umount2 resumed>) = 0 [pid 7084] mkdir("./file1", 0777 [pid 7082] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7085 [pid 7085] set_robust_list(0x555583d53660, 24 [pid 7084] <... mkdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 7082] exit_group(0 [pid 7085] <... set_robust_list resumed>) = 0 [pid 7085] chdir("./333" [pid 7082] <... exit_group resumed>) = ? [pid 5072] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7085] <... chdir resumed>) = 0 [pid 5071] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./332/file1", [pid 7085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7085] <... prctl resumed>) = 0 [pid 5071] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7085] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7085] <... setpgid resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./332/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7082] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7082, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7084] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7085] <... openat resumed>) = 3 [pid 5071] getdents64(4, [pid 5076] umount2("./327", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 5076] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5071] close(4 [pid 7085] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7085] <... write resumed>) = 4 [pid 5071] rmdir("./332/file1" [pid 7085] close(3 [pid 5076] newfstatat(3, "", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... rmdir resumed>) = 0 [pid 7085] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 252.703693][ T7084] loop3: detected capacity change from 0 to 1024 [pid 5071] getdents64(3, ./strace-static-x86_64: Process 7086 attached [pid 7085] symlink("/dev/binderfs", "./binderfs" [pid 5076] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7086 [pid 7086] set_robust_list(0x555583d53660, 24) = 0 [pid 7086] chdir("./331" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7086] <... chdir resumed>) = 0 [pid 7085] <... symlink resumed>) = 0 [pid 5076] umount2("./327/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] close(3) = 0 [pid 5076] unlink("./327/binderfs") = 0 [pid 5071] rmdir("./332" [pid 7086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... umount2 resumed>) = 0 [pid 7086] <... prctl resumed>) = 0 [pid 7085] memfd_create("syzkaller", 0 [pid 5072] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 7086] setpgid(0, 0) = 0 [pid 7085] <... memfd_create resumed>) = 3 [pid 7084] <... mount resumed>) = 0 [pid 5076] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7084] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] newfstatat(AT_FDCWD, "./331/file1", [pid 5071] mkdir("./333", 0777 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7086] <... openat resumed>) = 3 [pid 7085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7084] <... openat resumed>) = 3 [pid 5072] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./331/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7086] write(3, "1000", 4 [pid 7085] <... mmap resumed>) = 0x7f943d000000 [pid 7084] chdir("./file1" [pid 5076] <... umount2 resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7086] <... write resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 7086] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7086] <... close resumed>) = 0 [pid 7086] symlink("/dev/binderfs", "./binderfs" [pid 5072] getdents64(4, [pid 7086] <... symlink resumed>) = 0 [pid 7085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7084] <... chdir resumed>) = 0 [pid 5076] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... openat resumed>) = 3 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7084] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./327/file1", [pid 7084] truncate("./file1", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 7086] memfd_create("syzkaller", 0 [pid 5076] umount2("./327/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7086] <... memfd_create resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./327/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./331/file1" [pid 7086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7084] <... truncate resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7086] <... mmap resumed>) = 0x7f943d000000 [pid 7084] memfd_create("syzkaller", 0 [pid 5076] newfstatat(4, "", [pid 5072] <... rmdir resumed>) = 0 [pid 7084] <... memfd_create resumed>) = 4 [pid 7084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 7084] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./327/file1") = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5072] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7085] <... write resumed>) = 524288 [pid 5072] rmdir("./331" [pid 5076] rmdir("./327") = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5076] mkdir("./328", 0777) = 0 [pid 5072] mkdir("./332", 0777 [pid 7085] munmap(0x7f943d000000, 138412032) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7085] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5071] <... ioctl resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7085] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... openat resumed>) = 3 [pid 7086] <... write resumed>) = 524288 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7086] munmap(0x7f943d000000, 138412032 [pid 7084] <... write resumed>) = 524288 [pid 7086] <... munmap resumed>) = 0 [pid 7086] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7086] <... openat resumed>) = 4 [pid 7086] ioctl(4, LOOP_SET_FD, 3 [pid 7084] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7087 [pid 7084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7084] close(4./strace-static-x86_64: Process 7087 attached [pid 7086] <... ioctl resumed>) = 0 [pid 7085] <... ioctl resumed>) = 0 [pid 7084] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7087] set_robust_list(0x555583d53660, 24 [pid 7085] close(3 [pid 7087] <... set_robust_list resumed>) = 0 [pid 7085] <... close resumed>) = 0 [pid 7085] close(4 [pid 7087] chdir("./333" [pid 7085] <... close resumed>) = 0 [pid 7085] mkdir("./file1", 0777 [pid 7087] <... chdir resumed>) = 0 [pid 7086] close(3 [pid 7085] <... mkdir resumed>) = 0 [pid 7087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7086] <... close resumed>) = 0 [pid 7085] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7087] <... prctl resumed>) = 0 [pid 7087] setpgid(0, 0) = 0 [ 252.830637][ T7085] loop2: detected capacity change from 0 to 1024 [ 252.857742][ T7086] loop4: detected capacity change from 0 to 1024 [pid 7086] close(4 [pid 7087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7085] <... mount resumed>) = 0 [pid 7084] exit_group(0 [pid 5076] close(3 [pid 5072] <... ioctl resumed>) = 0 [pid 7085] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7084] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 7086] <... close resumed>) = 0 [pid 7085] <... openat resumed>) = 3 [pid 7084] +++ exited with 0 +++ [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] close(3./strace-static-x86_64: Process 7088 attached [pid 7087] <... openat resumed>) = 3 [pid 7086] mkdir("./file1", 0777 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7084, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] <... close resumed>) = 0 [pid 7088] set_robust_list(0x555583d53660, 24 [pid 7087] write(3, "1000", 4 [pid 7086] <... mkdir resumed>) = 0 [pid 7085] chdir("./file1" [pid 7087] <... write resumed>) = 4 [pid 7085] <... chdir resumed>) = 0 [pid 7087] close(3 [pid 7085] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7088] <... set_robust_list resumed>) = 0 [pid 7085] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7087] <... close resumed>) = 0 [pid 7085] truncate("./file1", 0 [pid 5074] umount2("./332", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7087] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7088] chdir("./328" [pid 7087] <... symlink resumed>) = 0 [pid 7086] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7088 [pid 5074] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7088] <... chdir resumed>) = 0 [pid 7087] memfd_create("syzkaller", 0 [pid 7085] <... truncate resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7085] memfd_create("syzkaller", 0 [pid 5074] newfstatat(3, "", [pid 7085] <... memfd_create resumed>) = 4 ./strace-static-x86_64: Process 7089 attached [pid 7088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7087] <... memfd_create resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7089] set_robust_list(0x555583d53660, 24 [pid 7088] <... prctl resumed>) = 0 [pid 7087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(3, [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7089 [pid 7089] <... set_robust_list resumed>) = 0 [pid 7088] setpgid(0, 0 [pid 7087] <... mmap resumed>) = 0x7f943d000000 [pid 7086] <... mount resumed>) = 0 [pid 7085] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7089] chdir("./332" [pid 7088] <... setpgid resumed>) = 0 [pid 5074] umount2("./332/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7089] <... chdir resumed>) = 0 [pid 7088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7086] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7088] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./332/binderfs", [pid 7086] <... openat resumed>) = 3 [pid 7089] <... prctl resumed>) = 0 [pid 7088] write(3, "1000", 4) = 4 [pid 7088] close(3) = 0 [pid 7088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7088] memfd_create("syzkaller", 0) = 3 [pid 7088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7089] setpgid(0, 0 [pid 7087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7086] chdir("./file1" [pid 7085] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7089] <... setpgid resumed>) = 0 [pid 7088] <... mmap resumed>) = 0x7f943d000000 [pid 7086] <... chdir resumed>) = 0 [pid 5074] unlink("./332/binderfs" [pid 7088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7086] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... unlink resumed>) = 0 [pid 7086] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7086] truncate("./file1", 0 [pid 7089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7089] write(3, "1000", 4) = 4 [pid 7089] close(3) = 0 [pid 7086] <... truncate resumed>) = 0 [pid 7089] symlink("/dev/binderfs", "./binderfs" [pid 7086] memfd_create("syzkaller", 0) = 4 [pid 7089] <... symlink resumed>) = 0 [pid 7086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7089] memfd_create("syzkaller", 0 [pid 7088] <... write resumed>) = 524288 [pid 7086] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7089] <... memfd_create resumed>) = 3 [pid 7088] munmap(0x7f943d000000, 138412032 [pid 7089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7087] <... write resumed>) = 524288 [pid 7086] <... write resumed>) = 524288 [pid 7085] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7089] <... mmap resumed>) = 0x7f943d000000 [pid 7085] munmap(0x7f943d000000, 138412032 [pid 7087] munmap(0x7f943d000000, 138412032 [pid 7088] <... munmap resumed>) = 0 [pid 7087] <... munmap resumed>) = 0 [pid 7086] munmap(0x7f943d000000, 138412032 [pid 7085] <... munmap resumed>) = 0 [pid 5074] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7088] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7085] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7088] <... openat resumed>) = 4 [pid 7087] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7086] <... munmap resumed>) = 0 [pid 7085] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./332/file1", [pid 7088] ioctl(4, LOOP_SET_FD, 3 [pid 7085] close(4 [pid 7087] <... openat resumed>) = 4 [pid 7085] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7086] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7086] close(4 [pid 5074] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7089] <... write resumed>) = 524288 [pid 7087] ioctl(4, LOOP_SET_FD, 3 [pid 7085] exit_group(0 [pid 5074] openat(AT_FDCWD, "./332/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7088] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./332/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./332") = 0 [pid 5074] mkdir("./333", 0777) = 0 [pid 7087] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7089] munmap(0x7f943d000000, 138412032 [pid 7088] close(3 [pid 7087] close(3 [pid 7086] <... close resumed>) = 0 [pid 7085] <... exit_group resumed>) = ? [pid 7086] exit_group(0 [pid 5074] <... openat resumed>) = 3 [pid 7086] <... exit_group resumed>) = ? [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7089] <... munmap resumed>) = 0 [pid 7088] <... close resumed>) = 0 [pid 7087] <... close resumed>) = 0 [pid 7086] +++ exited with 0 +++ [pid 7085] +++ exited with 0 +++ [pid 7088] close(4 [pid 7087] close(4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7086, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7088] <... close resumed>) = 0 [pid 7087] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7085, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7088] mkdir("./file1", 0777 [pid 5073] umount2("./333", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7089] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7088] <... mkdir resumed>) = 0 [pid 7087] mkdir("./file1", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7089] <... openat resumed>) = 4 [pid 7088] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7087] <... mkdir resumed>) = 0 [ 253.023716][ T7088] loop5: detected capacity change from 0 to 1024 [ 253.036482][ T7087] loop0: detected capacity change from 0 to 1024 [pid 5075] umount2("./331", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7089] ioctl(4, LOOP_SET_FD, 3 [pid 7087] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./333/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./333/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7088] <... mount resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] unlink("./333/binderfs" [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... unlink resumed>) = 0 [pid 7088] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./331/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7088] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7088] chdir("./file1" [pid 5075] newfstatat(AT_FDCWD, "./331/binderfs", [pid 7088] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7088] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] unlink("./331/binderfs" [pid 7088] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... unlink resumed>) = 0 [pid 7088] truncate("./file1", 0 [pid 5075] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7089] <... ioctl resumed>) = 0 [pid 7089] close(3) = 0 [pid 7089] close(4) = 0 [pid 7089] mkdir("./file1", 0777) = 0 [pid 7088] <... truncate resumed>) = 0 [pid 7088] memfd_create("syzkaller", 0) = 4 [pid 7087] <... mount resumed>) = 0 [pid 7088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7089] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7088] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... ioctl resumed>) = 0 [pid 7088] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7087] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7089] <... mount resumed>) = 0 [pid 7087] chdir("./file1" [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = 0 [pid 7087] <... chdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7087] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7089] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7087] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7089] chdir("./file1") = 0 [pid 7089] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7089] truncate("./file1", 0) = 0 [pid 7089] memfd_create("syzkaller", 0 [pid 7087] truncate("./file1", 0 [ 253.069823][ T7089] loop1: detected capacity change from 0 to 1024 [pid 5073] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7089] <... memfd_create resumed>) = 4 [pid 7089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5075] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./333/file1", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7090 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7090 attached [pid 5075] newfstatat(AT_FDCWD, "./331/file1", [pid 5073] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7090] set_robust_list(0x555583d53660, 24 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7090] <... set_robust_list resumed>) = 0 [pid 7087] <... truncate resumed>) = 0 [pid 5075] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./333/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7090] chdir("./333" [pid 7089] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7087] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 7090] <... chdir resumed>) = 0 [pid 7088] <... write resumed>) = 524288 [pid 5073] newfstatat(4, "", [pid 5075] openat(AT_FDCWD, "./331/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7087] <... memfd_create resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7088] munmap(0x7f943d000000, 138412032 [pid 7087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] getdents64(4, [pid 7090] <... prctl resumed>) = 0 [pid 7087] <... mmap resumed>) = 0x7f943d000000 [pid 7090] setpgid(0, 0 [pid 7089] <... write resumed>) = 524288 [pid 7088] <... munmap resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7090] <... setpgid resumed>) = 0 [pid 7090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] getdents64(4, [pid 7090] write(3, "1000", 4 [pid 7088] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7090] <... write resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7090] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(4 [pid 7090] <... close resumed>) = 0 [pid 7090] symlink("/dev/binderfs", "./binderfs" [pid 7088] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... close resumed>) = 0 [pid 7090] <... symlink resumed>) = 0 [pid 7088] close(4 [pid 5075] getdents64(4, [pid 7090] memfd_create("syzkaller", 0 [pid 5073] rmdir("./333/file1" [pid 7090] <... memfd_create resumed>) = 3 [pid 7089] munmap(0x7f943d000000, 138412032 [pid 7090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7089] <... munmap resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7090] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(3, [pid 5075] getdents64(4, [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7089] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] close(3 [pid 7090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7089] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7087] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... close resumed>) = 0 [pid 5075] close(4 [pid 7089] close(4 [pid 7088] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7089] <... close resumed>) = 0 [pid 5075] rmdir("./331/file1" [pid 5073] rmdir("./333" [pid 7088] exit_group(0) = ? [pid 7088] +++ exited with 0 +++ [pid 5073] <... rmdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7088, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... rmdir resumed>) = 0 [pid 5073] mkdir("./334", 0777 [pid 5075] getdents64(3, [pid 5073] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./328", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./331" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7089] exit_group(0) = ? [pid 7089] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7089, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7090] <... write resumed>) = 524288 [pid 5076] <... openat resumed>) = 3 [pid 5075] mkdir("./332", 0777 [pid 7090] munmap(0x7f943d000000, 138412032 [pid 7087] <... write resumed>) = 524288 [pid 5076] newfstatat(3, "", [pid 5075] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./332", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7090] <... munmap resumed>) = 0 [pid 7087] munmap(0x7f943d000000, 138412032 [pid 5076] getdents64(3, [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] getdents64(3, [pid 7090] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./328/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./332/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7090] <... openat resumed>) = 4 [pid 7087] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7090] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./332/binderfs", [pid 5076] newfstatat(AT_FDCWD, "./328/binderfs", [pid 7087] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7087] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./332/binderfs" [pid 7087] close(4 [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] unlink("./328/binderfs") = 0 [pid 7087] <... close resumed>) = 0 [pid 5076] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5072] <... umount2 resumed>) = 0 [pid 7090] close(3) = 0 [pid 7090] close(4) = 0 [pid 7090] mkdir("./file1", 0777) = 0 [pid 7090] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7087] exit_group(0 [pid 5073] <... close resumed>) = 0 [pid 5072] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7091 attached [pid 7087] <... exit_group resumed>) = ? [pid 5072] newfstatat(AT_FDCWD, "./332/file1", [pid 7091] set_robust_list(0x555583d53660, 24 [pid 7087] +++ exited with 0 +++ [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7091 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7087, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 7091] <... set_robust_list resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./332/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7091] chdir("./334" [pid 5072] <... openat resumed>) = 4 [pid 7091] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [ 253.226780][ T7090] loop3: detected capacity change from 0 to 1024 [pid 5072] newfstatat(4, "", [pid 7091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./333", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7090] <... mount resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5072] getdents64(4, [pid 7091] <... prctl resumed>) = 0 [pid 7090] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7091] setpgid(0, 0 [pid 5076] newfstatat(AT_FDCWD, "./328/file1", [pid 5072] getdents64(4, [pid 7091] <... setpgid resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7090] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 7091] <... openat resumed>) = 3 [pid 7090] chdir("./file1" [pid 5076] umount2("./328/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5072] rmdir("./332/file1" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7091] write(3, "1000", 4 [pid 7090] <... chdir resumed>) = 0 [pid 7091] <... write resumed>) = 4 [pid 7090] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] umount2("./333/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7091] close(3 [pid 5076] openat(AT_FDCWD, "./328/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 7091] <... close resumed>) = 0 [pid 7091] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7091] <... symlink resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5072] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 7090] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./332" [pid 5071] newfstatat(AT_FDCWD, "./333/binderfs", ./strace-static-x86_64: Process 7092 attached [pid 7091] memfd_create("syzkaller", 0 [pid 5076] getdents64(4, [pid 7091] <... memfd_create resumed>) = 3 [pid 7090] truncate("./file1", 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7092 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7092] set_robust_list(0x555583d53660, 24 [pid 7091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(4, [pid 5072] mkdir("./333", 0777 [pid 7092] <... set_robust_list resumed>) = 0 [pid 7091] <... mmap resumed>) = 0x7f943d000000 [pid 7092] chdir("./332" [pid 5072] <... mkdir resumed>) = 0 [pid 5071] unlink("./333/binderfs") = 0 [pid 7092] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7092] <... prctl resumed>) = 0 [pid 5076] close(4 [pid 5072] <... openat resumed>) = 3 [pid 7092] setpgid(0, 0 [pid 5076] <... close resumed>) = 0 [pid 7092] <... setpgid resumed>) = 0 [pid 7091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] rmdir("./328/file1" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7090] <... truncate resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7090] memfd_create("syzkaller", 0 [pid 5076] getdents64(3, [pid 7090] <... memfd_create resumed>) = 4 [pid 7090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 7092] <... openat resumed>) = 3 [pid 7091] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 5071] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7092] write(3, "1000", 4 [pid 7091] munmap(0x7f943d000000, 138412032 [pid 5076] rmdir("./328" [pid 7092] <... write resumed>) = 4 [pid 7090] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7092] close(3 [pid 7091] <... munmap resumed>) = 0 [pid 5076] mkdir("./329", 0777 [pid 5071] newfstatat(AT_FDCWD, "./333/file1", [pid 7092] <... close resumed>) = 0 [pid 7092] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7092] <... symlink resumed>) = 0 [pid 7091] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7091] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./333/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7091] ioctl(4, LOOP_SET_FD, 3 [pid 7090] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... openat resumed>) = 4 [pid 7090] munmap(0x7f943d000000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 5071] newfstatat(4, "", [pid 5072] <... ioctl resumed>) = 0 [pid 7092] memfd_create("syzkaller", 0 [pid 7091] <... ioctl resumed>) = 0 [pid 7090] <... munmap resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7092] <... memfd_create resumed>) = 3 [pid 7091] close(3 [pid 7090] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] close(3 [pid 5071] getdents64(4, [pid 7092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, [pid 7092] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7090] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./333/file1") = 0 [pid 5071] getdents64(3, [pid 7092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7091] <... close resumed>) = 0 [pid 7090] close(4 [pid 5072] <... close resumed>) = 0 [pid 7091] close(4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7091] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... close resumed>) = 0 [pid 7091] mkdir("./file1", 0777) = 0 [pid 5071] rmdir("./333"./strace-static-x86_64: Process 7093 attached [pid 7092] <... write resumed>) = 524288 [pid 7091] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7090] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7093] set_robust_list(0x555583d53660, 24 [pid 7090] exit_group(0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7093 [ 253.373778][ T7091] loop2: detected capacity change from 0 to 1024 [pid 5071] mkdir("./334", 0777 [pid 7093] <... set_robust_list resumed>) = 0 [pid 7090] <... exit_group resumed>) = ? [pid 7093] chdir("./333" [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7093] <... chdir resumed>) = 0 [pid 7091] <... mount resumed>) = 0 [pid 7090] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7090, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7093] setpgid(0, 0 [pid 7091] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] umount2("./333", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7093] <... setpgid resumed>) = 0 [pid 7092] munmap(0x7f943d000000, 138412032 [pid 7091] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7092] <... munmap resumed>) = 0 [pid 7091] chdir("./file1" [pid 5074] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 7091] <... chdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7092] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7091] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] getdents64(3, [pid 7092] <... openat resumed>) = 4 [pid 7091] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7093] <... openat resumed>) = 3 [pid 7092] ioctl(4, LOOP_SET_FD, 3 [pid 7093] write(3, "1000", 4) = 4 [pid 7093] close(3) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] umount2("./333/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7093] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 7091] truncate("./file1", 0 [pid 5074] newfstatat(AT_FDCWD, "./333/binderfs", [pid 7093] <... symlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7093] memfd_create("syzkaller", 0 [pid 5074] unlink("./333/binderfs" [pid 7093] <... memfd_create resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 7091] <... truncate resumed>) = 0 [pid 7091] memfd_create("syzkaller", 0 [pid 5074] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7091] <... memfd_create resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7094 [pid 7093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7094 attached [pid 7094] set_robust_list(0x555583d53660, 24 [pid 7093] <... mmap resumed>) = 0x7f943d000000 [pid 7091] <... mmap resumed>) = 0x7f943d000000 [pid 7094] <... set_robust_list resumed>) = 0 [pid 7093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7091] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7094] chdir("./329" [pid 5074] <... umount2 resumed>) = 0 [pid 7092] <... ioctl resumed>) = 0 [pid 7092] close(3) = 0 [pid 7092] close(4) = 0 [pid 7092] mkdir("./file1", 0777) = 0 [pid 7094] <... chdir resumed>) = 0 [pid 7091] <... write resumed>) = 524288 [pid 5074] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... ioctl resumed>) = 0 [pid 7094] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7093] <... write resumed>) = 524288 [pid 7092] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7091] munmap(0x7f943d000000, 138412032 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 7094] <... prctl resumed>) = 0 [pid 7091] <... munmap resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./333/file1", [pid 5071] <... close resumed>) = 0 [ 253.453414][ T7092] loop4: detected capacity change from 0 to 1024 [pid 7094] setpgid(0, 0 [pid 7092] <... mount resumed>) = 0 [pid 7091] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7094] <... setpgid resumed>) = 0 [pid 7091] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7091] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7095 ./strace-static-x86_64: Process 7095 attached [pid 7094] <... openat resumed>) = 3 [pid 7093] munmap(0x7f943d000000, 138412032 [pid 7092] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7091] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./333/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7095] set_robust_list(0x555583d53660, 24 [pid 7094] write(3, "1000", 4 [pid 7093] <... munmap resumed>) = 0 [pid 7092] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 7093] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7095] <... set_robust_list resumed>) = 0 [pid 7093] <... openat resumed>) = 4 [pid 7092] chdir("./file1" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7095] chdir("./334" [pid 7092] <... chdir resumed>) = 0 [pid 5074] getdents64(4, [pid 7094] <... write resumed>) = 4 [pid 7095] <... chdir resumed>) = 0 [pid 7093] ioctl(4, LOOP_SET_FD, 3 [pid 7092] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7094] close(3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7095] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7094] <... close resumed>) = 0 [pid 7092] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7091] exit_group(0 [pid 5074] getdents64(4, [pid 7095] <... prctl resumed>) = 0 [pid 7092] truncate("./file1", 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7095] setpgid(0, 0 [pid 7092] <... truncate resumed>) = 0 [pid 5074] close(4 [pid 7095] <... setpgid resumed>) = 0 [pid 7094] symlink("/dev/binderfs", "./binderfs" [pid 7092] memfd_create("syzkaller", 0 [pid 7091] <... exit_group resumed>) = ? [pid 7095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... close resumed>) = 0 [pid 7095] <... openat resumed>) = 3 [pid 7094] <... symlink resumed>) = 0 [pid 5074] rmdir("./333/file1" [pid 7095] write(3, "1000", 4 [pid 7092] <... memfd_create resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 7095] <... write resumed>) = 4 [pid 7095] close(3 [pid 7092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7095] <... close resumed>) = 0 [pid 7092] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(3, [pid 7095] symlink("/dev/binderfs", "./binderfs" [pid 7094] memfd_create("syzkaller", 0 [pid 7093] <... ioctl resumed>) = 0 [pid 7095] <... symlink resumed>) = 0 [pid 7094] <... memfd_create resumed>) = 3 [pid 7093] close(3 [pid 7092] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7091] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7093] <... close resumed>) = 0 [pid 7093] close(4 [pid 7095] memfd_create("syzkaller", 0 [pid 7093] <... close resumed>) = 0 [pid 5074] close(3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7091, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./333" [pid 7095] <... memfd_create resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] umount2("./334", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7093] mkdir("./file1", 0777 [pid 5074] mkdir("./334", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7095] <... mmap resumed>) = 0x7f943d000000 [pid 7094] <... mmap resumed>) = 0x7f943d000000 [pid 7094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7093] <... mkdir resumed>) = 0 [pid 7092] <... write resumed>) = 524288 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 7093] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [ 253.537112][ T7093] loop1: detected capacity change from 0 to 1024 [pid 5073] getdents64(3, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./334/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7094] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./334/binderfs") = 0 [pid 5073] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7095] <... write resumed>) = 524288 [pid 7094] munmap(0x7f943d000000, 138412032 [pid 7093] <... mount resumed>) = 0 [pid 7092] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = 0 [pid 7093] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7095] munmap(0x7f943d000000, 138412032 [pid 7094] <... munmap resumed>) = 0 [pid 7093] <... openat resumed>) = 3 [pid 7092] <... munmap resumed>) = 0 [pid 7093] chdir("./file1" [pid 7092] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7095] <... munmap resumed>) = 0 [pid 7094] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7093] <... chdir resumed>) = 0 [pid 7092] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] newfstatat(AT_FDCWD, "./334/file1", [pid 7093] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7092] close(4 [pid 7095] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7094] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7095] <... openat resumed>) = 4 [pid 7094] ioctl(4, LOOP_SET_FD, 3 [pid 7093] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7092] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7093] truncate("./file1", 0 [pid 7092] exit_group(0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7092] <... exit_group resumed>) = ? [pid 5073] openat(AT_FDCWD, "./334/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 7092] +++ exited with 0 +++ [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7092, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] getdents64(4, [pid 5075] <... restart_syscall resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./332", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5075] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 5073] close(4 [pid 7095] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5073] rmdir("./334/file1" [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] umount2("./332/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./332/binderfs", [pid 5074] close(3) = 0 [pid 5073] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7095] <... ioctl resumed>) = 0 [pid 7094] <... ioctl resumed>) = 0 [pid 5075] unlink("./332/binderfs" [pid 5073] close(3 [pid 7094] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7094] <... close resumed>) = 0 [pid 5073] rmdir("./334" [pid 7095] close(3 [pid 7094] close(4./strace-static-x86_64: Process 7096 attached [pid 7095] <... close resumed>) = 0 [pid 7094] <... close resumed>) = 0 [pid 7093] <... truncate resumed>) = 0 [pid 5075] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 7096] set_robust_list(0x555583d53660, 24 [pid 7093] memfd_create("syzkaller", 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7096 [pid 7096] <... set_robust_list resumed>) = 0 [pid 7095] close(4 [pid 7094] mkdir("./file1", 0777 [pid 7093] <... memfd_create resumed>) = 4 [pid 7096] chdir("./334" [pid 7095] <... close resumed>) = 0 [pid 7093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] mkdir("./335", 0777 [pid 7096] <... chdir resumed>) = 0 [pid 7095] mkdir("./file1", 0777 [pid 7094] <... mkdir resumed>) = 0 [pid 7093] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... mkdir resumed>) = 0 [pid 7096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7095] <... mkdir resumed>) = 0 [pid 7096] setpgid(0, 0 [pid 7093] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 7096] <... setpgid resumed>) = 0 [pid 7095] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7094] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./332/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7096] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7096] write(3, "1000", 4 [pid 5075] openat(AT_FDCWD, "./332/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7096] <... write resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 7096] close(3 [pid 7094] <... mount resumed>) = 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7096] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 7096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7096] memfd_create("syzkaller", 0 [pid 7094] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 253.639555][ T7094] loop5: detected capacity change from 0 to 1024 [ 253.654793][ T7095] loop0: detected capacity change from 0 to 1024 [pid 5075] getdents64(4, [pid 7096] <... memfd_create resumed>) = 3 [pid 7095] <... mount resumed>) = 0 [pid 7094] <... openat resumed>) = 3 [pid 7093] <... write resumed>) = 524288 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7095] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7094] chdir("./file1" [pid 5075] close(4 [pid 7096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./332/file1" [pid 7096] <... mmap resumed>) = 0x7f943d000000 [pid 7095] <... openat resumed>) = 3 [pid 7095] chdir("./file1" [pid 7094] <... chdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7095] <... chdir resumed>) = 0 [pid 7094] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(3, [pid 7093] munmap(0x7f943d000000, 138412032 [pid 7096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7095] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7094] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7094] truncate("./file1", 0 [pid 7093] <... munmap resumed>) = 0 [pid 5075] close(3 [pid 7095] truncate("./file1", 0) = 0 [pid 7094] <... truncate resumed>) = 0 [pid 7093] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7093] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7095] memfd_create("syzkaller", 0 [pid 7094] memfd_create("syzkaller", 0 [pid 7093] close(4 [pid 5075] rmdir("./332" [pid 7094] <... memfd_create resumed>) = 4 [pid 7095] <... memfd_create resumed>) = 4 [pid 7094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7093] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7094] <... mmap resumed>) = 0x7f943d000000 [pid 7096] <... write resumed>) = 524288 [pid 5073] close(3 [pid 5075] mkdir("./333", 0777 [pid 5073] <... close resumed>) = 0 [pid 7096] munmap(0x7f943d000000, 138412032 [pid 7093] exit_group(0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7094] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... mkdir resumed>) = 0 [pid 7096] <... munmap resumed>) = 0 [pid 7095] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7093] <... exit_group resumed>) = ? [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7093] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7093, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7096] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] umount2("./333", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7097 attached [pid 7096] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7097] set_robust_list(0x555583d53660, 24 [pid 7096] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7097 [pid 5072] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7095] <... write resumed>) = 524288 [pid 5075] <... openat resumed>) = 3 [pid 7097] <... set_robust_list resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7097] chdir("./335" [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7097] <... chdir resumed>) = 0 [pid 5072] getdents64(3, [pid 7097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7097] <... prctl resumed>) = 0 [pid 5072] umount2("./333/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7097] setpgid(0, 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./333/binderfs", [pid 7097] <... setpgid resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] unlink("./333/binderfs") = 0 [pid 5072] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7097] <... openat resumed>) = 3 [pid 7097] write(3, "1000", 4) = 4 [pid 7097] close(3) = 0 [pid 7097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7097] memfd_create("syzkaller", 0) = 3 [pid 7097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7096] <... ioctl resumed>) = 0 [pid 7095] munmap(0x7f943d000000, 138412032 [pid 7096] close(3 [pid 7095] <... munmap resumed>) = 0 [pid 7096] <... close resumed>) = 0 [pid 7096] close(4) = 0 [pid 7095] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7094] <... write resumed>) = 524288 [pid 7096] mkdir("./file1", 0777 [pid 7095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7094] munmap(0x7f943d000000, 138412032 [pid 7096] <... mkdir resumed>) = 0 [pid 7094] <... munmap resumed>) = 0 [pid 7095] close(4 [pid 7094] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7097] <... write resumed>) = 524288 [pid 7095] <... close resumed>) = 0 [pid 7094] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 253.772859][ T7096] loop3: detected capacity change from 0 to 1024 [pid 7096] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7097] munmap(0x7f943d000000, 138412032 [pid 7095] exit_group(0 [pid 7094] close(4 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7096] <... mount resumed>) = 0 [pid 7097] <... munmap resumed>) = 0 [pid 7095] <... exit_group resumed>) = ? [pid 7096] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7095] +++ exited with 0 +++ [pid 7094] <... close resumed>) = 0 [pid 5075] close(3 [pid 7096] <... openat resumed>) = 3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7095, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7096] chdir("./file1" [pid 5075] <... close resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7096] <... chdir resumed>) = 0 [pid 5072] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... restart_syscall resumed>) = 0 [pid 7097] <... openat resumed>) = 4 [pid 7096] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7097] ioctl(4, LOOP_SET_FD, 3 [pid 7096] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./333/file1", [pid 7096] truncate("./file1", 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./334", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7098 attached [pid 7096] <... truncate resumed>) = 0 [pid 7094] exit_group(0 [pid 5071] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "./333/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7098] set_robust_list(0x555583d53660, 24 [pid 7096] memfd_create("syzkaller", 0 [pid 7094] <... exit_group resumed>) = ? [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7098 [pid 5071] <... openat resumed>) = 3 [pid 7096] <... memfd_create resumed>) = 4 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./334/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7096] <... mmap resumed>) = 0x7f943d000000 [pid 5071] newfstatat(AT_FDCWD, "./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./334/binderfs") = 0 [pid 7098] <... set_robust_list resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7098] chdir("./333" [pid 5072] newfstatat(4, "", [pid 7098] <... chdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7098] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] getdents64(4, [pid 7098] <... prctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7098] setpgid(0, 0 [pid 5072] getdents64(4, [pid 7098] <... setpgid resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] close(4 [pid 7098] <... openat resumed>) = 3 [pid 7097] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7098] write(3, "1000", 4 [pid 7097] close(3 [pid 5072] rmdir("./333/file1" [pid 7098] <... write resumed>) = 4 [pid 7097] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7098] close(3 [pid 7097] close(4 [pid 7098] <... close resumed>) = 0 [pid 7097] <... close resumed>) = 0 [pid 7098] symlink("/dev/binderfs", "./binderfs" [pid 7097] mkdir("./file1", 0777 [pid 7094] +++ exited with 0 +++ [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7094, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7098] <... symlink resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7097] <... mkdir resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5072] close(3 [pid 7098] memfd_create("syzkaller", 0 [pid 7096] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7098] <... memfd_create resumed>) = 3 [pid 7097] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] rmdir("./333" [pid 7098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./329", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 5071] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7098] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 3 [pid 5072] mkdir("./334", 0777) = 0 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./329/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./329/binderfs" [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [ 253.860049][ T7097] loop2: detected capacity change from 0 to 1024 [pid 5071] newfstatat(AT_FDCWD, "./334/file1", [pid 7098] <... write resumed>) = 524288 [pid 7096] <... write resumed>) = 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7096] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7096] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./334/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7097] <... mount resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", [pid 7097] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7097] <... openat resumed>) = 3 [pid 7096] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] getdents64(4, [pid 7097] chdir("./file1" [pid 7096] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7096] close(4 [pid 7097] <... chdir resumed>) = 0 [pid 5071] getdents64(4, [pid 7097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7097] truncate("./file1", 0 [pid 5076] newfstatat(AT_FDCWD, "./329/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] close(4 [pid 5076] umount2("./329/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./329/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] rmdir("./334/file1" [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7098] munmap(0x7f943d000000, 138412032 [pid 7097] <... truncate resumed>) = 0 [pid 5076] getdents64(4, [pid 5071] getdents64(3, [pid 7098] <... munmap resumed>) = 0 [pid 7097] memfd_create("syzkaller", 0 [pid 7096] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7096] exit_group(0 [pid 5076] getdents64(4, [pid 7097] <... memfd_create resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7098] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7096] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7098] <... openat resumed>) = 4 [pid 7097] <... mmap resumed>) = 0x7f943d000000 [pid 5076] close(4 [pid 7096] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] rmdir("./329/file1" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7096, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] rmdir("./334" [pid 7098] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... rmdir resumed>) = 0 [pid 7098] <... ioctl resumed>) = 0 [pid 7097] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7098] close(3 [pid 7097] <... write resumed>) = 524288 [pid 5076] getdents64(3, [pid 5071] mkdir("./335", 0777 [pid 7098] <... close resumed>) = 0 ./strace-static-x86_64: Process 7099 attached [pid 7098] close(4 [pid 7097] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./334", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7099 [pid 5071] <... mkdir resumed>) = 0 [pid 7098] <... close resumed>) = 0 [pid 7099] set_robust_list(0x555583d53660, 24 [pid 7097] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7099] <... set_robust_list resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7099] chdir("./334" [pid 5076] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5076] rmdir("./329" [pid 5074] newfstatat(3, "", [pid 7099] <... chdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7097] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] getdents64(3, [pid 7099] <... prctl resumed>) = 0 [pid 7097] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7099] setpgid(0, 0 [pid 7097] close(4 [pid 5074] umount2("./334/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7099] <... setpgid resumed>) = 0 [pid 7097] <... close resumed>) = 0 [pid 5076] mkdir("./330", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7098] mkdir("./file1", 0777 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7098] <... mkdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5074] newfstatat(AT_FDCWD, "./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 253.953317][ T7098] loop4: detected capacity change from 0 to 1024 [pid 5074] unlink("./334/binderfs" [pid 7099] <... openat resumed>) = 3 [pid 7098] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7099] write(3, "1000", 4 [pid 5076] <... openat resumed>) = 3 [pid 7099] <... write resumed>) = 4 [pid 7099] close(3) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7098] <... mount resumed>) = 0 [pid 7098] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7099] memfd_create("syzkaller", 0 [pid 7098] <... openat resumed>) = 3 [pid 7098] chdir("./file1" [pid 7097] exit_group(0 [pid 7099] <... memfd_create resumed>) = 3 [pid 7098] <... chdir resumed>) = 0 [pid 7099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7098] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7097] <... exit_group resumed>) = ? [pid 7099] <... mmap resumed>) = 0x7f943d000000 [pid 7098] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7097] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = 0 [pid 7098] truncate("./file1", 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7097, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] umount2("./335", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 7098] <... truncate resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(3, "", [pid 7098] memfd_create("syzkaller", 0 [pid 5074] newfstatat(AT_FDCWD, "./334/file1", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7098] <... memfd_create resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(3, [pid 7098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7098] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./335/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7099] <... write resumed>) = 524288 [pid 5074] openat(AT_FDCWD, "./334/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7099] munmap(0x7f943d000000, 138412032 [pid 5074] <... openat resumed>) = 4 [pid 5073] unlink("./335/binderfs") = 0 [pid 5073] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7098] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] newfstatat(4, "", [pid 7099] <... munmap resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 7099] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... ioctl resumed>) = 0 [pid 7099] ioctl(4, LOOP_SET_FD, 3 [pid 5074] getdents64(4, [pid 7099] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7098] <... write resumed>) = 524288 [pid 5074] close(4 [pid 5073] newfstatat(AT_FDCWD, "./335/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7100 [pid 5073] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./335/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, ./strace-static-x86_64: Process 7100 attached [pid 5076] close(3 [pid 5074] rmdir("./334/file1" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7100] set_robust_list(0x555583d53660, 24 [pid 7098] munmap(0x7f943d000000, 138412032 [pid 5076] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 7098] <... munmap resumed>) = 0 [pid 5073] rmdir("./335/file1") = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 7098] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 7098] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] rmdir("./335" [pid 7100] <... set_robust_list resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 7098] close(4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7100] chdir("./335" [pid 7099] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7101 [pid 5074] close(3 [pid 7100] <... chdir resumed>) = 0 [pid 7100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... close resumed>) = 0 [pid 5073] mkdir("./336", 0777 [pid 7100] <... prctl resumed>) = 0 [pid 5074] rmdir("./334" [pid 5073] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7100] setpgid(0, 0 [pid 5074] mkdir("./335", 0777./strace-static-x86_64: Process 7101 attached [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7101] set_robust_list(0x555583d53660, 24 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7101] <... set_robust_list resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7101] chdir("./330" [pid 7100] <... setpgid resumed>) = 0 [pid 7099] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7101] <... chdir resumed>) = 0 [pid 7100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7099] close(4 [pid 7098] <... close resumed>) = 0 [pid 7101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7099] <... close resumed>) = 0 [pid 7100] <... openat resumed>) = 3 [pid 7099] mkdir("./file1", 0777 [pid 7101] <... prctl resumed>) = 0 [pid 7101] setpgid(0, 0) = 0 [pid 7101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7099] <... mkdir resumed>) = 0 [pid 7101] <... openat resumed>) = 3 [pid 7099] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... openat resumed>) = 3 [pid 7101] write(3, "1000", 4 [pid 7100] write(3, "1000", 4 [pid 7098] exit_group(0 [pid 7101] <... write resumed>) = 4 [pid 7100] <... write resumed>) = 4 [pid 7098] <... exit_group resumed>) = ? [pid 7100] close(3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7101] close(3 [pid 7100] <... close resumed>) = 0 [pid 7098] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7098, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 254.054819][ T7099] loop1: detected capacity change from 0 to 1024 [pid 7101] <... close resumed>) = 0 [pid 7101] symlink("/dev/binderfs", "./binderfs" [pid 7100] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./333", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7101] <... symlink resumed>) = 0 [pid 7100] <... symlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./333/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7101] memfd_create("syzkaller", 0 [pid 5075] newfstatat(AT_FDCWD, "./333/binderfs", [pid 7101] <... memfd_create resumed>) = 3 [pid 7100] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] unlink("./333/binderfs" [pid 7101] <... mmap resumed>) = 0x7f943d000000 [pid 7099] <... mount resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7100] <... memfd_create resumed>) = 3 [pid 7099] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7099] <... openat resumed>) = 3 [pid 7100] <... mmap resumed>) = 0x7f943d000000 [pid 7099] chdir("./file1" [pid 5075] <... umount2 resumed>) = 0 [pid 7099] <... chdir resumed>) = 0 [pid 7100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7099] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... ioctl resumed>) = 0 [pid 7099] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7099] truncate("./file1", 0 [pid 7101] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./333/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 7099] <... truncate resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./333/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 7099] memfd_create("syzkaller", 0) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7101] munmap(0x7f943d000000, 138412032 [pid 7100] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 7099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7101] <... munmap resumed>) = 0 [pid 7099] <... mmap resumed>) = 0x7f943d000000 [pid 7100] munmap(0x7f943d000000, 138412032 [pid 7099] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(3./strace-static-x86_64: Process 7102 attached [pid 7101] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7100] <... munmap resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 7102] set_robust_list(0x555583d53660, 24 [pid 7101] <... openat resumed>) = 4 [pid 7100] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7102 [pid 7102] <... set_robust_list resumed>) = 0 [pid 7101] ioctl(4, LOOP_SET_FD, 3 [pid 7100] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7102] chdir("./336" [pid 7100] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7103 attached [pid 7102] <... chdir resumed>) = 0 [pid 7101] <... ioctl resumed>) = 0 [pid 7099] <... write resumed>) = 524288 [pid 7103] set_robust_list(0x555583d53660, 24 [pid 7102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7101] close(3 [pid 7099] munmap(0x7f943d000000, 138412032 [pid 5075] getdents64(4, [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7103 [pid 7103] <... set_robust_list resumed>) = 0 [pid 7102] <... prctl resumed>) = 0 [pid 7101] <... close resumed>) = 0 [pid 7099] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7103] chdir("./335" [pid 7102] setpgid(0, 0 [pid 7101] close(4 [pid 7100] <... ioctl resumed>) = 0 [pid 5075] close(4 [pid 7103] <... chdir resumed>) = 0 [pid 7102] <... setpgid resumed>) = 0 [pid 7101] <... close resumed>) = 0 [pid 7100] close(3 [pid 5075] <... close resumed>) = 0 [pid 7103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7101] mkdir("./file1", 0777 [pid 7099] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7100] <... close resumed>) = 0 [pid 5075] rmdir("./333/file1" [pid 7103] <... prctl resumed>) = 0 [pid 7102] <... openat resumed>) = 3 [pid 7101] <... mkdir resumed>) = 0 [pid 7100] close(4 [pid 7099] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7102] write(3, "1000", 4 [pid 5075] <... rmdir resumed>) = 0 [pid 7103] setpgid(0, 0 [pid 7102] <... write resumed>) = 4 [pid 7100] <... close resumed>) = 0 [pid 7103] <... setpgid resumed>) = 0 [pid 7102] close(3 [pid 7101] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7100] mkdir("./file1", 0777 [pid 7099] close(4 [pid 5075] getdents64(3, [pid 7103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7102] <... close resumed>) = 0 [pid 7100] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7103] <... openat resumed>) = 3 [pid 7102] symlink("/dev/binderfs", "./binderfs" [pid 7100] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] close(3 [pid 7099] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7103] write(3, "1000", 4 [pid 7102] <... symlink resumed>) = 0 [pid 7103] <... write resumed>) = 4 [pid 7102] memfd_create("syzkaller", 0 [pid 5075] rmdir("./333" [pid 7103] close(3 [pid 7102] <... memfd_create resumed>) = 3 [pid 7101] <... mount resumed>) = 0 [pid 7100] <... mount resumed>) = 0 [pid 7099] exit_group(0 [pid 5075] <... rmdir resumed>) = 0 [pid 7103] <... close resumed>) = 0 [pid 7103] symlink("/dev/binderfs", "./binderfs" [pid 7102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7101] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7100] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7103] <... symlink resumed>) = 0 [pid 7102] <... mmap resumed>) = 0x7f943d000000 [pid 7101] <... openat resumed>) = 3 [pid 5075] mkdir("./334", 0777 [pid 7099] <... exit_group resumed>) = ? [pid 7103] memfd_create("syzkaller", 0 [pid 7102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7101] chdir("./file1" [pid 7100] <... openat resumed>) = 3 [pid 7103] <... memfd_create resumed>) = 3 [ 254.212722][ T7101] loop5: detected capacity change from 0 to 1024 [ 254.220455][ T7100] loop0: detected capacity change from 0 to 1024 [pid 7103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7100] chdir("./file1" [pid 5075] <... mkdir resumed>) = 0 [pid 7100] <... chdir resumed>) = 0 [pid 7099] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7099, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7100] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7101] <... chdir resumed>) = 0 [pid 7100] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7101] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7100] truncate("./file1", 0 [pid 5075] <... openat resumed>) = 3 [pid 7101] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7101] truncate("./file1", 0 [pid 5072] umount2("./334", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7102] <... write resumed>) = 524288 [pid 7100] <... truncate resumed>) = 0 [pid 7100] memfd_create("syzkaller", 0 [pid 5072] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7100] <... memfd_create resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 7100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7100] <... mmap resumed>) = 0x7f943d000000 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./334/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./334/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./334/binderfs" [pid 7101] <... truncate resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 7101] memfd_create("syzkaller", 0 [pid 7100] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7103] <... write resumed>) = 524288 [pid 7101] <... memfd_create resumed>) = 4 [pid 7101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7102] munmap(0x7f943d000000, 138412032 [pid 7101] <... mmap resumed>) = 0x7f943d000000 [pid 7102] <... munmap resumed>) = 0 [pid 7101] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7103] munmap(0x7f943d000000, 138412032) = 0 [pid 7102] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7103] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7102] ioctl(4, LOOP_SET_FD, 3 [pid 7103] <... openat resumed>) = 4 [pid 7102] <... ioctl resumed>) = 0 [pid 7103] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... ioctl resumed>) = 0 [pid 7101] <... write resumed>) = 524288 [pid 7100] <... write resumed>) = 524288 [pid 5075] close(3) = 0 [pid 7100] munmap(0x7f943d000000, 138412032 [pid 5072] <... umount2 resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7104 attached [pid 7102] close(3 [pid 7100] <... munmap resumed>) = 0 [pid 7103] <... ioctl resumed>) = 0 [pid 7101] munmap(0x7f943d000000, 138412032 [pid 5072] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7104] set_robust_list(0x555583d53660, 24 [pid 7103] close(3 [pid 7102] <... close resumed>) = 0 [pid 7100] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7104 [pid 7101] <... munmap resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7104] <... set_robust_list resumed>) = 0 [pid 7103] <... close resumed>) = 0 [pid 7102] close(4 [pid 7101] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7100] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] newfstatat(AT_FDCWD, "./334/file1", [pid 7104] chdir("./334" [pid 7103] close(4 [pid 7102] <... close resumed>) = 0 [pid 7101] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7100] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7101] close(4 [pid 5072] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7103] <... close resumed>) = 0 [pid 7102] mkdir("./file1", 0777 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7104] <... chdir resumed>) = 0 [pid 7103] mkdir("./file1", 0777 [pid 5072] openat(AT_FDCWD, "./334/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7102] <... mkdir resumed>) = 0 [pid 7103] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7102] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] newfstatat(4, "", [pid 7104] <... prctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [ 254.324132][ T7102] loop2: detected capacity change from 0 to 1024 [ 254.332584][ T7103] loop3: detected capacity change from 0 to 1024 [pid 7104] setpgid(0, 0 [pid 7103] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7104] <... setpgid resumed>) = 0 [pid 7104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] getdents64(4, [pid 7101] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7104] <... openat resumed>) = 3 [pid 7100] <... close resumed>) = 0 [pid 5072] close(4 [pid 7101] exit_group(0 [pid 7100] exit_group(0 [pid 7104] write(3, "1000", 4 [pid 7101] <... exit_group resumed>) = ? [pid 5072] <... close resumed>) = 0 [pid 7104] <... write resumed>) = 4 [pid 7100] <... exit_group resumed>) = ? [pid 7102] <... mount resumed>) = 0 [pid 7101] +++ exited with 0 +++ [pid 5072] rmdir("./334/file1" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7101, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] umount2("./330", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 7102] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7102] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5072] getdents64(3, [pid 7102] chdir("./file1" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7102] <... chdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7102] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] close(3 [pid 7104] close(3 [pid 7102] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7100] +++ exited with 0 +++ [pid 5076] umount2("./330/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 7104] <... close resumed>) = 0 [pid 7102] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7100, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7104] symlink("/dev/binderfs", "./binderfs" [pid 5076] newfstatat(AT_FDCWD, "./330/binderfs", [pid 5072] rmdir("./334" [pid 7104] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7104] memfd_create("syzkaller", 0 [pid 7102] <... truncate resumed>) = 0 [pid 5076] unlink("./330/binderfs" [pid 5072] <... rmdir resumed>) = 0 [pid 5071] umount2("./335", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7104] <... memfd_create resumed>) = 3 [pid 7103] <... mount resumed>) = 0 [pid 7102] memfd_create("syzkaller", 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7102] <... memfd_create resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7103] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 7104] <... mmap resumed>) = 0x7f943d000000 [pid 7103] <... openat resumed>) = 3 [pid 7102] <... mmap resumed>) = 0x7f943d000000 [pid 5072] mkdir("./335", 0777 [pid 5071] newfstatat(3, "", [pid 7104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7103] chdir("./file1" [pid 7102] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7103] <... chdir resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./335/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./335/binderfs") = 0 [pid 5071] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7103] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... openat resumed>) = 3 [pid 7103] truncate("./file1", 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = 0 [pid 7103] <... truncate resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./330/file1", [pid 7103] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7103] <... memfd_create resumed>) = 4 [pid 5076] umount2("./330/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./330/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", [pid 7102] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7104] <... write resumed>) = 524288 [pid 7104] munmap(0x7f943d000000, 138412032 [pid 7103] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(4, [pid 5072] <... ioctl resumed>) = 0 [pid 7104] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5071] newfstatat(AT_FDCWD, "./335/file1", [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(4 [pid 5071] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./330/file1" [pid 5071] openat(AT_FDCWD, "./335/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5071] <... openat resumed>) = 4 [pid 7104] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(4, "", [pid 7104] <... openat resumed>) = 4 [pid 7102] munmap(0x7f943d000000, 138412032 [pid 5076] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7104] ioctl(4, LOOP_SET_FD, 3 [pid 7102] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7102] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] rmdir("./330" [pid 5071] getdents64(4, [pid 7102] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5072] close(3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7102] close(4 [pid 5076] mkdir("./331", 0777 [pid 5072] <... close resumed>) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] rmdir("./335/file1" [pid 7102] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7103] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 3 [pid 5071] getdents64(3, ./strace-static-x86_64: Process 7105 attached [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7105] set_robust_list(0x555583d53660, 24 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7105] <... set_robust_list resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7105 [pid 5071] close(3 [pid 7105] chdir("./335" [pid 5071] <... close resumed>) = 0 [pid 7105] <... chdir resumed>) = 0 [pid 7105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7105] setpgid(0, 0) = 0 [pid 7105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7102] exit_group(0 [pid 5071] rmdir("./335" [pid 7105] <... openat resumed>) = 3 [pid 7102] <... exit_group resumed>) = ? [pid 7105] write(3, "1000", 4 [pid 7102] +++ exited with 0 +++ [pid 5071] <... rmdir resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7102, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7105] <... write resumed>) = 4 [pid 7105] close(3) = 0 [pid 5071] mkdir("./336", 0777 [pid 7104] <... ioctl resumed>) = 0 [pid 5073] umount2("./336", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7105] symlink("/dev/binderfs", "./binderfs" [pid 7104] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 7105] <... symlink resumed>) = 0 [pid 7104] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7104] close(4 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7104] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 7105] memfd_create("syzkaller", 0 [pid 7104] mkdir("./file1", 0777 [pid 5073] newfstatat(3, "", [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7105] <... memfd_create resumed>) = 3 [pid 7104] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(3, [pid 7105] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7103] <... write resumed>) = 524288 [pid 5073] umount2("./336/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7104] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 254.480604][ T7104] loop4: detected capacity change from 0 to 1024 [pid 7103] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] newfstatat(AT_FDCWD, "./336/binderfs", [pid 7103] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7103] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7103] close(4) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 5073] unlink("./336/binderfs" [pid 5076] <... close resumed>) = 0 [pid 7105] <... write resumed>) = 524288 [pid 7104] <... mount resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... unlink resumed>) = 0 [pid 7105] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7103] exit_group(0) = ? [pid 7105] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7105] ioctl(4, LOOP_SET_FD, 3) = 0 ./strace-static-x86_64: Process 7106 attached [pid 7104] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7103] +++ exited with 0 +++ [pid 5071] <... ioctl resumed>) = 0 [pid 7106] set_robust_list(0x555583d53660, 24 [pid 7105] close(3 [pid 7104] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7106 [pid 5073] <... umount2 resumed>) = 0 [pid 7106] <... set_robust_list resumed>) = 0 [pid 7105] <... close resumed>) = 0 [pid 7104] chdir("./file1" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7103, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 7106] chdir("./331" [pid 7105] close(4 [pid 7104] <... chdir resumed>) = 0 [pid 5074] umount2("./335", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7106] <... chdir resumed>) = 0 [pid 7105] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7105] mkdir("./file1", 0777 [pid 5074] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7106] <... prctl resumed>) = 0 [pid 7105] <... mkdir resumed>) = 0 [pid 7104] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7106] setpgid(0, 0 [pid 7105] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7104] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./336/file1", ./strace-static-x86_64: Process 7107 attached [pid 7106] <... setpgid resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7107] set_robust_list(0x555583d53660, 24 [pid 7106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7104] truncate("./file1", 0 [pid 5074] getdents64(3, [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7107 [pid 5073] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7107] <... set_robust_list resumed>) = 0 [pid 7106] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7107] chdir("./336" [pid 7106] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] openat(AT_FDCWD, "./336/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7107] <... chdir resumed>) = 0 [pid 7106] <... write resumed>) = 4 [pid 5074] umount2("./335/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 7106] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 7106] <... close resumed>) = 0 [pid 7106] symlink("/dev/binderfs", "./binderfs" [pid 5074] newfstatat(AT_FDCWD, "./335/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7106] <... symlink resumed>) = 0 [pid 7105] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 7107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7106] memfd_create("syzkaller", 0 [pid 5074] unlink("./335/binderfs" [pid 7107] <... prctl resumed>) = 0 [pid 7106] <... memfd_create resumed>) = 3 [pid 7104] <... truncate resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7107] setpgid(0, 0 [pid 7106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7105] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7104] memfd_create("syzkaller", 0 [pid 5074] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 254.566724][ T7105] loop1: detected capacity change from 0 to 1024 [pid 5073] getdents64(4, [pid 7107] <... setpgid resumed>) = 0 [pid 7106] <... mmap resumed>) = 0x7f943d000000 [pid 7105] <... openat resumed>) = 3 [pid 7104] <... memfd_create resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7107] <... openat resumed>) = 3 [pid 5073] close(4 [pid 7107] write(3, "1000", 4 [pid 7105] chdir("./file1" [pid 7104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 7107] <... write resumed>) = 4 [pid 7104] <... mmap resumed>) = 0x7f943d000000 [pid 7105] <... chdir resumed>) = 0 [pid 5073] rmdir("./336/file1" [pid 7107] close(3 [pid 7105] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7107] <... close resumed>) = 0 [pid 7105] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... rmdir resumed>) = 0 [pid 7107] symlink("/dev/binderfs", "./binderfs" [pid 7105] truncate("./file1", 0 [pid 5073] getdents64(3, [pid 7107] <... symlink resumed>) = 0 [pid 7107] memfd_create("syzkaller", 0 [pid 7106] <... write resumed>) = 524288 [pid 7104] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 7107] <... memfd_create resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 7107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./336") = 0 [pid 5073] mkdir("./337", 0777) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7105] <... truncate resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./335/file1", [pid 7106] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7106] <... munmap resumed>) = 0 [pid 5074] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] openat(AT_FDCWD, "./335/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7105] memfd_create("syzkaller", 0 [pid 7104] <... write resumed>) = 524288 [pid 7106] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7105] <... memfd_create resumed>) = 4 [pid 7104] munmap(0x7f943d000000, 138412032 [pid 5074] <... openat resumed>) = 4 [pid 7105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7106] <... openat resumed>) = 4 [pid 7105] <... mmap resumed>) = 0x7f943d000000 [pid 7104] <... munmap resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 7106] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7105] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7104] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] getdents64(4, [pid 7104] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7104] close(4 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./335/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7107] <... write resumed>) = 524288 [pid 5074] close(3 [pid 7104] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./335" [pid 7107] munmap(0x7f943d000000, 138412032 [pid 7105] <... write resumed>) = 524288 [pid 7104] exit_group(0 [pid 7106] <... ioctl resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7107] <... munmap resumed>) = 0 [pid 7106] close(3 [pid 7107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7106] <... close resumed>) = 0 [pid 5074] mkdir("./336", 0777 [pid 7107] ioctl(4, LOOP_SET_FD, 3 [pid 7106] close(4 [pid 7104] <... exit_group resumed>) = ? [pid 5074] <... mkdir resumed>) = 0 [pid 7104] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7104, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7106] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... ioctl resumed>) = 0 [pid 7106] mkdir("./file1", 0777 [pid 7105] munmap(0x7f943d000000, 138412032 [pid 5074] <... openat resumed>) = 3 [pid 5073] close(3 [pid 5075] umount2("./334", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7106] <... mkdir resumed>) = 0 [pid 7105] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 7106] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7105] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7108 attached [pid 7105] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(3, "", [pid 7108] set_robust_list(0x555583d53660, 24 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7108] <... set_robust_list resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7108 [pid 5075] getdents64(3, [pid 7105] close(4 [pid 7108] chdir("./337" [pid 7107] <... ioctl resumed>) = 0 [pid 7107] close(3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7107] <... close resumed>) = 0 [pid 7107] close(4) = 0 [pid 7107] mkdir("./file1", 0777) = 0 [pid 7107] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... ioctl resumed>) = 0 [pid 7107] <... mount resumed>) = 0 [pid 7107] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7108] <... chdir resumed>) = 0 [pid 7107] <... openat resumed>) = 3 [pid 5075] umount2("./334/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7107] chdir("./file1" [pid 7105] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./334/binderfs", [pid 5074] close(3 [ 254.692962][ T7106] loop5: detected capacity change from 0 to 1024 [ 254.718328][ T7107] loop0: detected capacity change from 0 to 1024 [pid 7108] <... prctl resumed>) = 0 [pid 7107] <... chdir resumed>) = 0 [pid 7106] <... mount resumed>) = 0 [pid 7105] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 7107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7107] truncate("./file1", 0 [pid 7108] setpgid(0, 0) = 0 [pid 7108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7106] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7106] chdir("./file1" [pid 7105] <... exit_group resumed>) = ? [pid 5075] unlink("./334/binderfs" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7108] <... openat resumed>) = 3 [pid 7107] <... truncate resumed>) = 0 [pid 7106] <... chdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7109 attached [pid 7108] write(3, "1000", 4 [pid 7107] memfd_create("syzkaller", 0 [pid 7106] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7105] +++ exited with 0 +++ [pid 5075] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7109] set_robust_list(0x555583d53660, 24 [pid 7108] <... write resumed>) = 4 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7109 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7105, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7109] <... set_robust_list resumed>) = 0 [pid 7108] close(3 [pid 7107] <... memfd_create resumed>) = 4 [pid 7106] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7109] chdir("./336" [pid 7108] <... close resumed>) = 0 [pid 7107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7106] truncate("./file1", 0 [pid 7109] <... chdir resumed>) = 0 [pid 7108] symlink("/dev/binderfs", "./binderfs" [pid 7107] <... mmap resumed>) = 0x7f943d000000 [pid 7109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7108] <... symlink resumed>) = 0 [pid 7107] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 7109] <... prctl resumed>) = 0 [pid 7108] memfd_create("syzkaller", 0 [pid 7106] <... truncate resumed>) = 0 [pid 7109] setpgid(0, 0 [pid 7108] <... memfd_create resumed>) = 3 [pid 7106] memfd_create("syzkaller", 0 [pid 5072] umount2("./335", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7109] <... setpgid resumed>) = 0 [pid 7108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7106] <... memfd_create resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7108] <... mmap resumed>) = 0x7f943d000000 [pid 7106] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 3 [pid 7109] <... openat resumed>) = 3 [pid 7106] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7107] <... write resumed>) = 524288 [pid 7109] write(3, "1000", 4 [pid 5075] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(3, "", [pid 7108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7109] <... write resumed>) = 4 [pid 7107] munmap(0x7f943d000000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7109] close(3 [pid 5075] newfstatat(AT_FDCWD, "./334/file1", [pid 5072] getdents64(3, [pid 7109] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./335/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7109] symlink("/dev/binderfs", "./binderfs" [pid 7107] <... munmap resumed>) = 0 [pid 7106] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./334/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(AT_FDCWD, "./335/binderfs", [pid 7109] <... symlink resumed>) = 0 [pid 7107] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7107] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(4, "", [pid 5072] unlink("./335/binderfs" [pid 7109] memfd_create("syzkaller", 0 [pid 7108] <... write resumed>) = 524288 [pid 7107] close(4 [pid 7106] munmap(0x7f943d000000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 7109] <... memfd_create resumed>) = 3 [pid 7108] munmap(0x7f943d000000, 138412032 [pid 7107] <... close resumed>) = 0 [pid 7106] <... munmap resumed>) = 0 [pid 5075] getdents64(4, [pid 5072] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7108] <... munmap resumed>) = 0 [pid 7109] <... mmap resumed>) = 0x7f943d000000 [pid 7109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7108] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7108] ioctl(4, LOOP_SET_FD, 3 [pid 7107] exit_group(0 [pid 7106] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... umount2 resumed>) = 0 [pid 7108] <... ioctl resumed>) = 0 [pid 7109] <... write resumed>) = 524288 [pid 7107] <... exit_group resumed>) = ? [pid 7106] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(4, [pid 5072] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7109] munmap(0x7f943d000000, 138412032 [pid 7108] close(3 [pid 7106] close(4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7109] <... munmap resumed>) = 0 [pid 7108] <... close resumed>) = 0 [pid 5075] close(4 [pid 5072] newfstatat(AT_FDCWD, "./335/file1", [pid 7109] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7108] close(4 [pid 7107] +++ exited with 0 +++ [pid 7106] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7109] <... openat resumed>) = 4 [pid 7106] exit_group(0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7107, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7109] ioctl(4, LOOP_SET_FD, 3 [pid 7108] <... close resumed>) = 0 [pid 7106] <... exit_group resumed>) = ? [pid 5075] rmdir("./334/file1" [pid 5072] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7108] mkdir("./file1", 0777 [pid 7106] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7106, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7108] <... mkdir resumed>) = 0 [pid 5071] umount2("./336", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./331", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./335/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7108] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5072] newfstatat(4, "", [pid 5071] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, [pid 5076] newfstatat(3, "", [pid 5075] close(3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5071] newfstatat(3, "", [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5072] rmdir("./335/file1" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./334" [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] umount2("./336/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./336/binderfs", [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./331/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] unlink("./336/binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./331/binderfs", [pid 5075] mkdir("./335", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7109] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] close(3 [pid 7109] close(3 [pid 5076] unlink("./331/binderfs" [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 7109] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5072] rmdir("./335" [pid 7109] close(4 [pid 5076] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 7109] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7109] mkdir("./file1", 0777) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7108] <... mount resumed>) = 0 [pid 5072] mkdir("./336", 0777 [pid 7109] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7108] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... mkdir resumed>) = 0 [pid 5071] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7108] <... openat resumed>) = 3 [ 254.861757][ T7108] loop2: detected capacity change from 0 to 1024 [ 254.900252][ T7109] loop3: detected capacity change from 0 to 1024 [pid 7108] chdir("./file1" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7108] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7108] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./336/file1", [pid 7108] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7108] truncate("./file1", 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7108] <... truncate resumed>) = 0 [pid 7108] memfd_create("syzkaller", 0) = 4 [pid 7108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7108] <... mmap resumed>) = 0x7f943d000000 [pid 5071] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7108] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./336/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7109] <... mount resumed>) = 0 [pid 7109] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7108] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 4 [pid 7109] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./331/file1", [pid 5071] newfstatat(4, "", [pid 7109] chdir("./file1" [pid 7108] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7109] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7109] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] umount2("./331/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 7109] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] openat(AT_FDCWD, "./331/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 7109] truncate("./file1", 0 [pid 7108] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7108] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] close(4 [pid 7108] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 7108] close(4 [pid 5071] rmdir("./336/file1" [pid 7108] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5071] <... rmdir resumed>) = 0 [pid 7109] <... truncate resumed>) = 0 [pid 5071] getdents64(3, [pid 7109] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5071] close(3 [pid 7109] <... memfd_create resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... close resumed>) = 0 [pid 7109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(4, [pid 5071] rmdir("./336" [pid 7109] <... mmap resumed>) = 0x7f943d000000 [pid 5075] close(3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(4 [pid 5071] mkdir("./337", 0777 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./331/file1" [pid 5071] <... mkdir resumed>) = 0 [pid 7108] exit_group(0./strace-static-x86_64: Process 7110 attached ) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7110 [pid 5076] getdents64(3, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7110] set_robust_list(0x555583d53660, 24 [pid 7108] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7110] <... set_robust_list resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7110] chdir("./335" [pid 7109] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7108, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7110] <... chdir resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... ioctl resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./337", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 5076] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7110] <... prctl resumed>) = 0 [pid 5073] getdents64(3, [pid 7110] setpgid(0, 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7110] <... setpgid resumed>) = 0 [pid 5073] umount2("./337/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] rmdir("./331" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7110] <... openat resumed>) = 3 [pid 5073] unlink("./337/binderfs") = 0 [pid 7110] write(3, "1000", 4 [pid 5073] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7110] <... write resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 7110] close(3 [pid 5072] close(3 [pid 7110] <... close resumed>) = 0 [pid 7110] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] mkdir("./332", 0777 [pid 5072] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7110] memfd_create("syzkaller", 0) = 3 [pid 7110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7111 [pid 7109] <... write resumed>) = 524288 [pid 5076] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7111 attached [pid 7110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7111] set_robust_list(0x555583d53660, 24 [pid 7109] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = 0 [pid 7111] <... set_robust_list resumed>) = 0 [pid 7111] chdir("./336" [pid 7109] <... munmap resumed>) = 0 [pid 7111] <... chdir resumed>) = 0 [pid 7111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7109] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7111] <... prctl resumed>) = 0 [pid 7111] setpgid(0, 0) = 0 [pid 7111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7111] write(3, "1000", 4) = 4 [pid 7111] close(3) = 0 [pid 7111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7111] memfd_create("syzkaller", 0 [pid 7110] <... write resumed>) = 524288 [pid 7111] <... memfd_create resumed>) = 3 [pid 7111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7110] munmap(0x7f943d000000, 138412032 [pid 7111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7110] <... munmap resumed>) = 0 [pid 7109] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7110] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7110] ioctl(4, LOOP_SET_FD, 3 [pid 5073] newfstatat(AT_FDCWD, "./337/file1", [pid 5071] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./337/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 5071] close(3 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(3 [pid 5071] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7109] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, ./strace-static-x86_64: Process 7113 attached ./strace-static-x86_64: Process 7112 attached [pid 7111] <... write resumed>) = 524288 [pid 7109] exit_group(0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7112 [pid 7110] <... ioctl resumed>) = 0 [pid 7111] munmap(0x7f943d000000, 138412032) = 0 [pid 7110] close(3 [pid 7112] set_robust_list(0x555583d53660, 24 [pid 7110] <... close resumed>) = 0 [pid 7112] <... set_robust_list resumed>) = 0 [pid 7110] close(4 [pid 7112] chdir("./337" [pid 7110] <... close resumed>) = 0 [pid 7110] mkdir("./file1", 0777 [pid 7112] <... chdir resumed>) = 0 [pid 7111] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7110] <... mkdir resumed>) = 0 [pid 7111] <... openat resumed>) = 4 [pid 7111] ioctl(4, LOOP_SET_FD, 3 [pid 5073] close(4 [pid 7109] <... exit_group resumed>) = ? [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7113 [pid 7113] set_robust_list(0x555583d53660, 24 [pid 5073] <... close resumed>) = 0 [ 255.081475][ T7110] loop4: detected capacity change from 0 to 1024 [pid 7112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7110] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7113] <... set_robust_list resumed>) = 0 [pid 7112] <... prctl resumed>) = 0 [pid 5073] rmdir("./337/file1" [pid 7113] chdir("./332" [pid 7112] setpgid(0, 0) = 0 [pid 7113] <... chdir resumed>) = 0 [pid 7112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7109] +++ exited with 0 +++ [pid 5073] <... rmdir resumed>) = 0 [pid 7113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7112] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7109, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7112] write(3, "1000", 4 [pid 7113] setpgid(0, 0 [pid 5073] getdents64(3, [pid 7113] <... setpgid resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7112] <... write resumed>) = 4 [pid 5073] close(3 [pid 7112] close(3) = 0 [pid 7110] <... mount resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7112] symlink("/dev/binderfs", "./binderfs" [pid 5074] umount2("./336", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./337" [pid 7113] <... openat resumed>) = 3 [pid 7113] write(3, "1000", 4 [pid 7112] <... symlink resumed>) = 0 [pid 7110] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 7113] <... write resumed>) = 4 [pid 7112] memfd_create("syzkaller", 0 [pid 7110] <... openat resumed>) = 3 [pid 7113] close(3 [pid 7112] <... memfd_create resumed>) = 3 [pid 7110] chdir("./file1" [pid 5074] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] mkdir("./338", 0777 [pid 7113] <... close resumed>) = 0 [pid 7112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7110] <... chdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7113] symlink("/dev/binderfs", "./binderfs" [pid 7112] <... mmap resumed>) = 0x7f943d000000 [pid 7110] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] newfstatat(3, "", [pid 5073] <... mkdir resumed>) = 0 [pid 7113] <... symlink resumed>) = 0 [pid 7112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7111] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 7110] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7110] truncate("./file1", 0 [pid 5074] umount2("./336/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7113] memfd_create("syzkaller", 0 [pid 7111] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7111] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./336/binderfs", [pid 7111] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7111] <... close resumed>) = 0 [pid 7111] mkdir("./file1", 0777 [pid 5074] unlink("./336/binderfs" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7111] <... mkdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 7113] <... memfd_create resumed>) = 3 [pid 7111] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7110] <... truncate resumed>) = 0 [pid 7110] memfd_create("syzkaller", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7112] <... write resumed>) = 524288 [pid 7110] <... memfd_create resumed>) = 4 [ 255.126565][ T7111] loop1: detected capacity change from 0 to 1024 [pid 7110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7113] <... mmap resumed>) = 0x7f943d000000 [pid 7110] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7111] <... mount resumed>) = 0 [pid 7111] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7112] munmap(0x7f943d000000, 138412032 [pid 7111] <... openat resumed>) = 3 [pid 7110] <... write resumed>) = 524288 [pid 7113] <... write resumed>) = 524288 [pid 7112] <... munmap resumed>) = 0 [pid 7111] chdir("./file1" [pid 5074] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./336/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7111] <... chdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7111] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] openat(AT_FDCWD, "./336/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7112] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7111] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 4 [pid 7112] <... openat resumed>) = 4 [pid 7111] truncate("./file1", 0 [pid 5074] newfstatat(4, "", [pid 7113] munmap(0x7f943d000000, 138412032 [pid 7112] ioctl(4, LOOP_SET_FD, 3 [pid 7110] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7113] <... munmap resumed>) = 0 [pid 7111] <... truncate resumed>) = 0 [pid 5074] getdents64(4, [pid 7111] memfd_create("syzkaller", 0 [pid 7110] <... munmap resumed>) = 0 [pid 7110] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7111] <... memfd_create resumed>) = 4 [pid 7110] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7112] <... ioctl resumed>) = 0 [pid 7113] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(4, [pid 7113] <... openat resumed>) = 4 [pid 7112] close(3 [pid 7111] <... mmap resumed>) = 0x7f943d000000 [pid 7110] close(4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7112] <... close resumed>) = 0 [pid 7113] ioctl(4, LOOP_SET_FD, 3 [pid 7111] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7110] <... close resumed>) = 0 [pid 5074] close(4 [pid 7112] close(4 [pid 5073] <... ioctl resumed>) = 0 [pid 7110] exit_group(0) = ? [pid 7112] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7110] +++ exited with 0 +++ [pid 7111] <... write resumed>) = 524288 [pid 7112] mkdir("./file1", 0777 [pid 5074] rmdir("./336/file1" [pid 5073] close(3 [pid 7113] <... ioctl resumed>) = 0 [pid 7112] <... mkdir resumed>) = 0 [pid 7111] munmap(0x7f943d000000, 138412032 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7110, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7113] close(3 [pid 7112] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7111] <... munmap resumed>) = 0 [pid 5075] umount2("./335", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7113] <... close resumed>) = 0 [pid 7112] <... mount resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7113] close(4 [pid 7112] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(3 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7114 ./strace-static-x86_64: Process 7114 attached [pid 7113] <... close resumed>) = 0 [pid 7112] <... openat resumed>) = 3 [pid 7111] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 7114] set_robust_list(0x555583d53660, 24 [pid 7113] mkdir("./file1", 0777 [pid 7112] chdir("./file1" [pid 7111] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(3, "", [ 255.237508][ T7112] loop0: detected capacity change from 0 to 1024 [ 255.272086][ T7113] loop5: detected capacity change from 0 to 1024 [pid 5074] rmdir("./336" [pid 7114] <... set_robust_list resumed>) = 0 [pid 7113] <... mkdir resumed>) = 0 [pid 7112] <... chdir resumed>) = 0 [pid 7111] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7113] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7112] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] getdents64(3, [pid 5074] mkdir("./337", 0777 [pid 7114] chdir("./338" [pid 7112] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7111] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... mkdir resumed>) = 0 [pid 7112] truncate("./file1", 0 [pid 5075] umount2("./335/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./335/binderfs" [pid 7114] <... chdir resumed>) = 0 [pid 7112] <... truncate resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 7114] <... prctl resumed>) = 0 [pid 7113] <... mount resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7114] setpgid(0, 0 [pid 7112] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7114] <... setpgid resumed>) = 0 [pid 7113] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7112] <... memfd_create resumed>) = 4 [pid 7113] <... openat resumed>) = 3 [pid 7113] chdir("./file1" [pid 7112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7113] <... chdir resumed>) = 0 [pid 7112] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7114] <... openat resumed>) = 3 [pid 7113] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7114] write(3, "1000", 4) = 4 [pid 7113] truncate("./file1", 0 [pid 7111] exit_group(0 [pid 5075] newfstatat(AT_FDCWD, "./335/file1", [pid 7114] close(3 [pid 7111] <... exit_group resumed>) = ? [pid 7114] <... close resumed>) = 0 [pid 7111] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7114] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7114] <... symlink resumed>) = 0 [pid 7112] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7111, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7114] memfd_create("syzkaller", 0) = 3 [pid 7112] <... write resumed>) = 524288 [pid 5072] umount2("./336", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7114] <... mmap resumed>) = 0x7f943d000000 [pid 5072] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./335/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 7113] <... truncate resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7113] memfd_create("syzkaller", 0 [pid 5075] newfstatat(4, "", [pid 5072] umount2("./336/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7113] <... memfd_create resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./336/binderfs", [pid 7113] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7113] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5072] unlink("./336/binderfs" [pid 5075] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5075] rmdir("./335/file1") = 0 [pid 5072] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./335" [pid 5072] <... umount2 resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./336", 0777 [pid 5074] <... ioctl resumed>) = 0 [pid 7113] <... write resumed>) = 524288 [pid 7112] munmap(0x7f943d000000, 138412032 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7112] <... munmap resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./336/file1", [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7114] <... write resumed>) = 524288 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5072] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7112] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] openat(AT_FDCWD, "./336/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7112] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7115 attached [pid 7112] close(4 [pid 5072] newfstatat(4, "", [pid 7114] munmap(0x7f943d000000, 138412032 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7115] set_robust_list(0x555583d53660, 24 [pid 5072] getdents64(4, [pid 7115] <... set_robust_list resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7115 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 7115] chdir("./337" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7115] <... chdir resumed>) = 0 [pid 7114] <... munmap resumed>) = 0 [pid 7113] munmap(0x7f943d000000, 138412032 [pid 5072] close(4 [pid 7115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7114] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7113] <... munmap resumed>) = 0 [pid 7112] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7115] <... prctl resumed>) = 0 [pid 7114] <... openat resumed>) = 4 [pid 7115] setpgid(0, 0 [pid 7114] ioctl(4, LOOP_SET_FD, 3 [pid 5072] rmdir("./336/file1" [pid 7115] <... setpgid resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] getdents64(3, [pid 7113] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7113] close(4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7115] <... openat resumed>) = 3 [pid 7113] <... close resumed>) = 0 [pid 5072] close(3 [pid 7115] write(3, "1000", 4 [pid 7112] exit_group(0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./336") = 0 [pid 7115] <... write resumed>) = 4 [pid 7112] <... exit_group resumed>) = ? [pid 5072] mkdir("./337", 0777 [pid 7115] close(3 [pid 7112] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 7115] <... close resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7112, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7115] memfd_create("syzkaller", 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7114] <... ioctl resumed>) = 0 [pid 7113] exit_group(0 [pid 5075] close(3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... restart_syscall resumed>) = 0 [pid 7115] <... memfd_create resumed>) = 3 [pid 7115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7114] close(3 [pid 7113] <... exit_group resumed>) = ? [pid 7114] <... close resumed>) = 0 [pid 7113] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 7115] <... mmap resumed>) = 0x7f943d000000 [pid 7114] close(4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7113, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7114] <... close resumed>) = 0 [pid 5071] umount2("./337", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7114] mkdir("./file1", 0777) = 0 [pid 5076] umount2("./332", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 7114] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] newfstatat(3, "", [pid 5071] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7116 attached [pid 7115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(3, "", [pid 7116] set_robust_list(0x555583d53660, 24 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7116 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./332/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7116] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5076] newfstatat(AT_FDCWD, "./332/binderfs", [pid 7116] chdir("./336" [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7115] <... write resumed>) = 524288 [ 255.432334][ T7114] loop2: detected capacity change from 0 to 1024 [pid 5076] unlink("./332/binderfs" [pid 7115] munmap(0x7f943d000000, 138412032 [pid 5076] <... unlink resumed>) = 0 [pid 7116] <... chdir resumed>) = 0 [pid 7114] <... mount resumed>) = 0 [pid 5076] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./337/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./337/binderfs", [pid 7116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7114] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7116] <... prctl resumed>) = 0 [pid 7114] <... openat resumed>) = 3 [pid 5071] unlink("./337/binderfs" [pid 7116] setpgid(0, 0 [pid 7115] <... munmap resumed>) = 0 [pid 7116] <... setpgid resumed>) = 0 [pid 7116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7114] chdir("./file1" [pid 5071] <... unlink resumed>) = 0 [pid 7114] <... chdir resumed>) = 0 [pid 5071] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7114] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7116] <... openat resumed>) = 3 [pid 7115] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7114] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7115] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7115] ioctl(4, LOOP_SET_FD, 3 [pid 7114] truncate("./file1", 0 [pid 5076] newfstatat(AT_FDCWD, "./332/file1", [pid 7116] write(3, "1000", 4 [pid 7115] <... ioctl resumed>) = 0 [pid 7116] <... write resumed>) = 4 [pid 7116] close(3) = 0 [pid 7116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7116] memfd_create("syzkaller", 0 [pid 5072] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7116] <... memfd_create resumed>) = 3 [pid 5076] umount2("./332/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 7116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7114] <... truncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = 0 [pid 7114] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./332/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7115] close(3) = 0 [pid 7115] close(4./strace-static-x86_64: Process 7117 attached ) = 0 [pid 7114] <... memfd_create resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 7117] set_robust_list(0x555583d53660, 24 [pid 7116] <... write resumed>) = 524288 [pid 7115] mkdir("./file1", 0777 [pid 7114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(4, "", [pid 7117] <... set_robust_list resumed>) = 0 [pid 7117] chdir("./337" [pid 7114] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7117] <... chdir resumed>) = 0 [pid 7117] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7115] <... mkdir resumed>) = 0 [pid 7117] <... prctl resumed>) = 0 [pid 7117] setpgid(0, 0) = 0 [pid 7117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7117] write(3, "1000", 4 [pid 7115] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] getdents64(4, [pid 5071] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5071] newfstatat(AT_FDCWD, "./337/file1", [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7117 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7117] <... write resumed>) = 4 [pid 7117] close(3) = 0 [pid 7117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7114] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 5071] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7117] memfd_create("syzkaller", 0 [pid 5076] rmdir("./332/file1" [pid 7117] <... memfd_create resumed>) = 3 [pid 7117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7117] <... mmap resumed>) = 0x7f943d000000 [pid 7116] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5071] openat(AT_FDCWD, "./337/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [ 255.515117][ T7115] loop3: detected capacity change from 0 to 1024 [pid 5071] <... openat resumed>) = 4 [pid 5076] close(3 [pid 5071] newfstatat(4, "", [pid 7116] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7116] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7115] <... mount resumed>) = 0 [pid 7114] <... write resumed>) = 524288 [pid 5076] rmdir("./332" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7117] <... write resumed>) = 524288 [pid 7116] <... openat resumed>) = 4 [pid 7115] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7114] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5071] getdents64(4, [pid 5076] mkdir("./333", 0777 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7115] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5071] getdents64(4, [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./337/file1" [pid 7115] chdir("./file1" [pid 5076] <... openat resumed>) = 3 [pid 7115] <... chdir resumed>) = 0 [pid 7114] <... munmap resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7116] ioctl(4, LOOP_SET_FD, 3 [pid 7115] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7117] munmap(0x7f943d000000, 138412032 [pid 7115] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] getdents64(3, [pid 7115] truncate("./file1", 0 [pid 7114] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7117] <... munmap resumed>) = 0 [pid 7114] close(4 [pid 5071] close(3 [pid 7117] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7116] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7117] <... openat resumed>) = 4 [pid 7116] close(3 [pid 5071] rmdir("./337" [pid 7117] ioctl(4, LOOP_SET_FD, 3 [pid 7116] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7114] <... close resumed>) = 0 [pid 7114] exit_group(0) = ? [pid 7116] close(4 [pid 5071] mkdir("./338", 0777 [pid 7117] <... ioctl resumed>) = 0 [pid 7116] <... close resumed>) = 0 [pid 7115] <... truncate resumed>) = 0 [pid 7115] memfd_create("syzkaller", 0 [pid 7116] mkdir("./file1", 0777 [pid 5071] <... mkdir resumed>) = 0 [pid 7115] <... memfd_create resumed>) = 4 [pid 7117] close(3 [pid 7116] <... mkdir resumed>) = 0 [pid 7115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7117] <... close resumed>) = 0 [pid 7116] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7115] <... mmap resumed>) = 0x7f943d000000 [pid 7117] close(4 [pid 5071] <... openat resumed>) = 3 [pid 7117] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7117] mkdir("./file1", 0777) = 0 [pid 7116] <... mount resumed>) = 0 [pid 7117] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7116] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7116] chdir("./file1" [pid 7114] +++ exited with 0 +++ [pid 7116] <... chdir resumed>) = 0 [pid 7116] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7114, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7116] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./338", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7116] truncate("./file1", 0 [pid 7115] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7115] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./338/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./338/binderfs") = 0 [pid 7116] <... truncate resumed>) = 0 [pid 5073] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7117] <... mount resumed>) = 0 [pid 7116] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 7117] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7116] <... memfd_create resumed>) = 4 [pid 7116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 7117] <... openat resumed>) = 3 [pid 7116] <... mmap resumed>) = 0x7f943d000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 255.609233][ T7116] loop4: detected capacity change from 0 to 1024 [ 255.625557][ T7117] loop1: detected capacity change from 0 to 1024 [pid 7117] chdir("./file1" [pid 7115] munmap(0x7f943d000000, 138412032./strace-static-x86_64: Process 7118 attached [pid 7117] <... chdir resumed>) = 0 [pid 7116] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7118] set_robust_list(0x555583d53660, 24 [pid 7117] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7115] <... munmap resumed>) = 0 [pid 7118] <... set_robust_list resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7118 [pid 5073] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./338/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./338/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] close(3 [pid 7118] chdir("./333" [pid 7117] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... openat resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 7118] <... chdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7118] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7117] truncate("./file1", 0 [pid 7116] <... write resumed>) = 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7118] <... prctl resumed>) = 0 [pid 5073] getdents64(4, [pid 7118] setpgid(0, 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7118] <... setpgid resumed>) = 0 [pid 5073] getdents64(4, [pid 7118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7118] <... openat resumed>) = 3 [pid 5073] close(4./strace-static-x86_64: Process 7119 attached [pid 7118] write(3, "1000", 4 [pid 7117] <... truncate resumed>) = 0 [pid 7116] munmap(0x7f943d000000, 138412032 [pid 7115] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7119 [pid 7119] set_robust_list(0x555583d53660, 24 [pid 7118] <... write resumed>) = 4 [pid 7117] memfd_create("syzkaller", 0 [pid 7116] <... munmap resumed>) = 0 [pid 7115] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] rmdir("./338/file1" [pid 7119] <... set_robust_list resumed>) = 0 [pid 7118] close(3 [pid 7117] <... memfd_create resumed>) = 4 [pid 7116] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7115] close(4 [pid 5073] <... rmdir resumed>) = 0 [pid 7119] chdir("./338" [pid 7118] <... close resumed>) = 0 [pid 7118] symlink("/dev/binderfs", "./binderfs" [pid 7116] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7119] <... chdir resumed>) = 0 [pid 7118] <... symlink resumed>) = 0 [pid 7117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7116] close(4 [pid 7118] memfd_create("syzkaller", 0 [pid 5073] getdents64(3, [pid 7118] <... memfd_create resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7117] <... mmap resumed>) = 0x7f943d000000 [pid 5073] close(3 [pid 7118] <... mmap resumed>) = 0x7f943d000000 [pid 7115] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7116] <... close resumed>) = 0 [pid 5073] rmdir("./338") = 0 [pid 7119] <... prctl resumed>) = 0 [pid 5073] mkdir("./339", 0777 [pid 7119] setpgid(0, 0) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 7119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7116] exit_group(0 [pid 7115] exit_group(0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7117] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7116] <... exit_group resumed>) = ? [pid 7115] <... exit_group resumed>) = ? [pid 7119] <... openat resumed>) = 3 [pid 7115] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7115, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7119] write(3, "1000", 4 [pid 7117] <... write resumed>) = 524288 [pid 7119] <... write resumed>) = 4 [pid 7119] close(3 [pid 7116] +++ exited with 0 +++ [pid 7119] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7116, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7119] symlink("/dev/binderfs", "./binderfs" [pid 5075] umount2("./336", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./337", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7119] <... symlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7119] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 7119] <... memfd_create resumed>) = 3 [pid 7119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(3, "", [pid 5074] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7119] <... mmap resumed>) = 0x7f943d000000 [pid 7117] munmap(0x7f943d000000, 138412032 [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 7118] <... write resumed>) = 524288 [pid 7117] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7117] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./336/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7117] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./337/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7117] close(4 [pid 5075] newfstatat(AT_FDCWD, "./336/binderfs", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./337/binderfs", [pid 5075] unlink("./336/binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7118] munmap(0x7f943d000000, 138412032 [pid 5075] <... unlink resumed>) = 0 [pid 5074] unlink("./337/binderfs" [pid 7118] <... munmap resumed>) = 0 [pid 5075] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 7118] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7119] <... write resumed>) = 524288 [pid 7118] <... openat resumed>) = 4 [pid 7117] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7118] ioctl(4, LOOP_SET_FD, 3 [pid 7119] munmap(0x7f943d000000, 138412032 [pid 7117] exit_group(0 [pid 7119] <... munmap resumed>) = 0 [pid 7119] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7117] <... exit_group resumed>) = ? [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7119] <... openat resumed>) = 4 [pid 7117] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 7119] ioctl(4, LOOP_SET_FD, 3 [pid 5075] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7117, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5072] umount2("./337", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./337/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7120 [pid 5072] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./337/binderfs") = 0 [pid 5072] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7118] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7120 attached [pid 7119] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7120] set_robust_list(0x555583d53660, 24 [pid 7119] close(3 [pid 7118] close(3 [pid 5075] newfstatat(AT_FDCWD, "./336/file1", [pid 5074] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] <... set_robust_list resumed>) = 0 [pid 7119] <... close resumed>) = 0 [pid 7118] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] chdir("./339" [pid 7119] close(4 [pid 7118] close(4 [pid 5075] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] <... chdir resumed>) = 0 [pid 7119] <... close resumed>) = 0 [pid 7118] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./337/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7119] mkdir("./file1", 0777 [pid 7118] mkdir("./file1", 0777 [pid 5075] openat(AT_FDCWD, "./336/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(AT_FDCWD, "./337/file1", [pid 7120] <... prctl resumed>) = 0 [pid 7119] <... mkdir resumed>) = 0 [pid 7118] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7119] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] newfstatat(4, "", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7120] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7118] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "./337/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7120] <... setpgid resumed>) = 0 [pid 5072] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5072] openat(AT_FDCWD, "./337/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7120] <... openat resumed>) = 3 [pid 7118] <... mount resumed>) = 0 [pid 5075] close(4 [pid 5074] newfstatat(4, "", [pid 5072] <... openat resumed>) = 4 [pid 7118] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 255.802889][ T7118] loop5: detected capacity change from 0 to 1024 [ 255.821663][ T7119] loop0: detected capacity change from 0 to 1024 [pid 7118] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 7118] chdir("./file1" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7120] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 7120] <... write resumed>) = 4 [pid 5075] rmdir("./336/file1" [pid 7120] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7118] <... chdir resumed>) = 0 [pid 7118] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] getdents64(4, [pid 7120] <... close resumed>) = 0 [pid 7119] <... mount resumed>) = 0 [pid 7118] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, [pid 7118] truncate("./file1", 0 [pid 5074] close(4 [pid 7120] symlink("/dev/binderfs", "./binderfs" [pid 7119] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] rmdir("./337/file1" [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, [pid 7120] <... symlink resumed>) = 0 [pid 7119] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./336" [pid 5072] close(4 [pid 5074] getdents64(3, [pid 5072] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 5072] rmdir("./337/file1" [pid 7120] memfd_create("syzkaller", 0 [pid 5075] mkdir("./337", 0777 [pid 5074] <... close resumed>) = 0 [pid 7120] <... memfd_create resumed>) = 3 [pid 5074] rmdir("./337" [pid 5072] <... rmdir resumed>) = 0 [pid 7120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 7119] chdir("./file1" [pid 7120] <... mmap resumed>) = 0x7f943d000000 [pid 5074] mkdir("./338", 0777 [pid 7119] <... chdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7118] <... truncate resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7118] memfd_create("syzkaller", 0 [pid 5072] close(3 [pid 7118] <... memfd_create resumed>) = 4 [pid 7119] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 7119] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7118] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... openat resumed>) = 3 [pid 5072] rmdir("./337" [pid 7119] truncate("./file1", 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... rmdir resumed>) = 0 [pid 7118] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7118] <... write resumed>) = 524288 [pid 7120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7119] <... truncate resumed>) = 0 [pid 5072] mkdir("./338", 0777 [pid 7119] memfd_create("syzkaller", 0 [pid 7118] munmap(0x7f943d000000, 138412032 [pid 5072] <... mkdir resumed>) = 0 [pid 7119] <... memfd_create resumed>) = 4 [pid 7118] <... munmap resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7118] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7118] close(4 [pid 7120] <... write resumed>) = 524288 [pid 7119] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7118] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7118] exit_group(0) = ? [pid 7118] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7118, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] umount2("./333", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] close(3) = 0 [pid 7120] <... munmap resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... ioctl resumed>) = 0 [pid 7119] <... write resumed>) = 524288 [pid 7120] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7119] munmap(0x7f943d000000, 138412032 [pid 5076] newfstatat(3, "", [pid 5075] <... ioctl resumed>) = 0 [pid 7120] <... openat resumed>) = 4 [pid 7120] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7119] <... munmap resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7121 ./strace-static-x86_64: Process 7121 attached [pid 7120] <... ioctl resumed>) = 0 [pid 7119] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(3, [pid 5075] close(3 [pid 7121] set_robust_list(0x555583d53660, 24 [pid 5072] close(3 [pid 5075] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 7119] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7121] <... set_robust_list resumed>) = 0 [pid 7121] chdir("./338") = 0 [pid 7119] close(4 [pid 5076] umount2("./333/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7121] setpgid(0, 0./strace-static-x86_64: Process 7122 attached ) = 0 [pid 7122] set_robust_list(0x555583d53660, 24 [pid 7121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7122 ./strace-static-x86_64: Process 7123 attached [pid 7122] <... set_robust_list resumed>) = 0 [pid 7121] <... openat resumed>) = 3 [pid 7120] close(3 [pid 7119] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./333/binderfs", [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7123 [pid 7123] set_robust_list(0x555583d53660, 24 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7123] <... set_robust_list resumed>) = 0 [pid 5076] unlink("./333/binderfs" [pid 7123] chdir("./338" [pid 7122] chdir("./337" [pid 7121] write(3, "1000", 4 [pid 7120] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7123] <... chdir resumed>) = 0 [pid 7122] <... chdir resumed>) = 0 [pid 7121] <... write resumed>) = 4 [pid 7120] close(4 [pid 7122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7121] close(3 [pid 7119] exit_group(0 [pid 5076] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7122] <... prctl resumed>) = 0 [pid 7121] <... close resumed>) = 0 [pid 7123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7121] symlink("/dev/binderfs", "./binderfs" [pid 7120] <... close resumed>) = 0 [pid 7119] <... exit_group resumed>) = ? [pid 7122] setpgid(0, 0 [pid 7120] mkdir("./file1", 0777 [pid 7119] +++ exited with 0 +++ [pid 7122] <... setpgid resumed>) = 0 [pid 7121] <... symlink resumed>) = 0 [pid 7120] <... mkdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7119, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] umount2("./338", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7123] <... prctl resumed>) = 0 [pid 7120] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 255.976037][ T7120] loop2: detected capacity change from 0 to 1024 [pid 7123] setpgid(0, 0 [pid 7122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7121] memfd_create("syzkaller", 0 [pid 7120] <... mount resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7123] <... setpgid resumed>) = 0 [pid 7121] <... memfd_create resumed>) = 3 [pid 7120] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 7123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7122] <... openat resumed>) = 3 [pid 7121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7120] <... openat resumed>) = 3 [pid 7122] write(3, "1000", 4 [pid 7120] chdir("./file1" [pid 5071] newfstatat(3, "", [pid 7122] <... write resumed>) = 4 [pid 7121] <... mmap resumed>) = 0x7f943d000000 [pid 7120] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7123] <... openat resumed>) = 3 [pid 7122] close(3 [pid 7121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7120] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = 0 [pid 5071] getdents64(3, [pid 7123] write(3, "1000", 4 [pid 7122] <... close resumed>) = 0 [pid 7120] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7123] <... write resumed>) = 4 [pid 7122] symlink("/dev/binderfs", "./binderfs" [pid 7120] truncate("./file1", 0 [pid 5076] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./338/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7123] close(3 [pid 7122] <... symlink resumed>) = 0 [pid 7121] <... write resumed>) = 524288 [pid 7123] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7122] memfd_create("syzkaller", 0 [pid 7123] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./338/binderfs", [pid 7123] <... symlink resumed>) = 0 [pid 7122] <... memfd_create resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7123] memfd_create("syzkaller", 0 [pid 7122] <... mmap resumed>) = 0x7f943d000000 [pid 5071] unlink("./338/binderfs" [pid 7123] <... memfd_create resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] <... truncate resumed>) = 0 [pid 7120] memfd_create("syzkaller", 0) = 4 [pid 7123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7123] <... mmap resumed>) = 0x7f943d000000 [pid 7120] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(AT_FDCWD, "./333/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./333/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7121] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "./333/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7121] <... munmap resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = 0 [pid 7123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7121] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7120] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7122] <... write resumed>) = 524288 [pid 7121] <... openat resumed>) = 4 [pid 7122] munmap(0x7f943d000000, 138412032 [pid 7121] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 7123] <... write resumed>) = 524288 [pid 7122] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7122] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./338/file1", [pid 7122] <... openat resumed>) = 4 [pid 5076] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 7122] ioctl(4, LOOP_SET_FD, 3 [pid 5076] rmdir("./333/file1" [pid 5071] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7120] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./333") = 0 [pid 7120] <... munmap resumed>) = 0 [pid 5076] mkdir("./334", 0777) = 0 [pid 7120] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7120] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./338/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7120] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7120] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 7121] <... ioctl resumed>) = 0 [pid 7123] munmap(0x7f943d000000, 138412032) = 0 [pid 7121] close(3 [pid 5071] newfstatat(4, "", [pid 7122] <... ioctl resumed>) = 0 [pid 7121] <... close resumed>) = 0 [pid 7122] close(3 [pid 7121] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7122] <... close resumed>) = 0 [pid 7121] <... close resumed>) = 0 [pid 7122] close(4 [pid 7121] mkdir("./file1", 0777 [pid 5071] getdents64(4, [pid 7123] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7123] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7122] <... close resumed>) = 0 [pid 7121] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7120] exit_group(0 [pid 5071] close(4 [pid 7120] <... exit_group resumed>) = ? [pid 7122] mkdir("./file1", 0777 [pid 7121] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7120] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7120, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] rmdir("./338/file1" [pid 7123] close(3 [pid 7122] <... mkdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7123] <... close resumed>) = 0 [pid 7123] close(4) = 0 [pid 7123] mkdir("./file1", 0777) = 0 [pid 5073] umount2("./339", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 7122] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7123] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7122] <... mount resumed>) = 0 [pid 7121] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] close(3 [pid 7123] <... mount resumed>) = 0 [pid 7122] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7121] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 7123] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7122] <... openat resumed>) = 3 [pid 7121] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5073] newfstatat(3, "", [pid 5071] rmdir("./338" [pid 7123] <... openat resumed>) = 3 [pid 7122] chdir("./file1" [pid 7121] chdir("./file1" [pid 5076] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7123] chdir("./file1" [pid 7122] <... chdir resumed>) = 0 [pid 7121] <... chdir resumed>) = 0 [ 256.106882][ T7121] loop3: detected capacity change from 0 to 1024 [ 256.119309][ T7122] loop4: detected capacity change from 0 to 1024 [ 256.136228][ T7123] loop1: detected capacity change from 0 to 1024 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 7123] <... chdir resumed>) = 0 [pid 7122] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7121] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7122] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] mkdir("./339", 0777 [pid 7122] truncate("./file1", 0 [pid 5073] umount2("./339/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7121] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7121] truncate("./file1", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 7123] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] newfstatat(AT_FDCWD, "./339/binderfs", [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7122] <... truncate resumed>) = 0 [pid 7123] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7122] memfd_create("syzkaller", 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7124 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7123] truncate("./file1", 0 [pid 7122] <... memfd_create resumed>) = 4 [pid 5073] unlink("./339/binderfs" [pid 7122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7121] <... truncate resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7122] <... mmap resumed>) = 0x7f943d000000 [pid 7121] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7124 attached ) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 7124] set_robust_list(0x555583d53660, 24 [pid 7121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7124] <... set_robust_list resumed>) = 0 [pid 7124] chdir("./334" [pid 7121] <... mmap resumed>) = 0x7f943d000000 [pid 7124] <... chdir resumed>) = 0 [pid 7123] <... truncate resumed>) = 0 [pid 7124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7123] memfd_create("syzkaller", 0 [pid 7124] <... prctl resumed>) = 0 [pid 7123] <... memfd_create resumed>) = 4 [pid 7124] setpgid(0, 0 [pid 7123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7124] <... setpgid resumed>) = 0 [pid 7123] <... mmap resumed>) = 0x7f943d000000 [pid 7121] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7122] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 7124] <... openat resumed>) = 3 [pid 7124] write(3, "1000", 4) = 4 [pid 7124] close(3) = 0 [pid 7123] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7124] memfd_create("syzkaller", 0 [pid 7122] <... write resumed>) = 524288 [pid 7124] <... memfd_create resumed>) = 3 [pid 5073] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./339/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7124] <... mmap resumed>) = 0x7f943d000000 [pid 5073] openat(AT_FDCWD, "./339/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5071] <... ioctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 7124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... close resumed>) = 0 [pid 7123] <... write resumed>) = 524288 [pid 7122] munmap(0x7f943d000000, 138412032 [pid 5073] rmdir("./339/file1" [pid 7122] <... munmap resumed>) = 0 [pid 7121] <... write resumed>) = 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] close(3 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 5073] close(3 [pid 7121] munmap(0x7f943d000000, 138412032 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7122] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./339" [pid 7121] <... munmap resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7122] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7121] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 7125 attached [pid 7123] munmap(0x7f943d000000, 138412032 [pid 7122] close(4 [pid 7121] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7125 [pid 7121] close(4 [pid 5073] mkdir("./340", 0777) = 0 [pid 7125] set_robust_list(0x555583d53660, 24 [pid 7124] <... write resumed>) = 524288 [pid 7123] <... munmap resumed>) = 0 [pid 7121] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7125] <... set_robust_list resumed>) = 0 [pid 7121] exit_group(0 [pid 5073] <... openat resumed>) = 3 [pid 7121] <... exit_group resumed>) = ? [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7125] chdir("./339") = 0 [pid 7124] munmap(0x7f943d000000, 138412032 [pid 7123] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7122] <... close resumed>) = 0 [pid 7121] +++ exited with 0 +++ [pid 7125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7123] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7121, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7125] <... prctl resumed>) = 0 [pid 7124] <... munmap resumed>) = 0 [pid 7123] close(4 [pid 7122] exit_group(0 [pid 7125] setpgid(0, 0) = 0 [pid 7123] <... close resumed>) = 0 [pid 7122] <... exit_group resumed>) = ? [pid 5074] umount2("./338", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 7125] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7125] write(3, "1000", 4 [pid 7124] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7122] +++ exited with 0 +++ [pid 5074] getdents64(3, [pid 7125] <... write resumed>) = 4 [pid 7124] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7125] close(3 [pid 7124] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./338/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7125] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7125] symlink("/dev/binderfs", "./binderfs" [pid 5074] newfstatat(AT_FDCWD, "./338/binderfs", [pid 7125] <... symlink resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7122, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7124] <... ioctl resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] unlink("./338/binderfs" [pid 7125] memfd_create("syzkaller", 0 [pid 5074] <... unlink resumed>) = 0 [pid 7123] exit_group(0 [pid 5074] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7125] <... memfd_create resumed>) = 3 [pid 7123] <... exit_group resumed>) = ? [pid 5075] <... restart_syscall resumed>) = 0 [pid 7125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7123] +++ exited with 0 +++ [pid 7125] <... mmap resumed>) = 0x7f943d000000 [pid 7125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... ioctl resumed>) = 0 [pid 5075] umount2("./337", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7123, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7124] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5072] umount2("./338", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7124] <... close resumed>) = 0 [pid 7124] close(4 [pid 5075] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7125] <... write resumed>) = 524288 [pid 7124] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5072] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] newfstatat(AT_FDCWD, "./338/file1", [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 7124] mkdir("./file1", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "./338/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./338/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7124] <... mkdir resumed>) = 0 [pid 5075] umount2("./337/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7124] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(4, "", [pid 5073] close(3 [pid 5072] newfstatat(AT_FDCWD, "./338/binderfs", [pid 5075] newfstatat(AT_FDCWD, "./337/binderfs", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] unlink("./338/binderfs" [pid 7125] munmap(0x7f943d000000, 138412032 [pid 7124] <... mount resumed>) = 0 [pid 7124] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7124] chdir("./file1") = 0 [pid 7125] <... munmap resumed>) = 0 [pid 7124] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... unlink resumed>) = 0 [pid 5075] unlink("./337/binderfs" [pid 5072] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7124] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7125] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7124] truncate("./file1", 0 [pid 5075] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7126 attached [pid 7125] <... openat resumed>) = 4 [ 256.323993][ T7124] loop5: detected capacity change from 0 to 1024 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./338/file1" [pid 7126] set_robust_list(0x555583d53660, 24 [pid 7125] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7126 [pid 7126] <... set_robust_list resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7126] chdir("./340" [pid 5074] close(3 [pid 7126] <... chdir resumed>) = 0 [pid 7124] <... truncate resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7124] memfd_create("syzkaller", 0 [pid 5074] rmdir("./338" [pid 7126] <... prctl resumed>) = 0 [pid 7124] <... memfd_create resumed>) = 4 [pid 7126] setpgid(0, 0 [pid 7124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7126] <... setpgid resumed>) = 0 [pid 7124] <... mmap resumed>) = 0x7f943d000000 [pid 7126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = 0 [pid 5074] mkdir("./339", 0777 [pid 7126] <... openat resumed>) = 3 [pid 7126] write(3, "1000", 4 [pid 5074] <... mkdir resumed>) = 0 [pid 7126] <... write resumed>) = 4 [pid 7126] close(3) = 0 [pid 7124] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7126] memfd_create("syzkaller", 0) = 3 [pid 7126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] <... umount2 resumed>) = 0 [pid 5075] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5072] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./337/file1", [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(AT_FDCWD, "./338/file1", [pid 7125] <... ioctl resumed>) = 0 [pid 5075] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7125] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7125] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./337/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7125] close(4 [pid 5075] <... openat resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./338/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7125] <... close resumed>) = 0 [pid 7125] mkdir("./file1", 0777 [pid 7124] <... write resumed>) = 524288 [pid 5075] newfstatat(4, "", [pid 5072] <... openat resumed>) = 4 [pid 7126] <... write resumed>) = 524288 [pid 7125] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(4, "", [pid 5075] getdents64(4, [pid 7125] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5072] getdents64(4, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] close(4 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] close(4 [pid 5075] rmdir("./337/file1" [pid 5072] <... close resumed>) = 0 [pid 7126] munmap(0x7f943d000000, 138412032 [pid 7124] munmap(0x7f943d000000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [ 256.388784][ T7125] loop0: detected capacity change from 0 to 1024 [pid 5072] rmdir("./338/file1" [pid 7126] <... munmap resumed>) = 0 [pid 7124] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./338" [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 7124] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 7126] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7124] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] rmdir("./337" [pid 5074] <... ioctl resumed>) = 0 [pid 5072] mkdir("./339", 0777 [pid 7126] <... openat resumed>) = 4 [pid 7125] <... mount resumed>) = 0 [pid 7125] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 7125] <... openat resumed>) = 3 [pid 7125] chdir("./file1") = 0 [pid 7125] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 7125] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7125] truncate("./file1", 0 [pid 7126] ioctl(4, LOOP_SET_FD, 3 [pid 5075] mkdir("./338", 0777 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7125] <... truncate resumed>) = 0 [pid 7124] close(4 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7125] memfd_create("syzkaller", 0) = 4 [pid 5074] close(3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... close resumed>) = 0 [pid 7125] <... mmap resumed>) = 0x7f943d000000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 ./strace-static-x86_64: Process 7127 attached [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7127] set_robust_list(0x555583d53660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7127 [pid 7127] <... set_robust_list resumed>) = 0 [pid 7127] chdir("./339") = 0 [pid 7127] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7125] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7126] <... ioctl resumed>) = 0 [pid 7124] <... close resumed>) = 0 [pid 7127] <... prctl resumed>) = 0 [pid 7124] exit_group(0 [pid 7127] setpgid(0, 0 [pid 7124] <... exit_group resumed>) = ? [pid 7127] <... setpgid resumed>) = 0 [pid 7126] close(3 [pid 7124] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7124, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7126] <... close resumed>) = 0 [pid 7127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7126] close(4 [pid 5076] <... restart_syscall resumed>) = 0 [pid 7126] <... close resumed>) = 0 [pid 5076] umount2("./334", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7127] <... openat resumed>) = 3 [pid 7126] mkdir("./file1", 0777 [pid 7125] <... write resumed>) = 524288 [pid 5076] <... openat resumed>) = 3 [pid 7127] write(3, "1000", 4 [pid 7126] <... mkdir resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 7127] <... write resumed>) = 4 [pid 7125] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7127] close(3 [pid 7125] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 7127] <... close resumed>) = 0 [pid 7126] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7127] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7127] <... symlink resumed>) = 0 [pid 5076] umount2("./334/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7127] memfd_create("syzkaller", 0 [pid 7125] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./334/binderfs", [pid 7127] <... memfd_create resumed>) = 3 [pid 7125] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7125] close(4 [pid 7127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] unlink("./334/binderfs" [pid 7127] <... mmap resumed>) = 0x7f943d000000 [pid 7127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [ 256.481683][ T7126] loop2: detected capacity change from 0 to 1024 [pid 7126] <... mount resumed>) = 0 [pid 7125] <... close resumed>) = 0 [pid 7126] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7126] chdir("./file1" [pid 5076] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7126] <... chdir resumed>) = 0 [pid 7126] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7125] exit_group(0 [pid 5072] <... ioctl resumed>) = 0 [pid 5072] close(3 [pid 7126] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7126] truncate("./file1", 0 [pid 5072] <... close resumed>) = 0 [pid 7125] <... exit_group resumed>) = ? [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7125] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7125, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] umount2("./339", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 5075] close(3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7128 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7128 attached [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7127] <... write resumed>) = 524288 [pid 5071] umount2("./339/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7128] set_robust_list(0x555583d53660, 24 [pid 7126] <... truncate resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./334/file1", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7128] <... set_robust_list resumed>) = 0 [pid 7126] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./339/binderfs", [pid 7128] chdir("./339" [pid 7126] <... memfd_create resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7128] <... chdir resumed>) = 0 [pid 7126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] unlink("./339/binderfs" [pid 5076] umount2("./334/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7128] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7127] munmap(0x7f943d000000, 138412032 [pid 7126] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./334/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7129 ./strace-static-x86_64: Process 7129 attached [pid 7128] <... prctl resumed>) = 0 [pid 7127] <... munmap resumed>) = 0 [pid 7126] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [pid 5071] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7128] setpgid(0, 0 [pid 7127] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7128] <... setpgid resumed>) = 0 [pid 7127] <... openat resumed>) = 4 [pid 7129] set_robust_list(0x555583d53660, 24 [pid 7128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7127] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7129] <... set_robust_list resumed>) = 0 [pid 7128] <... openat resumed>) = 3 [pid 7127] <... ioctl resumed>) = 0 [pid 5076] getdents64(4, [pid 5071] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7129] chdir("./338" [pid 7128] write(3, "1000", 4 [pid 7127] close(3 [pid 7126] <... write resumed>) = 524288 [pid 5076] getdents64(4, [pid 5071] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7129] <... chdir resumed>) = 0 [pid 7128] <... write resumed>) = 4 [pid 7127] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7128] close(3 [pid 7127] close(4 [pid 7126] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(AT_FDCWD, "./339/file1", [pid 7129] <... prctl resumed>) = 0 [pid 7128] <... close resumed>) = 0 [pid 7127] <... close resumed>) = 0 [pid 7129] setpgid(0, 0 [pid 7128] symlink("/dev/binderfs", "./binderfs" [pid 7127] mkdir("./file1", 0777 [pid 7126] <... munmap resumed>) = 0 [pid 5076] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7129] <... setpgid resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7128] <... symlink resumed>) = 0 [pid 7127] <... mkdir resumed>) = 0 [pid 5076] rmdir("./334/file1" [pid 5071] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7128] memfd_create("syzkaller", 0 [pid 7127] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7129] <... openat resumed>) = 3 [pid 7128] <... memfd_create resumed>) = 3 [pid 7126] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./339/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7129] write(3, "1000", 4 [pid 7128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7126] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 7129] <... write resumed>) = 4 [pid 7128] <... mmap resumed>) = 0x7f943d000000 [pid 7127] <... mount resumed>) = 0 [pid 7126] close(4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... openat resumed>) = 4 [pid 7129] close(3 [pid 7128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7127] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7126] <... close resumed>) = 0 [pid 5076] close(3 [pid 5071] newfstatat(4, "", [pid 7129] <... close resumed>) = 0 [pid 7127] <... openat resumed>) = 3 [pid 7129] symlink("/dev/binderfs", "./binderfs" [pid 7127] chdir("./file1" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7127] <... chdir resumed>) = 0 [pid 5071] getdents64(4, [pid 7127] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [ 256.594203][ T7127] loop3: detected capacity change from 0 to 1024 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7129] <... symlink resumed>) = 0 [pid 7127] truncate("./file1", 0 [pid 5071] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7129] memfd_create("syzkaller", 0 [pid 7128] <... write resumed>) = 524288 [pid 7127] <... truncate resumed>) = 0 [pid 7126] exit_group(0 [pid 5076] rmdir("./334" [pid 5071] close(4 [pid 7129] <... memfd_create resumed>) = 3 [pid 7128] munmap(0x7f943d000000, 138412032 [pid 7127] memfd_create("syzkaller", 0 [pid 7126] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7128] <... munmap resumed>) = 0 [pid 7127] <... memfd_create resumed>) = 4 [pid 7126] +++ exited with 0 +++ [pid 5071] rmdir("./339/file1" [pid 7128] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7129] <... mmap resumed>) = 0x7f943d000000 [pid 7128] <... openat resumed>) = 4 [pid 7127] <... mmap resumed>) = 0x7f943d000000 [pid 5071] getdents64(3, [pid 7128] ioctl(4, LOOP_SET_FD, 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7126, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./339" [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./340", 0777) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7128] <... ioctl resumed>) = 0 [pid 7129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7127] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] mkdir("./335", 0777 [pid 5073] <... restart_syscall resumed>) = 0 [pid 7128] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7128] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] umount2("./340", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7128] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7128] <... close resumed>) = 0 [pid 7128] mkdir("./file1", 0777 [pid 7127] <... write resumed>) = 524288 [pid 5073] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7128] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7128] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7129] <... write resumed>) = 524288 [pid 7127] munmap(0x7f943d000000, 138412032 [pid 5073] newfstatat(3, "", [pid 5071] <... ioctl resumed>) = 0 [ 256.671361][ T7128] loop1: detected capacity change from 0 to 1024 [pid 5071] close(3 [pid 7129] munmap(0x7f943d000000, 138412032 [pid 7127] <... munmap resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7129] <... munmap resumed>) = 0 [pid 7129] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... close resumed>) = 0 [pid 5073] umount2("./340/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(AT_FDCWD, "./340/binderfs", [pid 7129] <... openat resumed>) = 4 [pid 7127] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7127] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7129] ioctl(4, LOOP_SET_FD, 3 [pid 7127] close(4 [pid 5073] unlink("./340/binderfs"./strace-static-x86_64: Process 7130 attached [pid 7128] <... mount resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7130 [pid 7128] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7130] set_robust_list(0x555583d53660, 24 [pid 7128] chdir("./file1" [pid 5073] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7130] <... set_robust_list resumed>) = 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7130] chdir("./340" [pid 7127] <... close resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7131 [pid 7128] <... chdir resumed>) = 0 [pid 7128] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7130] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7131 attached [pid 7131] set_robust_list(0x555583d53660, 24 [pid 7130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7130] setpgid(0, 0) = 0 [pid 7128] truncate("./file1", 0 [pid 7131] <... set_robust_list resumed>) = 0 [pid 7130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... umount2 resumed>) = 0 [pid 7127] exit_group(0 [pid 7131] chdir("./335" [pid 7130] <... openat resumed>) = 3 [pid 7127] <... exit_group resumed>) = ? [pid 5073] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7131] <... chdir resumed>) = 0 [pid 7129] <... ioctl resumed>) = 0 [pid 7131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7131] setpgid(0, 0) = 0 [pid 7131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7130] write(3, "1000", 4 [pid 7129] close(3 [pid 7127] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7129] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7127, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] newfstatat(AT_FDCWD, "./340/file1", [pid 7129] close(4 [pid 7131] write(3, "1000", 4 [pid 7130] <... write resumed>) = 4 [pid 7129] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7130] close(3 [pid 7129] mkdir("./file1", 0777 [pid 7128] <... truncate resumed>) = 0 [pid 7131] <... write resumed>) = 4 [pid 7130] <... close resumed>) = 0 [pid 7129] <... mkdir resumed>) = 0 [pid 7128] memfd_create("syzkaller", 0 [pid 5073] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7130] symlink("/dev/binderfs", "./binderfs" [pid 7129] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7131] close(3 [pid 7128] <... memfd_create resumed>) = 4 [pid 7131] <... close resumed>) = 0 [pid 7130] <... symlink resumed>) = 0 [pid 7128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] umount2("./339", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./340/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7131] symlink("/dev/binderfs", "./binderfs" [pid 7128] <... mmap resumed>) = 0x7f943d000000 [pid 7130] memfd_create("syzkaller", 0 [pid 7128] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 7130] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7131] <... symlink resumed>) = 0 [pid 7130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7131] memfd_create("syzkaller", 0 [pid 7130] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(3, "", [pid 5073] getdents64(4, [pid 7131] <... memfd_create resumed>) = 3 [pid 7131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7131] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(3, [pid 7131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7129] <... mount resumed>) = 0 [ 256.743727][ T7129] loop4: detected capacity change from 0 to 1024 [pid 5073] getdents64(4, [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./339/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4) = 0 [pid 7129] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./339/binderfs", [pid 5073] rmdir("./340/file1" [pid 7129] <... openat resumed>) = 3 [pid 7131] <... write resumed>) = 524288 [pid 7130] <... write resumed>) = 524288 [pid 7128] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7129] chdir("./file1" [pid 7131] munmap(0x7f943d000000, 138412032) = 0 [pid 7131] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7130] munmap(0x7f943d000000, 138412032 [pid 7129] <... chdir resumed>) = 0 [pid 7128] munmap(0x7f943d000000, 138412032 [pid 5074] unlink("./339/binderfs" [pid 5073] getdents64(3, [pid 7131] <... openat resumed>) = 4 [pid 7130] <... munmap resumed>) = 0 [pid 7129] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7128] <... munmap resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7131] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7129] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(3 [pid 7129] truncate("./file1", 0 [pid 7128] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7131] <... ioctl resumed>) = 0 [pid 7130] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7128] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] rmdir("./340" [pid 7128] close(4 [pid 7131] close(3 [pid 7130] <... openat resumed>) = 4 [pid 7129] <... truncate resumed>) = 0 [pid 5074] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 7131] <... close resumed>) = 0 [pid 7130] ioctl(4, LOOP_SET_FD, 3 [pid 7129] memfd_create("syzkaller", 0 [pid 7128] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./341", 0777 [pid 7131] close(4 [pid 7128] exit_group(0) = ? [pid 7128] +++ exited with 0 +++ [pid 7129] <... memfd_create resumed>) = 4 [pid 7131] <... close resumed>) = 0 [pid 7130] <... ioctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./339/file1", [pid 5073] <... mkdir resumed>) = 0 [pid 7131] mkdir("./file1", 0777 [pid 7130] close(3 [pid 7129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7128, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7130] <... close resumed>) = 0 [pid 7129] <... mmap resumed>) = 0x7f943d000000 [pid 5074] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7131] <... mkdir resumed>) = 0 [pid 7130] close(4 [pid 7129] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... restart_syscall resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./339/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7131] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7130] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7130] mkdir("./file1", 0777 [pid 5074] newfstatat(4, "", [pid 5072] umount2("./339", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7130] <... mkdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... openat resumed>) = 3 [pid 7130] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(3, "", [pid 5074] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 5074] rmdir("./339/file1" [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] umount2("./339/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7129] <... write resumed>) = 524288 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./339/binderfs", [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3) = 0 [pid 7131] <... mount resumed>) = 0 [pid 5072] unlink("./339/binderfs" [ 256.848642][ T7131] loop5: detected capacity change from 0 to 1024 [ 256.861817][ T7130] loop0: detected capacity change from 0 to 1024 [pid 7131] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] rmdir("./339" [pid 5072] <... unlink resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7131] chdir("./file1" [pid 7130] <... mount resumed>) = 0 [pid 7129] munmap(0x7f943d000000, 138412032 [pid 5072] <... umount2 resumed>) = 0 [pid 7131] <... chdir resumed>) = 0 [pid 7130] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7131] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7130] <... openat resumed>) = 3 [pid 7131] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7130] chdir("./file1" [pid 5074] mkdir("./340", 0777 [pid 7131] truncate("./file1", 0 [pid 7130] <... chdir resumed>) = 0 [pid 7129] <... munmap resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7130] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7129] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./339/file1", [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./339/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./339/file1" [pid 7129] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... ioctl resumed>) = 0 [pid 7130] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7129] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 7130] truncate("./file1", 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7129] <... close resumed>) = 0 [pid 5073] close(3 [pid 5072] close(3) = 0 [pid 5072] rmdir("./339" [pid 7131] <... truncate resumed>) = 0 [pid 7130] <... truncate resumed>) = 0 [pid 7129] exit_group(0 [pid 5072] <... rmdir resumed>) = 0 [pid 7131] memfd_create("syzkaller", 0 [pid 7130] memfd_create("syzkaller", 0 [pid 7129] <... exit_group resumed>) = ? [pid 5072] mkdir("./340", 0777 [pid 7131] <... memfd_create resumed>) = 4 [pid 7130] <... memfd_create resumed>) = 4 [pid 5072] <... mkdir resumed>) = 0 [pid 7130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7129] +++ exited with 0 +++ [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7129, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7130] <... mmap resumed>) = 0x7f943d000000 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./338", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7130] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7131] <... mmap resumed>) = 0x7f943d000000 [pid 5075] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(3) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7132 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 7133 ./strace-static-x86_64: Process 7133 attached [pid 5075] <... openat resumed>) = 3 [pid 7133] set_robust_list(0x555583d53660, 24./strace-static-x86_64: Process 7132 attached [pid 7131] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] newfstatat(3, "", [pid 7133] <... set_robust_list resumed>) = 0 [pid 7133] chdir("./340" [pid 7132] set_robust_list(0x555583d53660, 24 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7133] <... chdir resumed>) = 0 [pid 7133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7133] setpgid(0, 0) = 0 [pid 7132] <... set_robust_list resumed>) = 0 [pid 5075] getdents64(3, [pid 7133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7132] chdir("./341" [pid 7130] <... write resumed>) = 524288 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... ioctl resumed>) = 0 [pid 5075] umount2("./338/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7133] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7133] write(3, "1000", 4 [pid 5075] newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7132] <... chdir resumed>) = 0 [pid 7131] <... write resumed>) = 524288 [pid 7130] munmap(0x7f943d000000, 138412032 [pid 5075] unlink("./338/binderfs" [pid 7133] <... write resumed>) = 4 [pid 7132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7133] close(3 [pid 7132] <... prctl resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7133] <... close resumed>) = 0 [pid 7132] setpgid(0, 0 [pid 7130] <... munmap resumed>) = 0 [pid 5075] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7133] symlink("/dev/binderfs", "./binderfs" [pid 7130] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7133] <... symlink resumed>) = 0 [pid 7132] <... setpgid resumed>) = 0 [pid 7131] munmap(0x7f943d000000, 138412032 [pid 7130] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(3 [pid 7133] memfd_create("syzkaller", 0 [pid 5072] <... close resumed>) = 0 [pid 7133] <... memfd_create resumed>) = 3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7133] <... mmap resumed>) = 0x7f943d000000 [pid 7132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7131] <... munmap resumed>) = 0 [pid 7130] close(4 [pid 5075] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7134 ./strace-static-x86_64: Process 7134 attached [pid 7134] set_robust_list(0x555583d53660, 24) = 0 [pid 7134] chdir("./340") = 0 [pid 7134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7130] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./338/file1", [pid 7134] setpgid(0, 0 [pid 7132] <... openat resumed>) = 3 [pid 7134] <... setpgid resumed>) = 0 [pid 7134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7132] write(3, "1000", 4 [pid 7131] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7134] <... openat resumed>) = 3 [pid 7134] write(3, "1000", 4) = 4 [pid 7134] close(3) = 0 [pid 7134] symlink("/dev/binderfs", "./binderfs" [pid 7132] <... write resumed>) = 4 [pid 7131] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7132] close(3 [pid 7131] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7134] <... symlink resumed>) = 0 [pid 7134] memfd_create("syzkaller", 0) = 3 [pid 7134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7132] <... close resumed>) = 0 [pid 7131] <... close resumed>) = 0 [pid 7130] exit_group(0 [pid 5075] openat(AT_FDCWD, "./338/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7132] symlink("/dev/binderfs", "./binderfs" [pid 7130] <... exit_group resumed>) = ? [pid 7133] <... write resumed>) = 524288 [pid 7132] <... symlink resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 7133] munmap(0x7f943d000000, 138412032) = 0 [pid 7130] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7130, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7133] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7133] ioctl(4, LOOP_SET_FD, 3 [pid 5071] umount2("./340", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7132] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7132] <... memfd_create resumed>) = 3 [pid 7131] exit_group(0 [pid 5075] getdents64(4, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7131] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... openat resumed>) = 3 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(3, "", [pid 5075] close(4) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./338/file1" [pid 5071] getdents64(3, [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7132] <... mmap resumed>) = 0x7f943d000000 [pid 5075] getdents64(3, [pid 5071] umount2("./340/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./340/binderfs", [pid 5075] rmdir("./338" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7134] <... write resumed>) = 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] unlink("./340/binderfs" [pid 5075] mkdir("./339", 0777 [pid 7131] +++ exited with 0 +++ [pid 5071] <... unlink resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7131, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 7134] munmap(0x7f943d000000, 138412032 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7133] <... ioctl resumed>) = 0 [pid 5076] umount2("./335", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7134] <... munmap resumed>) = 0 [pid 7133] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7133] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7133] close(4 [pid 5076] newfstatat(3, "", [pid 7134] <... openat resumed>) = 4 [pid 7133] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7133] mkdir("./file1", 0777 [pid 5076] getdents64(3, [pid 7134] ioctl(4, LOOP_SET_FD, 3 [pid 7133] <... mkdir resumed>) = 0 [pid 7134] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = 0 [pid 7133] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./335/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./335/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./340/file1", [pid 5076] unlink("./335/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5071] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./340/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7133] <... mount resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7133] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 7133] chdir("./file1") = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7133] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7133] truncate("./file1", 0 [pid 7134] close(3) = 0 [ 257.072902][ T7133] loop3: detected capacity change from 0 to 1024 [ 257.107197][ T7134] loop1: detected capacity change from 0 to 1024 [pid 7134] close(4) = 0 [pid 7133] <... truncate resumed>) = 0 [pid 7132] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] close(4 [pid 5076] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5071] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] rmdir("./340/file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... rmdir resumed>) = 0 [pid 7133] memfd_create("syzkaller", 0) = 4 [pid 7133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 7135 attached [pid 7133] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(AT_FDCWD, "./335/file1", [pid 5071] getdents64(3, [pid 7135] set_robust_list(0x555583d53660, 24 [pid 7132] munmap(0x7f943d000000, 138412032 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7135 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7135] <... set_robust_list resumed>) = 0 [pid 7134] mkdir("./file1", 0777 [pid 7132] <... munmap resumed>) = 0 [pid 5076] umount2("./335/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7134] <... mkdir resumed>) = 0 [pid 7134] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./335/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7135] chdir("./339" [pid 7132] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... openat resumed>) = 4 [pid 5071] rmdir("./340" [pid 7132] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 7135] <... chdir resumed>) = 0 [pid 7135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7132] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7135] <... prctl resumed>) = 0 [pid 7132] <... ioctl resumed>) = 0 [pid 5076] getdents64(4, [pid 7135] setpgid(0, 0 [pid 7134] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] mkdir("./341", 0777 [pid 7135] <... setpgid resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7134] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(4, [pid 7135] <... openat resumed>) = 3 [pid 7134] <... openat resumed>) = 3 [pid 7133] <... write resumed>) = 524288 [pid 7132] close(3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7135] write(3, "1000", 4 [pid 7132] <... close resumed>) = 0 [pid 5076] close(4 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7135] <... write resumed>) = 4 [pid 7132] close(4 [pid 5076] <... close resumed>) = 0 [pid 7135] close(3) = 0 [pid 7134] chdir("./file1" [pid 7132] <... close resumed>) = 0 [pid 5076] rmdir("./335/file1" [pid 7135] symlink("/dev/binderfs", "./binderfs" [pid 7134] <... chdir resumed>) = 0 [pid 7132] mkdir("./file1", 0777 [pid 7134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7135] <... symlink resumed>) = 0 [pid 7134] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7134] truncate("./file1", 0 [pid 7133] munmap(0x7f943d000000, 138412032 [pid 7132] <... mkdir resumed>) = 0 [pid 7135] memfd_create("syzkaller", 0 [pid 7134] <... truncate resumed>) = 0 [pid 7133] <... munmap resumed>) = 0 [pid 7132] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... rmdir resumed>) = 0 [pid 7135] <... memfd_create resumed>) = 3 [pid 7134] memfd_create("syzkaller", 0 [pid 7135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7134] <... memfd_create resumed>) = 4 [pid 5076] getdents64(3, [pid 7134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7133] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7134] <... mmap resumed>) = 0x7f943d000000 [pid 7133] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 257.176961][ T7132] loop2: detected capacity change from 0 to 1024 [pid 7133] close(4 [pid 7135] <... mmap resumed>) = 0x7f943d000000 [pid 7134] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7133] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3) = 0 [pid 5076] rmdir("./335" [pid 7133] exit_group(0 [pid 5076] <... rmdir resumed>) = 0 [pid 7133] <... exit_group resumed>) = ? [pid 5076] mkdir("./336", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7133] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7133, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7134] <... write resumed>) = 524288 [pid 7132] <... mount resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7132] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7134] munmap(0x7f943d000000, 138412032) = 0 [pid 7132] <... openat resumed>) = 3 [pid 5074] umount2("./340", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7132] chdir("./file1" [pid 7135] <... write resumed>) = 524288 [pid 7134] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7132] <... chdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7134] close(4 [pid 7132] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] close(3 [pid 7135] munmap(0x7f943d000000, 138412032 [pid 5071] <... close resumed>) = 0 [pid 7135] <... munmap resumed>) = 0 [pid 7132] truncate("./file1", 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7136 attached [pid 5074] newfstatat(3, "", [pid 7136] set_robust_list(0x555583d53660, 24 [pid 7135] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7134] <... close resumed>) = 0 [pid 7132] <... truncate resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7136 [pid 7136] <... set_robust_list resumed>) = 0 [pid 7135] <... openat resumed>) = 4 [pid 7134] exit_group(0 [pid 7132] memfd_create("syzkaller", 0 [pid 5074] getdents64(3, [pid 7136] chdir("./341" [pid 7135] ioctl(4, LOOP_SET_FD, 3 [pid 7134] <... exit_group resumed>) = ? [pid 7132] <... memfd_create resumed>) = 4 [pid 7136] <... chdir resumed>) = 0 [pid 7132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7134] +++ exited with 0 +++ [pid 7132] <... mmap resumed>) = 0x7f943d000000 [pid 5076] close(3 [pid 7136] <... prctl resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7134, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7136] setpgid(0, 0) = 0 [pid 7136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... close resumed>) = 0 [pid 5072] umount2("./340", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7136] <... openat resumed>) = 3 [pid 7132] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./340/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7136] write(3, "1000", 4 [pid 7135] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7136] <... write resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./340/binderfs", [pid 5072] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7136] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7136] <... close resumed>) = 0 [pid 5074] unlink("./340/binderfs" [pid 5072] newfstatat(3, "", [pid 7136] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... unlink resumed>) = 0 [pid 7136] <... symlink resumed>) = 0 [pid 7132] <... write resumed>) = 524288 [pid 7135] close(3 [pid 5074] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7135] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 7136] memfd_create("syzkaller", 0 [pid 7135] close(4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7137 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 7137 attached [pid 7136] <... memfd_create resumed>) = 3 [pid 7135] <... close resumed>) = 0 [pid 7132] munmap(0x7f943d000000, 138412032 [pid 5074] <... umount2 resumed>) = 0 [pid 7137] set_robust_list(0x555583d53660, 24 [pid 7136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7135] mkdir("./file1", 0777 [pid 5072] umount2("./340/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7137] <... set_robust_list resumed>) = 0 [pid 7136] <... mmap resumed>) = 0x7f943d000000 [pid 7135] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7137] chdir("./336" [pid 7136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7132] <... munmap resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./340/binderfs", [pid 7137] <... chdir resumed>) = 0 [pid 5074] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7132] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7137] <... prctl resumed>) = 0 [pid 7135] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] unlink("./340/binderfs" [pid 7137] setpgid(0, 0 [pid 5074] newfstatat(AT_FDCWD, "./340/file1", [pid 5072] <... unlink resumed>) = 0 [pid 7137] <... setpgid resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7137] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./340/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7137] write(3, "1000", 4 [pid 7135] <... mount resumed>) = 0 [ 257.293116][ T7135] loop4: detected capacity change from 0 to 1024 [pid 5074] <... openat resumed>) = 4 [pid 7132] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(4, "", [pid 7137] <... write resumed>) = 4 [pid 7135] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7132] close(4 [pid 7137] close(3 [pid 7136] <... write resumed>) = 524288 [pid 7135] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7137] <... close resumed>) = 0 [pid 7135] chdir("./file1" [pid 7137] symlink("/dev/binderfs", "./binderfs" [pid 7135] <... chdir resumed>) = 0 [pid 7137] <... symlink resumed>) = 0 [pid 7135] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] getdents64(4, [pid 7137] memfd_create("syzkaller", 0 [pid 7135] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7135] truncate("./file1", 0 [pid 7137] <... memfd_create resumed>) = 3 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(4) = 0 [pid 7137] <... mmap resumed>) = 0x7f943d000000 [pid 5074] rmdir("./340/file1") = 0 [pid 5072] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./340/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7135] <... truncate resumed>) = 0 [pid 7136] munmap(0x7f943d000000, 138412032 [pid 5072] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7136] <... munmap resumed>) = 0 [pid 7135] memfd_create("syzkaller", 0 [pid 7132] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7135] <... memfd_create resumed>) = 4 [pid 7137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7132] exit_group(0 [pid 5074] getdents64(3, [pid 5072] openat(AT_FDCWD, "./340/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7132] <... exit_group resumed>) = ? [pid 7136] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7135] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7136] <... openat resumed>) = 4 [pid 5074] close(3 [pid 5072] newfstatat(4, "", [pid 7136] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... close resumed>) = 0 [pid 7135] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7132] +++ exited with 0 +++ [pid 5074] rmdir("./340") = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] mkdir("./341", 0777 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7132, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] getdents64(4, [pid 5074] <... mkdir resumed>) = 0 [pid 5073] umount2("./341", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5072] close(4 [pid 5073] newfstatat(3, "", [pid 5072] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./340/file1" [pid 5073] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./341/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(3, [pid 5073] newfstatat(AT_FDCWD, "./341/binderfs", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(3 [pid 5073] unlink("./341/binderfs" [pid 5072] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] rmdir("./340" [pid 7137] <... write resumed>) = 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 5073] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] mkdir("./341", 0777) = 0 [pid 7136] <... ioctl resumed>) = 0 [pid 7136] close(3) = 0 [pid 7136] close(4) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7136] mkdir("./file1", 0777 [pid 5072] <... openat resumed>) = 3 [pid 7136] <... mkdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7136] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7135] <... write resumed>) = 524288 [pid 7137] munmap(0x7f943d000000, 138412032) = 0 [pid 7136] <... mount resumed>) = 0 [ 257.381235][ T7136] loop0: detected capacity change from 0 to 1024 [pid 7136] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7137] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7135] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = 0 [pid 7137] <... openat resumed>) = 4 [pid 7136] <... openat resumed>) = 3 [pid 7135] <... munmap resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7137] ioctl(4, LOOP_SET_FD, 3 [pid 7136] chdir("./file1" [pid 7135] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7135] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7136] <... chdir resumed>) = 0 [pid 7136] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7136] truncate("./file1", 0 [pid 5074] close(3 [pid 7136] <... truncate resumed>) = 0 [pid 7135] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7136] memfd_create("syzkaller", 0) = 4 [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./341/file1", [pid 7137] <... ioctl resumed>) = 0 [pid 7136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7135] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7136] <... mmap resumed>) = 0x7f943d000000 [pid 7137] close(3 [pid 7136] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7135] exit_group(0 [pid 5073] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7137] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7137] close(4 [pid 5073] openat(AT_FDCWD, "./341/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7137] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7138 [pid 5073] <... openat resumed>) = 4 [pid 7137] mkdir("./file1", 0777) = 0 ./strace-static-x86_64: Process 7138 attached [pid 5072] close(3 [pid 7138] set_robust_list(0x555583d53660, 24 [pid 5072] <... close resumed>) = 0 [pid 7138] <... set_robust_list resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7138] chdir("./341") = 0 [pid 7138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7135] <... exit_group resumed>) = ? [pid 5073] newfstatat(4, "", [pid 7137] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7139 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7138] <... prctl resumed>) = 0 [pid 7138] setpgid(0, 0) = 0 [pid 7138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7135] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7135, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] getdents64(4, ./strace-static-x86_64: Process 7139 attached [pid 7138] <... openat resumed>) = 3 [pid 7139] set_robust_list(0x555583d53660, 24) = 0 [pid 7139] chdir("./341" [pid 7138] write(3, "1000", 4) = 4 [pid 7139] <... chdir resumed>) = 0 [pid 7138] close(3 [pid 7139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7138] <... close resumed>) = 0 [pid 7139] <... prctl resumed>) = 0 [pid 7138] symlink("/dev/binderfs", "./binderfs" [ 257.445368][ T7137] loop5: detected capacity change from 0 to 1024 [pid 7139] setpgid(0, 0 [pid 7138] <... symlink resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7139] <... setpgid resumed>) = 0 [pid 7139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7138] memfd_create("syzkaller", 0 [pid 5073] getdents64(4, [pid 7139] <... openat resumed>) = 3 [pid 7138] <... memfd_create resumed>) = 3 [pid 7137] <... mount resumed>) = 0 [pid 7136] <... write resumed>) = 524288 [pid 5075] umount2("./339", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7139] write(3, "1000", 4 [pid 7138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7137] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 7139] <... write resumed>) = 4 [pid 7138] <... mmap resumed>) = 0x7f943d000000 [pid 7137] <... openat resumed>) = 3 [pid 7136] munmap(0x7f943d000000, 138412032 [pid 5075] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 7139] close(3 [pid 7138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7137] chdir("./file1" [pid 7136] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] rmdir("./341/file1" [pid 7139] <... close resumed>) = 0 [pid 7137] <... chdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 7139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7137] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7139] memfd_create("syzkaller", 0 [pid 7137] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 5073] getdents64(3, [pid 7139] <... memfd_create resumed>) = 3 [pid 7137] truncate("./file1", 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7136] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7139] <... mmap resumed>) = 0x7f943d000000 [pid 7136] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./339/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 7139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7137] <... truncate resumed>) = 0 [pid 7136] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 7137] memfd_create("syzkaller", 0 [pid 5073] rmdir("./341" [pid 5075] newfstatat(AT_FDCWD, "./339/binderfs", [pid 7137] <... memfd_create resumed>) = 4 [pid 7137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7136] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7137] <... mmap resumed>) = 0x7f943d000000 [pid 5075] unlink("./339/binderfs" [pid 7138] <... write resumed>) = 524288 [pid 7137] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7136] exit_group(0) = ? [pid 7136] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5073] mkdir("./342", 0777 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7136, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7138] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] umount2("./341", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7138] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7139] <... write resumed>) = 524288 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7138] <... openat resumed>) = 4 [pid 7138] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] newfstatat(3, "", [pid 7139] munmap(0x7f943d000000, 138412032 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7139] <... munmap resumed>) = 0 [pid 5071] getdents64(3, [pid 7139] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7139] <... openat resumed>) = 4 [pid 5071] umount2("./341/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7139] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7138] close(3 [pid 7137] <... write resumed>) = 524288 [pid 5071] newfstatat(AT_FDCWD, "./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./341/binderfs" [pid 7138] <... close resumed>) = 0 [pid 7137] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./339/file1", [pid 5071] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7139] <... ioctl resumed>) = 0 [pid 7138] close(4 [pid 7137] <... munmap resumed>) = 0 [pid 5075] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7139] close(3 [pid 7138] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7139] <... close resumed>) = 0 [pid 7138] mkdir("./file1", 0777 [pid 5075] openat(AT_FDCWD, "./339/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7139] close(4 [pid 5075] <... openat resumed>) = 4 [pid 7139] <... close resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 7139] mkdir("./file1", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 7139] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./339/file1" [pid 5073] <... ioctl resumed>) = 0 [pid 7139] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7138] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7139] <... mount resumed>) = 0 [pid 7138] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7137] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] close(3 [pid 5071] <... umount2 resumed>) = 0 [pid 7139] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7137] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... close resumed>) = 0 [pid 7137] close(4 [pid 5075] rmdir("./339" [pid 7139] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 7139] chdir("./file1" [pid 7137] <... close resumed>) = 0 [pid 5075] mkdir("./340", 0777 [pid 5071] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7139] <... chdir resumed>) = 0 [pid 7139] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./341/file1", [pid 7139] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7139] truncate("./file1", 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [ 257.573873][ T7138] loop3: detected capacity change from 0 to 1024 [ 257.586130][ T7139] loop1: detected capacity change from 0 to 1024 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./341/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 4 [pid 7139] <... truncate resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7139] memfd_create("syzkaller", 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7139] <... memfd_create resumed>) = 4 [pid 5071] getdents64(4, [pid 7139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7139] <... mmap resumed>) = 0x7f943d000000 [pid 5071] getdents64(4, ./strace-static-x86_64: Process 7140 attached [pid 7139] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7138] <... mount resumed>) = 0 [pid 7137] exit_group(0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7140] set_robust_list(0x555583d53660, 24 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7140 [pid 7140] <... set_robust_list resumed>) = 0 [pid 5071] close(4 [pid 7140] chdir("./342" [pid 7137] <... exit_group resumed>) = ? [pid 5071] <... close resumed>) = 0 [pid 7140] <... chdir resumed>) = 0 [pid 7137] +++ exited with 0 +++ [pid 5071] rmdir("./341/file1" [pid 7140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7138] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 7138] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7137, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] getdents64(3, [pid 7138] chdir("./file1" [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7138] <... chdir resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5071] close(3 [pid 7138] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 7138] truncate("./file1", 0 [pid 5076] umount2("./336", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./341" [pid 7140] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 7140] setpgid(0, 0 [pid 5076] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] mkdir("./342", 0777 [pid 7140] <... setpgid resumed>) = 0 [pid 7139] <... write resumed>) = 524288 [pid 5076] <... openat resumed>) = 3 [pid 7138] <... truncate resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 7138] memfd_create("syzkaller", 0 [pid 7140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7138] <... memfd_create resumed>) = 4 [pid 5076] getdents64(3, [pid 7140] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7140] write(3, "1000", 4 [pid 7138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./336/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7140] <... write resumed>) = 4 [pid 7140] close(3 [pid 7139] munmap(0x7f943d000000, 138412032 [pid 7138] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7140] <... close resumed>) = 0 [pid 7139] <... munmap resumed>) = 0 [pid 7138] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(AT_FDCWD, "./336/binderfs", [pid 5075] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7140] symlink("/dev/binderfs", "./binderfs" [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7140] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7140] memfd_create("syzkaller", 0 [pid 5076] unlink("./336/binderfs") = 0 [pid 7140] <... memfd_create resumed>) = 3 [pid 5076] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7141 [pid 7139] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 7141 attached [pid 7140] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = 0 [pid 7138] <... write resumed>) = 524288 [pid 7139] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7139] close(4 [pid 5076] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7141] set_robust_list(0x555583d53660, 24) = 0 [pid 7140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./336/file1", [pid 7141] chdir("./340" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7141] <... chdir resumed>) = 0 [pid 7141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] umount2("./336/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7139] <... close resumed>) = 0 [pid 7139] exit_group(0) = ? [pid 7140] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7141] <... prctl resumed>) = 0 [pid 7141] setpgid(0, 0 [pid 7139] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./336/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7141] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7139, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] newfstatat(4, "", [pid 7141] <... openat resumed>) = 3 [pid 7140] munmap(0x7f943d000000, 138412032 [pid 7138] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7141] write(3, "1000", 4 [pid 7138] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 7141] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] umount2("./341", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7141] close(3 [pid 7140] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7141] <... close resumed>) = 0 [pid 7140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7138] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... ioctl resumed>) = 0 [pid 7141] symlink("/dev/binderfs", "./binderfs" [pid 7138] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] close(4 [pid 5072] <... openat resumed>) = 3 [pid 7138] close(4 [pid 5072] newfstatat(3, "", [pid 5071] close(3 [pid 7141] <... symlink resumed>) = 0 [pid 7140] <... openat resumed>) = 4 [pid 7138] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... close resumed>) = 0 [pid 7141] memfd_create("syzkaller", 0 [pid 7140] ioctl(4, LOOP_SET_FD, 3 [pid 5076] rmdir("./336/file1" [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] umount2("./341/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7142 attached [pid 5072] newfstatat(AT_FDCWD, "./341/binderfs", [pid 7142] set_robust_list(0x555583d53660, 24 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7142] <... set_robust_list resumed>) = 0 [pid 5072] unlink("./341/binderfs" [pid 7142] chdir("./342" [pid 5072] <... unlink resumed>) = 0 [pid 7142] <... chdir resumed>) = 0 [pid 7142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7142 [pid 7142] <... prctl resumed>) = 0 [pid 7138] exit_group(0 [pid 7142] setpgid(0, 0) = 0 [pid 7138] <... exit_group resumed>) = ? [pid 7142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, [pid 7142] <... openat resumed>) = 3 [pid 7141] <... memfd_create resumed>) = 3 [pid 7138] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7138, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7141] <... mmap resumed>) = 0x7f943d000000 [pid 7142] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 7142] <... write resumed>) = 4 [pid 7142] close(3 [pid 5076] rmdir("./336" [pid 7142] <... close resumed>) = 0 [pid 7142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./337", 0777 [pid 5074] umount2("./341", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 7142] memfd_create("syzkaller", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 7142] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./341/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 7142] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] unlink("./341/binderfs") = 0 [pid 5074] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7142] <... write resumed>) = 524288 [pid 7140] <... ioctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5072] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7142] munmap(0x7f943d000000, 138412032 [pid 5072] newfstatat(AT_FDCWD, "./341/file1", [pid 7140] close(3 [pid 7142] <... munmap resumed>) = 0 [pid 7140] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7140] close(4) = 0 [pid 5072] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7142] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7140] mkdir("./file1", 0777 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7142] <... openat resumed>) = 4 [pid 7142] ioctl(4, LOOP_SET_FD, 3 [ 257.770261][ T7140] loop2: detected capacity change from 0 to 1024 [pid 5074] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7140] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./341/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7141] <... write resumed>) = 524288 [pid 7140] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... openat resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./341/file1", [pid 5072] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./341/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7141] munmap(0x7f943d000000, 138412032 [pid 5074] newfstatat(4, "", [pid 5072] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 5074] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7141] <... munmap resumed>) = 0 [pid 5074] close(4 [pid 5072] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./341/file1" [pid 5074] rmdir("./341/file1") = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7141] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] close(3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7141] <... openat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 5072] close(3 [pid 7142] <... ioctl resumed>) = 0 [pid 5074] rmdir("./341" [pid 7142] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7141] ioctl(4, LOOP_SET_FD, 3 [pid 7140] <... mount resumed>) = 0 [pid 5074] mkdir("./342", 0777 [pid 5072] rmdir("./341" [pid 7142] <... close resumed>) = 0 [pid 7140] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7140] <... openat resumed>) = 3 [pid 5076] close(3 [pid 5072] mkdir("./342", 0777 [pid 7140] chdir("./file1" [pid 5076] <... close resumed>) = 0 [pid 7142] close(4 [pid 7140] <... chdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... mkdir resumed>) = 0 [pid 7142] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7142] mkdir("./file1", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7142] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7140] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7140] truncate("./file1", 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 3 [pid 7142] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, ""./strace-static-x86_64: Process 7143 attached [pid 7140] <... truncate resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7143 [pid 7140] memfd_create("syzkaller", 0 [pid 7141] <... ioctl resumed>) = 0 [pid 7140] <... memfd_create resumed>) = 4 [pid 7141] close(3 [pid 7140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7143] set_robust_list(0x555583d53660, 24) = 0 [pid 7141] <... close resumed>) = 0 [pid 7140] <... mmap resumed>) = 0x7f943d000000 [pid 7141] close(4 [pid 7143] chdir("./337" [pid 7141] <... close resumed>) = 0 [pid 7141] mkdir("./file1", 0777 [pid 7143] <... chdir resumed>) = 0 [pid 7141] <... mkdir resumed>) = 0 [pid 7143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7142] <... mount resumed>) = 0 [pid 7141] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7143] setpgid(0, 0 [ 257.813833][ T7142] loop0: detected capacity change from 0 to 1024 [ 257.850758][ T7141] loop4: detected capacity change from 0 to 1024 [pid 7142] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7143] <... setpgid resumed>) = 0 [pid 7142] <... openat resumed>) = 3 [pid 7140] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7142] chdir("./file1" [pid 7143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7142] <... chdir resumed>) = 0 [pid 7142] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7142] truncate("./file1", 0 [pid 7143] <... openat resumed>) = 3 [pid 7143] write(3, "1000", 4) = 4 [pid 7142] <... truncate resumed>) = 0 [pid 7141] <... mount resumed>) = 0 [pid 7140] <... write resumed>) = 524288 [pid 7141] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7143] close(3 [pid 7142] memfd_create("syzkaller", 0 [pid 7143] <... close resumed>) = 0 [pid 7142] <... memfd_create resumed>) = 4 [pid 7141] chdir("./file1" [pid 7143] symlink("/dev/binderfs", "./binderfs" [pid 7142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7141] <... chdir resumed>) = 0 [pid 7142] <... mmap resumed>) = 0x7f943d000000 [pid 7141] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7140] munmap(0x7f943d000000, 138412032 [pid 7143] <... symlink resumed>) = 0 [pid 7141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7143] memfd_create("syzkaller", 0 [pid 7141] truncate("./file1", 0 [pid 7140] <... munmap resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7143] <... memfd_create resumed>) = 3 [pid 7140] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] close(3 [pid 7140] close(4 [pid 5074] <... close resumed>) = 0 [pid 7140] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7142] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7141] <... truncate resumed>) = 0 [pid 7143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7142] <... write resumed>) = 524288 [pid 7141] memfd_create("syzkaller", 0 [pid 5072] close(3 [pid 7141] <... memfd_create resumed>) = 4 [pid 7141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7144 [pid 7141] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... close resumed>) = 0 ./strace-static-x86_64: Process 7144 attached [pid 7140] exit_group(0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7144] set_robust_list(0x555583d53660, 24 [pid 7140] <... exit_group resumed>) = ? [pid 7140] +++ exited with 0 +++ [pid 7144] <... set_robust_list resumed>) = 0 [pid 7141] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7140, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7144] chdir("./342" [pid 7141] <... write resumed>) = 524288 [pid 7144] <... chdir resumed>) = 0 [pid 7142] munmap(0x7f943d000000, 138412032) = 0 [pid 7144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7144] setpgid(0, 0 [pid 7142] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7144] <... setpgid resumed>) = 0 [pid 7142] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7142] close(4 [pid 7144] <... openat resumed>) = 3 [pid 5073] umount2("./342", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7145 ./strace-static-x86_64: Process 7145 attached [pid 7144] write(3, "1000", 4 [pid 7145] set_robust_list(0x555583d53660, 24 [pid 7144] <... write resumed>) = 4 [pid 7145] <... set_robust_list resumed>) = 0 [pid 7144] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7145] chdir("./342" [pid 7144] <... close resumed>) = 0 [pid 7145] <... chdir resumed>) = 0 [pid 7145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7144] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... openat resumed>) = 3 [pid 7145] <... prctl resumed>) = 0 [pid 7144] <... symlink resumed>) = 0 [pid 7145] setpgid(0, 0 [pid 7144] memfd_create("syzkaller", 0 [pid 5073] newfstatat(3, "", [pid 7145] <... setpgid resumed>) = 0 [pid 7141] munmap(0x7f943d000000, 138412032 [pid 7145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7144] <... memfd_create resumed>) = 3 [pid 7143] <... write resumed>) = 524288 [pid 7142] <... close resumed>) = 0 [pid 7141] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7145] <... openat resumed>) = 3 [pid 7144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(3, [pid 7145] write(3, "1000", 4 [pid 7144] <... mmap resumed>) = 0x7f943d000000 [pid 7142] exit_group(0 [pid 7145] <... write resumed>) = 4 [pid 7144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7142] <... exit_group resumed>) = ? [pid 7141] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7145] close(3 [pid 7143] munmap(0x7f943d000000, 138412032 [pid 7142] +++ exited with 0 +++ [pid 7141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7145] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7142, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7141] close(4 [pid 7145] memfd_create("syzkaller", 0 [pid 7143] <... munmap resumed>) = 0 [pid 7141] <... close resumed>) = 0 [pid 5073] umount2("./342/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7145] <... memfd_create resumed>) = 3 [pid 7144] <... write resumed>) = 524288 [pid 7143] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./342", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./342/binderfs", [pid 7143] <... openat resumed>) = 4 [pid 7145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7143] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7145] <... mmap resumed>) = 0x7f943d000000 [pid 5071] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./342/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./342/binderfs", [pid 7141] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./342/binderfs" [pid 5071] unlink("./342/binderfs") = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5071] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7141] <... exit_group resumed>) = ? [pid 7144] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7144] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7143] <... ioctl resumed>) = 0 [pid 5073] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7144] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7144] ioctl(4, LOOP_SET_FD, 3 [pid 7143] close(3 [pid 7141] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./342/file1", [pid 5073] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./342/file1", [pid 5071] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./342/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 4 [pid 7145] <... write resumed>) = 524288 [pid 7143] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7141, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(4, "", [pid 7143] close(4 [pid 5073] openat(AT_FDCWD, "./342/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7143] <... close resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5071] getdents64(4, [pid 7143] mkdir("./file1", 0777 [pid 5073] newfstatat(4, "", [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7145] munmap(0x7f943d000000, 138412032 [pid 7144] <... ioctl resumed>) = 0 [pid 5075] umount2("./340", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5071] close(4 [pid 7145] <... munmap resumed>) = 0 [pid 7143] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./342/file1" [pid 7145] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 7145] <... openat resumed>) = 4 [pid 5075] newfstatat(3, "", [ 258.012408][ T7143] loop5: detected capacity change from 0 to 1024 [ 258.033989][ T7144] loop3: detected capacity change from 0 to 1024 [pid 5073] getdents64(4, [pid 5071] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5073] close(4 [pid 7145] ioctl(4, LOOP_SET_FD, 3 [pid 7144] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./342/file1" [pid 5071] close(3 [pid 7144] <... close resumed>) = 0 [pid 7143] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5071] rmdir("./342" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7144] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... rmdir resumed>) = 0 [pid 7144] <... close resumed>) = 0 [pid 5075] umount2("./340/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] mkdir("./343", 0777 [pid 7144] mkdir("./file1", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7144] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./340/binderfs", [pid 5073] close(3 [pid 5071] <... mkdir resumed>) = 0 [pid 7144] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./342" [pid 5075] unlink("./340/binderfs" [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 7144] <... mount resumed>) = 0 [pid 7143] <... mount resumed>) = 0 [pid 5073] mkdir("./343", 0777 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7145] <... ioctl resumed>) = 0 [pid 7144] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7144] chdir("./file1" [pid 7145] close(3 [pid 7144] <... chdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 7145] <... close resumed>) = 0 [pid 7144] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7143] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7145] close(4 [pid 7144] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7143] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 7145] <... close resumed>) = 0 [pid 7144] truncate("./file1", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7145] mkdir("./file1", 0777 [pid 7143] chdir("./file1" [pid 5075] <... umount2 resumed>) = 0 [pid 7145] <... mkdir resumed>) = 0 [pid 7143] <... chdir resumed>) = 0 [pid 7143] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7145] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7143] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7144] <... truncate resumed>) = 0 [pid 7144] memfd_create("syzkaller", 0 [pid 7143] truncate("./file1", 0 [pid 5075] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7144] <... memfd_create resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(AT_FDCWD, "./340/file1", [pid 7144] <... mmap resumed>) = 0x7f943d000000 [ 258.071346][ T7145] loop1: detected capacity change from 0 to 1024 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7144] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7145] <... mount resumed>) = 0 [pid 7143] <... truncate resumed>) = 0 [pid 5075] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7145] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7143] memfd_create("syzkaller", 0 [pid 5075] openat(AT_FDCWD, "./340/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7143] <... memfd_create resumed>) = 4 [pid 7145] <... openat resumed>) = 3 [pid 7143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 5071] close(3 [pid 5075] newfstatat(4, "", [pid 7145] chdir("./file1" [pid 7143] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(4, [pid 7145] <... chdir resumed>) = 0 [pid 7145] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7145] truncate("./file1", 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, ./strace-static-x86_64: Process 7146 attached [pid 7143] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7146] set_robust_list(0x555583d53660, 24 [pid 5075] close(4 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7146 [pid 7146] <... set_robust_list resumed>) = 0 [pid 7145] <... truncate resumed>) = 0 [pid 7143] <... write resumed>) = 524288 [pid 5075] <... close resumed>) = 0 [pid 7146] chdir("./343" [pid 7145] memfd_create("syzkaller", 0 [pid 7144] <... write resumed>) = 524288 [pid 5075] rmdir("./340/file1" [pid 7144] munmap(0x7f943d000000, 138412032) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7146] <... chdir resumed>) = 0 [pid 7145] <... memfd_create resumed>) = 4 [pid 5075] getdents64(3, [pid 7145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7144] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7145] <... mmap resumed>) = 0x7f943d000000 [pid 7146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] close(3 [pid 7144] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... ioctl resumed>) = 0 [pid 7144] close(4 [pid 7145] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7146] <... prctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7144] <... close resumed>) = 0 ./strace-static-x86_64: Process 7147 attached [pid 7146] setpgid(0, 0 [pid 7143] munmap(0x7f943d000000, 138412032 [pid 5075] rmdir("./340" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7147 [pid 7147] set_robust_list(0x555583d53660, 24 [pid 7145] <... write resumed>) = 524288 [pid 7144] exit_group(0 [pid 7147] <... set_robust_list resumed>) = 0 [pid 7144] <... exit_group resumed>) = ? [pid 7147] chdir("./343" [pid 7146] <... setpgid resumed>) = 0 [pid 7145] munmap(0x7f943d000000, 138412032 [pid 7143] <... munmap resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7147] <... chdir resumed>) = 0 [pid 7146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7145] <... munmap resumed>) = 0 [pid 7144] +++ exited with 0 +++ [pid 7143] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] mkdir("./341", 0777 [pid 7146] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7144, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7146] write(3, "1000", 4 [pid 5075] <... mkdir resumed>) = 0 [pid 7143] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7146] <... write resumed>) = 4 [pid 7143] close(4 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] umount2("./342", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7147] <... prctl resumed>) = 0 [pid 7146] close(3 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7146] <... close resumed>) = 0 [pid 7147] setpgid(0, 0 [pid 5074] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7147] <... setpgid resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] newfstatat(3, "", [pid 7145] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7146] symlink("/dev/binderfs", "./binderfs" [pid 7147] <... openat resumed>) = 3 [pid 7145] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7147] write(3, "1000", 4 [pid 7146] <... symlink resumed>) = 0 [pid 5074] getdents64(3, [pid 7147] <... write resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7147] close(3 [pid 7146] memfd_create("syzkaller", 0 [pid 5074] umount2("./342/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7147] <... close resumed>) = 0 [pid 7146] <... memfd_create resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./342/binderfs", [pid 7147] symlink("/dev/binderfs", "./binderfs" [pid 7146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7145] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7146] <... mmap resumed>) = 0x7f943d000000 [pid 7147] <... symlink resumed>) = 0 [pid 5074] unlink("./342/binderfs" [pid 7147] memfd_create("syzkaller", 0 [pid 7143] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7147] <... memfd_create resumed>) = 3 [pid 5074] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7143] exit_group(0) = ? [pid 7143] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 7146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7145] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7143, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] close(3 [pid 5074] <... umount2 resumed>) = 0 [pid 7145] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 5076] umount2("./337", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7145] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./342/file1", [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(3, "", [pid 5074] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7147] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7145] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5074] openat(AT_FDCWD, "./342/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7147] munmap(0x7f943d000000, 138412032 [pid 5074] <... openat resumed>) = 4 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7145, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7147] <... munmap resumed>) = 0 [pid 5076] umount2("./337/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] newfstatat(4, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, [pid 5076] unlink("./337/binderfs" [pid 7147] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 7147] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 7148 attached [pid 7147] <... ioctl resumed>) = 0 [pid 7146] <... write resumed>) = 524288 [pid 5076] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7148 [pid 5072] umount2("./342", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7148] set_robust_list(0x555583d53660, 24 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7148] <... set_robust_list resumed>) = 0 [pid 7146] munmap(0x7f943d000000, 138412032 [pid 5074] getdents64(4, [pid 5072] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7148] chdir("./341" [pid 7146] <... munmap resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 7148] <... chdir resumed>) = 0 [pid 7146] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] newfstatat(3, "", [pid 7148] <... prctl resumed>) = 0 [pid 5074] rmdir("./342/file1" [pid 7146] <... openat resumed>) = 4 [pid 7148] setpgid(0, 0 [pid 7146] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./337/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7147] close(3) = 0 [pid 7147] close(4) = 0 [pid 5076] umount2("./337/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7147] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7147] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./337/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7147] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./337/file1" [pid 7148] <... setpgid resumed>) = 0 [pid 7146] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] getdents64(3, [pid 7148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7148] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5072] umount2("./342/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7148] write(3, "1000", 4 [pid 7147] <... mount resumed>) = 0 [pid 5074] rmdir("./342" [pid 5072] newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7147] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 7147] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7147] chdir("./file1" [pid 5076] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] unlink("./342/binderfs" [pid 7148] <... write resumed>) = 4 [pid 7147] <... chdir resumed>) = 0 [pid 7146] close(3 [pid 5076] <... close resumed>) = 0 [pid 5074] mkdir("./343", 0777 [pid 7148] close(3 [pid 7146] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 7148] <... close resumed>) = 0 [pid 7146] close(4 [pid 7148] symlink("/dev/binderfs", "./binderfs" [pid 7146] <... close resumed>) = 0 [pid 5076] rmdir("./337" [pid 7148] <... symlink resumed>) = 0 [pid 7147] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7146] mkdir("./file1", 0777 [pid 7148] memfd_create("syzkaller", 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7148] <... memfd_create resumed>) = 3 [pid 7147] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7146] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7147] truncate("./file1", 0 [pid 7146] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] mkdir("./338", 0777 [pid 5074] <... openat resumed>) = 3 [pid 7148] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 7147] <... truncate resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7147] memfd_create("syzkaller", 0) = 4 [pid 7147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [ 258.315925][ T7147] loop2: detected capacity change from 0 to 1024 [ 258.346355][ T7146] loop0: detected capacity change from 0 to 1024 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./342/file1", [pid 7147] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./342/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./342/file1" [pid 7148] <... write resumed>) = 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./342" [pid 7148] munmap(0x7f943d000000, 138412032 [pid 5072] <... rmdir resumed>) = 0 [pid 7146] <... mount resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7148] <... munmap resumed>) = 0 [pid 7146] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] mkdir("./343", 0777 [pid 7146] <... openat resumed>) = 3 [pid 5072] <... mkdir resumed>) = 0 [pid 7146] chdir("./file1") = 0 [pid 7146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7148] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... openat resumed>) = 3 [pid 7148] <... openat resumed>) = 4 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7148] ioctl(4, LOOP_SET_FD, 3 [pid 7146] truncate("./file1", 0) = 0 [pid 7146] memfd_create("syzkaller", 0) = 4 [pid 7146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7146] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7147] <... write resumed>) = 524288 [pid 5074] close(3 [pid 7147] munmap(0x7f943d000000, 138412032 [pid 5074] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7147] <... munmap resumed>) = 0 [pid 7147] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] close(3 [pid 7147] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 7147] close(4 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7149 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7149 attached [pid 7149] set_robust_list(0x555583d53660, 24) = 0 [pid 7149] chdir("./343" [pid 7146] <... write resumed>) = 524288 [pid 7149] <... chdir resumed>) = 0 [pid 7149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7148] <... ioctl resumed>) = 0 [pid 7149] <... prctl resumed>) = 0 [pid 7148] close(3 [pid 7149] setpgid(0, 0 [pid 7148] <... close resumed>) = 0 [pid 7148] close(4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7150 [pid 7149] <... setpgid resumed>) = 0 [pid 7148] <... close resumed>) = 0 [pid 7149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7148] mkdir("./file1", 0777 [pid 5072] <... ioctl resumed>) = 0 [pid 7148] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7150 attached [pid 7149] <... openat resumed>) = 3 [pid 7148] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7150] set_robust_list(0x555583d53660, 24 [pid 7149] write(3, "1000", 4 [pid 7150] <... set_robust_list resumed>) = 0 [pid 7149] <... write resumed>) = 4 [pid 7150] chdir("./338" [pid 7149] close(3 [pid 7150] <... chdir resumed>) = 0 [pid 7149] <... close resumed>) = 0 [pid 7147] <... close resumed>) = 0 [pid 7150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7149] symlink("/dev/binderfs", "./binderfs" [pid 7150] <... prctl resumed>) = 0 [pid 7149] <... symlink resumed>) = 0 [pid 7150] setpgid(0, 0 [pid 7149] memfd_create("syzkaller", 0 [pid 7146] munmap(0x7f943d000000, 138412032 [pid 7150] <... setpgid resumed>) = 0 [pid 7149] <... memfd_create resumed>) = 3 [pid 7146] <... munmap resumed>) = 0 [pid 7150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7150] <... openat resumed>) = 3 [pid 7149] <... mmap resumed>) = 0x7f943d000000 [pid 7146] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7150] write(3, "1000", 4 [pid 5072] close(3 [pid 7150] <... write resumed>) = 4 [pid 7146] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... close resumed>) = 0 [ 258.437139][ T7148] loop4: detected capacity change from 0 to 1024 [pid 7150] close(3 [pid 7146] close(4 [pid 7150] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7150] symlink("/dev/binderfs", "./binderfs" [pid 7149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7150] <... symlink resumed>) = 0 [pid 7147] exit_group(0 [pid 7148] <... mount resumed>) = 0 [pid 7150] memfd_create("syzkaller", 0 [pid 7148] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7150] <... memfd_create resumed>) = 3 [pid 7148] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7151 attached [pid 7150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7148] chdir("./file1" [pid 7147] <... exit_group resumed>) = ? [pid 7146] <... close resumed>) = 0 [pid 7151] set_robust_list(0x555583d53660, 24 [pid 7150] <... mmap resumed>) = 0x7f943d000000 [pid 7149] <... write resumed>) = 524288 [pid 7148] <... chdir resumed>) = 0 [pid 7151] <... set_robust_list resumed>) = 0 [pid 7150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7147] +++ exited with 0 +++ [pid 7151] chdir("./343" [pid 7148] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7151 [pid 7148] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7147, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7151] <... chdir resumed>) = 0 [pid 7148] truncate("./file1", 0 [pid 7146] exit_group(0 [pid 7151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7151] setpgid(0, 0 [pid 5073] umount2("./343", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] <... setpgid resumed>) = 0 [pid 7146] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7148] <... truncate resumed>) = 0 [pid 7146] +++ exited with 0 +++ [pid 5073] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7151] <... openat resumed>) = 3 [pid 7149] munmap(0x7f943d000000, 138412032 [pid 7148] memfd_create("syzkaller", 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 7148] <... memfd_create resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7146, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] getdents64(3, [pid 5071] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./343/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7148] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] write(3, "1000", 4 [pid 7149] <... munmap resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./343/binderfs", [pid 5071] umount2("./343", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] <... write resumed>) = 4 [pid 7148] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] close(3 [pid 5073] unlink("./343/binderfs" [pid 7151] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7151] symlink("/dev/binderfs", "./binderfs" [pid 7150] <... write resumed>) = 524288 [pid 7149] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7151] <... symlink resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7149] <... openat resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 7151] memfd_create("syzkaller", 0 [pid 7149] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7151] <... memfd_create resumed>) = 3 [pid 5073] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7150] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] umount2("./343/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] <... mmap resumed>) = 0x7f943d000000 [pid 7150] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7150] ioctl(4, LOOP_SET_FD, 3 [pid 5071] newfstatat(AT_FDCWD, "./343/binderfs", [pid 7151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./343/binderfs") = 0 [pid 5071] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7148] <... write resumed>) = 524288 [pid 7149] <... ioctl resumed>) = 0 [pid 7148] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = 0 [pid 7148] <... munmap resumed>) = 0 [pid 5073] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./343/file1", [pid 7149] close(3 [pid 7148] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7148] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./343/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7149] <... close resumed>) = 0 [pid 7149] close(4) = 0 [pid 7148] close(4 [pid 5073] <... openat resumed>) = 4 [pid 7149] mkdir("./file1", 0777 [pid 7150] <... ioctl resumed>) = 0 [pid 7149] <... mkdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5071] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 258.562544][ T7149] loop3: detected capacity change from 0 to 1024 [ 258.579635][ T7150] loop5: detected capacity change from 0 to 1024 [pid 7150] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] <... write resumed>) = 524288 [pid 7150] <... close resumed>) = 0 [pid 7149] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./343/file1", [pid 7150] close(4 [pid 7148] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 7150] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7150] mkdir("./file1", 0777 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7150] <... mkdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5071] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7150] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7148] exit_group(0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] munmap(0x7f943d000000, 138412032 [pid 7148] <... exit_group resumed>) = ? [pid 5073] close(4 [pid 5071] openat(AT_FDCWD, "./343/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5073] rmdir("./343/file1" [pid 5071] newfstatat(4, "", [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7151] <... munmap resumed>) = 0 [pid 7148] +++ exited with 0 +++ [pid 5071] getdents64(4, [pid 7151] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7149] <... mount resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7148, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7151] <... openat resumed>) = 4 [pid 7149] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] getdents64(4, [pid 7151] ioctl(4, LOOP_SET_FD, 3 [pid 7149] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7150] <... mount resumed>) = 0 [pid 5073] getdents64(3, [pid 7149] chdir("./file1") = 0 [pid 7149] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7149] truncate("./file1", 0 [pid 5075] umount2("./341", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./343/file1" [pid 5073] close(3 [pid 5075] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 7150] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 5071] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7150] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5073] rmdir("./343" [pid 5071] rmdir("./343" [pid 7150] chdir("./file1" [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7150] <... chdir resumed>) = 0 [pid 5075] umount2("./341/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] mkdir("./344", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./344", 0777 [pid 5071] <... mkdir resumed>) = 0 [pid 7150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7149] <... truncate resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./341/binderfs", [pid 5073] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7150] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7149] memfd_create("syzkaller", 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7150] truncate("./file1", 0 [pid 5071] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7149] <... memfd_create resumed>) = 4 [pid 5075] unlink("./341/binderfs" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7150] <... truncate resumed>) = 0 [pid 7149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7150] memfd_create("syzkaller", 0 [pid 7149] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... unlink resumed>) = 0 [pid 7151] <... ioctl resumed>) = 0 [pid 7150] <... memfd_create resumed>) = 4 [pid 7149] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7151] close(3 [pid 7150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5075] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7150] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7151] <... close resumed>) = 0 [pid 7151] close(4) = 0 [pid 7151] mkdir("./file1", 0777) = 0 [pid 7151] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [ 258.648843][ T7151] loop1: detected capacity change from 0 to 1024 [pid 5075] <... umount2 resumed>) = 0 [pid 7151] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7151] chdir("./file1" [pid 5075] newfstatat(AT_FDCWD, "./341/file1", [pid 7151] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7151] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7150] <... write resumed>) = 524288 [pid 5075] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7151] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./341/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 7151] truncate("./file1", 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 7149] <... write resumed>) = 524288 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./341/file1" [pid 7149] munmap(0x7f943d000000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [pid 7149] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 7151] <... truncate resumed>) = 0 [pid 7150] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7151] memfd_create("syzkaller", 0 [pid 5075] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7151] <... memfd_create resumed>) = 4 [pid 7149] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./341" [pid 7151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7149] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./342", 0777 [pid 7149] close(4 [pid 5075] <... mkdir resumed>) = 0 [pid 7149] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7150] <... munmap resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7151] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7150] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] close(3) = 0 [pid 7150] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7150] close(4 [pid 5071] close(3) = 0 [pid 7149] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7149] <... exit_group resumed>) = ? [pid 7150] <... close resumed>) = 0 ./strace-static-x86_64: Process 7153 attached [pid 7151] <... write resumed>) = 524288 [pid 7153] set_robust_list(0x555583d53660, 24) = 0 [pid 7153] chdir("./344") = 0 [pid 7149] +++ exited with 0 +++ [pid 7153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7153 [pid 7153] <... prctl resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7149, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7153] setpgid(0, 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7153] <... setpgid resumed>) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 7153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] umount2("./343", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7153] write(3, "1000", 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7153] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7153] close(3 [pid 7151] munmap(0x7f943d000000, 138412032 [pid 5074] <... openat resumed>) = 3 [pid 7153] <... close resumed>) = 0 [pid 7151] <... munmap resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 7153] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7153] memfd_create("syzkaller", 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7153] <... memfd_create resumed>) = 3 [pid 7151] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] umount2("./343/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7152 attached [pid 7153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7151] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7152 [pid 7153] <... mmap resumed>) = 0x7f943d000000 [pid 7151] close(4 [pid 5074] newfstatat(AT_FDCWD, "./343/binderfs", [pid 7152] set_robust_list(0x555583d53660, 24) = 0 [pid 7151] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7150] exit_group(0 [pid 7152] chdir("./344" [pid 7150] <... exit_group resumed>) = ? [pid 5074] unlink("./343/binderfs" [pid 7153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7150] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 7152] <... chdir resumed>) = 0 [pid 7152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7150, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./338", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7151] exit_group(0) = ? [pid 5076] newfstatat(3, "", [pid 7152] <... prctl resumed>) = 0 [pid 7152] setpgid(0, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7152] <... setpgid resumed>) = 0 [pid 7152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, [pid 5074] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7152] <... openat resumed>) = 3 [pid 7152] write(3, "1000", 4 [pid 7151] +++ exited with 0 +++ [pid 5074] newfstatat(AT_FDCWD, "./343/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "./343/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] umount2("./338/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7151, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7152] <... write resumed>) = 4 [pid 7153] <... write resumed>) = 524288 [pid 5074] newfstatat(4, "", [pid 5072] umount2("./343", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7152] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./338/binderfs", [pid 5074] getdents64(4, [pid 5072] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7152] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... openat resumed>) = 3 [pid 7152] symlink("/dev/binderfs", "./binderfs" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] unlink("./338/binderfs" [pid 5074] getdents64(4, [pid 5072] newfstatat(3, "", [pid 7152] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 7154 attached [pid 7152] memfd_create("syzkaller", 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7154] set_robust_list(0x555583d53660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7154 [pid 7152] <... memfd_create resumed>) = 3 [pid 7152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7154] <... set_robust_list resumed>) = 0 [pid 7153] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5072] getdents64(3, [pid 7154] chdir("./342" [pid 7152] <... mmap resumed>) = 0x7f943d000000 [pid 7153] <... munmap resumed>) = 0 [pid 7154] <... chdir resumed>) = 0 [pid 7153] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7153] <... openat resumed>) = 4 [pid 5074] rmdir("./343/file1" [pid 5072] umount2("./343/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7154] setpgid(0, 0) = 0 [pid 7154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7153] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7154] <... openat resumed>) = 3 [pid 7152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7154] write(3, "1000", 4) = 4 [pid 7154] close(3) = 0 [pid 7154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7154] memfd_create("syzkaller", 0) = 3 [pid 7154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./343/binderfs", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./338/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] unlink("./343/binderfs" [pid 5074] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5076] umount2("./338/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] rmdir("./343") = 0 [pid 5074] mkdir("./344", 0777) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./338/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7152] <... write resumed>) = 524288 [pid 7153] <... ioctl resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5072] <... umount2 resumed>) = 0 [pid 7152] munmap(0x7f943d000000, 138412032 [pid 7153] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7153] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7152] <... munmap resumed>) = 0 [pid 7153] close(4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7152] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7153] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./343/file1", [pid 7153] mkdir("./file1", 0777 [pid 5076] getdents64(4, [pid 7152] <... openat resumed>) = 4 [pid 7153] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7152] ioctl(4, LOOP_SET_FD, 3 [pid 7153] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] close(4 [pid 5072] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7154] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./343/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] rmdir("./338/file1" [pid 5072] newfstatat(4, "", [pid 5076] <... rmdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5072] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./338" [pid 5072] close(4) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] rmdir("./343/file1") = 0 [pid 7154] munmap(0x7f943d000000, 138412032 [pid 7153] <... mount resumed>) = 0 [pid 5076] mkdir("./339", 0777 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] rmdir("./343" [pid 7154] <... munmap resumed>) = 0 [pid 7153] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./344", 0777 [pid 7153] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5072] <... mkdir resumed>) = 0 [pid 7152] <... ioctl resumed>) = 0 [pid 7153] chdir("./file1" [pid 5074] <... ioctl resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7153] <... chdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7153] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7152] close(3 [pid 7153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7154] <... openat resumed>) = 4 [ 258.872370][ T7153] loop0: detected capacity change from 0 to 1024 [ 258.910335][ T7152] loop2: detected capacity change from 0 to 1024 [pid 7154] ioctl(4, LOOP_SET_FD, 3 [pid 7152] <... close resumed>) = 0 [pid 7153] truncate("./file1", 0 [pid 7152] close(4) = 0 [pid 7152] mkdir("./file1", 0777) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7152] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 7152] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7152] chdir("./file1") = 0 [pid 7152] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7152] truncate("./file1", 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7154] <... ioctl resumed>) = 0 [pid 7152] <... truncate resumed>) = 0 [pid 7154] close(3) = 0 [pid 7152] memfd_create("syzkaller", 0 [pid 7153] <... truncate resumed>) = 0 [pid 7154] close(4) = 0 [pid 7152] <... memfd_create resumed>) = 4 [pid 7153] memfd_create("syzkaller", 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7155 [pid 7154] mkdir("./file1", 0777 [pid 7153] <... memfd_create resumed>) = 4 ./strace-static-x86_64: Process 7155 attached [pid 7154] <... mkdir resumed>) = 0 [pid 7152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7155] set_robust_list(0x555583d53660, 24 [pid 7152] <... mmap resumed>) = 0x7f943d000000 [pid 7155] <... set_robust_list resumed>) = 0 [pid 7152] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7153] <... mmap resumed>) = 0x7f943d000000 [pid 7155] chdir("./344" [pid 7154] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7155] <... chdir resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7155] setpgid(0, 0) = 0 [pid 7155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7155] write(3, "1000", 4) = 4 [pid 7155] close(3 [pid 7152] <... write resumed>) = 524288 [pid 7155] <... close resumed>) = 0 [pid 7155] symlink("/dev/binderfs", "./binderfs") = 0 [ 258.942201][ T7154] loop4: detected capacity change from 0 to 1024 [pid 7155] memfd_create("syzkaller", 0) = 3 [pid 7155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] close(3 [pid 7155] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... close resumed>) = 0 [pid 7155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7153] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7156 [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 7156 attached [pid 7152] munmap(0x7f943d000000, 138412032 [pid 7156] set_robust_list(0x555583d53660, 24 [pid 7152] <... munmap resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7156] <... set_robust_list resumed>) = 0 [pid 7152] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 7157 attached [pid 7156] chdir("./344" [pid 7154] <... mount resumed>) = 0 [pid 7152] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7157 [pid 7157] set_robust_list(0x555583d53660, 24) = 0 [pid 7154] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7156] <... chdir resumed>) = 0 [pid 7157] chdir("./339" [pid 7156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7154] chdir("./file1" [pid 7152] close(4 [pid 7153] <... write resumed>) = 524288 [pid 7157] <... chdir resumed>) = 0 [pid 7156] <... prctl resumed>) = 0 [pid 7154] <... chdir resumed>) = 0 [pid 7156] setpgid(0, 0 [pid 7157] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7156] <... setpgid resumed>) = 0 [pid 7154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7153] munmap(0x7f943d000000, 138412032 [pid 7156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7154] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7157] <... prctl resumed>) = 0 [pid 7156] <... openat resumed>) = 3 [pid 7153] <... munmap resumed>) = 0 [pid 7156] write(3, "1000", 4 [pid 7157] setpgid(0, 0 [pid 7155] <... write resumed>) = 524288 [pid 7152] <... close resumed>) = 0 [pid 7153] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7154] truncate("./file1", 0 [pid 7157] <... setpgid resumed>) = 0 [pid 7152] exit_group(0) = ? [pid 7157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7156] <... write resumed>) = 4 [pid 7155] munmap(0x7f943d000000, 138412032 [pid 7154] <... truncate resumed>) = 0 [pid 7152] +++ exited with 0 +++ [pid 7153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7154] memfd_create("syzkaller", 0 [pid 7153] close(4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7152, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7154] <... memfd_create resumed>) = 4 [pid 7154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7156] close(3 [pid 7155] <... munmap resumed>) = 0 [pid 7154] <... mmap resumed>) = 0x7f943d000000 [pid 7157] <... openat resumed>) = 3 [pid 5073] umount2("./344", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7156] <... close resumed>) = 0 [pid 7155] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7156] symlink("/dev/binderfs", "./binderfs" [pid 7155] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7156] <... symlink resumed>) = 0 [pid 7155] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... openat resumed>) = 3 [pid 7157] write(3, "1000", 4 [pid 7156] memfd_create("syzkaller", 0 [pid 7154] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7153] <... close resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 7157] <... write resumed>) = 4 [pid 7156] <... memfd_create resumed>) = 3 [pid 7157] close(3 [pid 7156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7157] <... close resumed>) = 0 [pid 7156] <... mmap resumed>) = 0x7f943d000000 [pid 5073] getdents64(3, [pid 7157] symlink("/dev/binderfs", "./binderfs" [pid 7156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7157] <... symlink resumed>) = 0 [pid 7153] exit_group(0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7153] <... exit_group resumed>) = ? [pid 7157] memfd_create("syzkaller", 0 [pid 5073] umount2("./344/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7157] <... memfd_create resumed>) = 3 [pid 7154] <... write resumed>) = 524288 [pid 7153] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7153, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7155] <... ioctl resumed>) = 0 [pid 7155] close(3 [pid 5071] umount2("./344", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7155] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7155] close(4 [pid 5071] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7155] <... close resumed>) = 0 [pid 7157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7155] mkdir("./file1", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 7157] <... mmap resumed>) = 0x7f943d000000 [pid 7155] <... mkdir resumed>) = 0 [pid 7154] munmap(0x7f943d000000, 138412032 [pid 5073] newfstatat(AT_FDCWD, "./344/binderfs", [pid 5071] newfstatat(3, "", [pid 7155] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7154] <... munmap resumed>) = 0 [pid 5071] getdents64(3, [pid 7156] <... write resumed>) = 524288 [pid 7154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] unlink("./344/binderfs" [pid 7155] <... mount resumed>) = 0 [pid 7154] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7156] munmap(0x7f943d000000, 138412032 [pid 7155] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7154] close(4 [pid 5073] <... unlink resumed>) = 0 [pid 5071] umount2("./344/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7156] <... munmap resumed>) = 0 [pid 7155] <... openat resumed>) = 3 [pid 7155] chdir("./file1" [pid 5073] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7155] <... chdir resumed>) = 0 [ 259.068907][ T7155] loop3: detected capacity change from 0 to 1024 [pid 5071] newfstatat(AT_FDCWD, "./344/binderfs", [pid 7156] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7155] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7154] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7155] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = 0 [pid 7156] <... openat resumed>) = 4 [pid 7155] truncate("./file1", 0 [pid 5073] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] unlink("./344/binderfs" [pid 7157] <... write resumed>) = 524288 [pid 7156] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 7156] <... ioctl resumed>) = 0 [pid 7154] exit_group(0 [pid 5073] newfstatat(AT_FDCWD, "./344/file1", [pid 5071] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7157] munmap(0x7f943d000000, 138412032 [pid 7154] <... exit_group resumed>) = ? [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./344/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7157] <... munmap resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7157] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7154] +++ exited with 0 +++ [pid 5073] getdents64(4, [pid 7157] ioctl(4, LOOP_SET_FD, 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7154, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7155] <... truncate resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7155] memfd_create("syzkaller", 0 [pid 5075] umount2("./342", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 7155] <... memfd_create resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 7155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] rmdir("./344/file1" [pid 7155] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5075] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7156] close(3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7156] <... close resumed>) = 0 [pid 5073] close(3 [pid 7156] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 7156] <... close resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5073] rmdir("./344" [pid 7156] mkdir("./file1", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 7156] <... mkdir resumed>) = 0 [pid 7156] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] mkdir("./345", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7155] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7157] <... ioctl resumed>) = 0 [pid 5075] umount2("./342/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7157] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7157] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./342/binderfs", [pid 7157] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7157] <... close resumed>) = 0 [pid 5075] unlink("./342/binderfs" [ 259.144629][ T7156] loop1: detected capacity change from 0 to 1024 [ 259.162358][ T7157] loop5: detected capacity change from 0 to 1024 [pid 7157] mkdir("./file1", 0777) = 0 [pid 7155] <... write resumed>) = 524288 [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5075] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7157] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7155] munmap(0x7f943d000000, 138412032 [pid 5071] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7156] <... mount resumed>) = 0 [pid 7155] <... munmap resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./344/file1", [pid 7156] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7156] <... openat resumed>) = 3 [pid 7155] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7156] chdir("./file1" [pid 7155] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7156] <... chdir resumed>) = 0 [pid 7155] close(4 [pid 7156] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7156] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7157] <... mount resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./344/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7157] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] <... openat resumed>) = 4 [pid 7157] chdir("./file1" [pid 7156] truncate("./file1", 0 [pid 5071] newfstatat(4, "", [pid 7157] <... chdir resumed>) = 0 [pid 7155] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7157] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7156] <... truncate resumed>) = 0 [pid 5075] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 5071] getdents64(4, [pid 7157] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7156] memfd_create("syzkaller", 0 [pid 7157] truncate("./file1", 0 [pid 7156] <... memfd_create resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7158 attached [pid 7157] <... truncate resumed>) = 0 [pid 7156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7155] exit_group(0 [pid 5075] newfstatat(AT_FDCWD, "./342/file1", [pid 5071] getdents64(4, [pid 7156] <... mmap resumed>) = 0x7f943d000000 [pid 7155] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7158 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./342/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 7158] set_robust_list(0x555583d53660, 24 [pid 7157] memfd_create("syzkaller", 0 [pid 7155] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 4 [pid 5071] rmdir("./344/file1" [pid 7158] <... set_robust_list resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 7157] <... memfd_create resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7155, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] getdents64(4, [pid 5071] <... rmdir resumed>) = 0 [pid 7158] chdir("./345" [pid 7157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(3, [pid 7158] <... chdir resumed>) = 0 [pid 7157] <... mmap resumed>) = 0x7f943d000000 [pid 5075] getdents64(4, [pid 5074] umount2("./344", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7157] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7156] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7158] <... prctl resumed>) = 0 [pid 7158] setpgid(0, 0) = 0 [pid 5071] <... close resumed>) = 0 [pid 7158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./344" [pid 5074] <... openat resumed>) = 3 [pid 7158] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7156] <... write resumed>) = 524288 [pid 5074] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 7158] write(3, "1000", 4 [pid 5075] close(4 [pid 7158] <... write resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 7158] close(3 [pid 5075] rmdir("./342/file1" [pid 7158] <... close resumed>) = 0 [pid 7158] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./344/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7158] <... symlink resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7158] memfd_create("syzkaller", 0 [pid 5074] unlink("./344/binderfs" [pid 5071] mkdir("./345", 0777 [pid 5075] close(3 [pid 7158] <... memfd_create resumed>) = 3 [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7157] <... write resumed>) = 524288 [pid 7156] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 5074] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7158] <... mmap resumed>) = 0x7f943d000000 [pid 7157] munmap(0x7f943d000000, 138412032 [pid 5075] rmdir("./342" [pid 5074] <... umount2 resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7156] <... munmap resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7156] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] <... openat resumed>) = 3 [pid 7157] <... munmap resumed>) = 0 [pid 7156] close(4 [pid 7158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7157] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7156] <... close resumed>) = 0 [pid 5075] mkdir("./343", 0777 [pid 5074] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./344/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./344/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 7157] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7157] close(4 [pid 7156] exit_group(0 [pid 5075] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 7156] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7156] +++ exited with 0 +++ [pid 5074] close(4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7156, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./344/file1") = 0 [pid 5072] umount2("./344", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5074] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7157] <... close resumed>) = 0 [pid 5072] umount2("./344/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7157] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./344/binderfs", [pid 5074] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./344/binderfs" [pid 5074] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 7157] <... exit_group resumed>) = ? [pid 5072] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7157] +++ exited with 0 +++ [pid 5074] rmdir("./344" [pid 5072] <... umount2 resumed>) = 0 [pid 7158] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 7158] munmap(0x7f943d000000, 138412032 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7157, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5072] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... restart_syscall resumed>) = 0 [pid 7158] <... munmap resumed>) = 0 [pid 5074] mkdir("./345", 0777 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7158] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] newfstatat(AT_FDCWD, "./344/file1", [pid 7158] <... openat resumed>) = 4 [pid 5076] umount2("./339", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 7158] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./344/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7158] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7158] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] newfstatat(3, "", [pid 5072] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5072] close(4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./344/file1" [pid 5076] umount2("./339/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./339/binderfs" [pid 5072] getdents64(3, [pid 5076] <... unlink resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] close(3 [pid 5071] <... ioctl resumed>) = 0 [pid 7158] <... close resumed>) = 0 [pid 5076] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./344" [pid 7158] close(4) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7158] mkdir("./file1", 0777) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] mkdir("./345", 0777 [pid 5071] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7158] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... umount2 resumed>) = 0 [pid 5075] close(3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7159 attached [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7159 [pid 5076] newfstatat(AT_FDCWD, "./339/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./339/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7159] set_robust_list(0x555583d53660, 24) = 0 [pid 5076] openat(AT_FDCWD, "./339/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7159] chdir("./345" [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 7159] <... chdir resumed>) = 0 [pid 7158] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(3./strace-static-x86_64: Process 7160 attached [pid 7158] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] close(4 [pid 7158] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 7160] set_robust_list(0x555583d53660, 24 [pid 7159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7158] chdir("./file1" [pid 5076] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7160 [ 259.381712][ T7158] loop2: detected capacity change from 0 to 1024 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7160] <... set_robust_list resumed>) = 0 [pid 7159] <... prctl resumed>) = 0 [pid 7158] <... chdir resumed>) = 0 [pid 5076] rmdir("./339/file1" [pid 7160] chdir("./343" [pid 7159] setpgid(0, 0 [pid 7158] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 7159] <... setpgid resumed>) = 0 [pid 7158] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 7161 attached [pid 7160] <... chdir resumed>) = 0 [pid 7159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7158] truncate("./file1", 0 [pid 7161] set_robust_list(0x555583d53660, 24 [pid 5076] getdents64(3, [pid 7161] <... set_robust_list resumed>) = 0 [pid 7160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7159] <... openat resumed>) = 3 [pid 7158] <... truncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7161 [pid 7161] chdir("./345" [pid 7160] <... prctl resumed>) = 0 [pid 7158] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 7160] setpgid(0, 0 [pid 7158] <... memfd_create resumed>) = 4 [pid 7158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 7161] <... chdir resumed>) = 0 [pid 7160] <... setpgid resumed>) = 0 [pid 7159] write(3, "1000", 4 [pid 7158] <... mmap resumed>) = 0x7f943d000000 [pid 7159] <... write resumed>) = 4 [pid 7159] close(3 [pid 7161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7159] <... close resumed>) = 0 [pid 7158] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] rmdir("./339" [pid 7161] <... prctl resumed>) = 0 [pid 7161] setpgid(0, 0 [pid 7160] <... openat resumed>) = 3 [pid 7159] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 7161] <... setpgid resumed>) = 0 [pid 5076] mkdir("./340", 0777 [pid 7160] write(3, "1000", 4 [pid 7159] <... symlink resumed>) = 0 [pid 7160] <... write resumed>) = 4 [pid 7161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7160] close(3 [pid 7159] memfd_create("syzkaller", 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7161] <... openat resumed>) = 3 [pid 7160] <... close resumed>) = 0 [pid 7159] <... memfd_create resumed>) = 3 [pid 7160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... ioctl resumed>) = 0 [pid 7161] write(3, "1000", 4 [pid 7160] memfd_create("syzkaller", 0 [pid 7159] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 3 [pid 7161] <... write resumed>) = 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7161] close(3) = 0 [pid 7161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7161] memfd_create("syzkaller", 0) = 3 [pid 7161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7158] <... write resumed>) = 524288 [pid 7158] munmap(0x7f943d000000, 138412032 [pid 7161] <... write resumed>) = 524288 [pid 7160] <... memfd_create resumed>) = 3 [pid 7159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] close(3 [pid 7160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7158] <... munmap resumed>) = 0 [pid 7160] <... mmap resumed>) = 0x7f943d000000 [pid 7158] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] <... close resumed>) = 0 [pid 7161] munmap(0x7f943d000000, 138412032 [pid 7158] close(4 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7158] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7161] <... munmap resumed>) = 0 [pid 7161] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7162 [pid 7161] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7162 attached [pid 7161] ioctl(4, LOOP_SET_FD, 3 [pid 7159] <... write resumed>) = 524288 [pid 7162] set_robust_list(0x555583d53660, 24) = 0 [pid 7162] chdir("./345") = 0 [pid 7162] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7161] <... ioctl resumed>) = 0 [pid 7160] <... write resumed>) = 524288 [pid 7158] exit_group(0 [pid 7162] <... prctl resumed>) = 0 [pid 7158] <... exit_group resumed>) = ? [pid 5076] close(3 [pid 7162] setpgid(0, 0 [pid 7158] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 7159] munmap(0x7f943d000000, 138412032 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7158, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7162] <... setpgid resumed>) = 0 [pid 7162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7162] <... openat resumed>) = 3 [pid 7159] <... munmap resumed>) = 0 [pid 7162] write(3, "1000", 4 [pid 5073] umount2("./345", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7162] <... write resumed>) = 4 [pid 7159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7163 attached [pid 7162] close(3 [pid 7159] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7163 [pid 5073] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7163] set_robust_list(0x555583d53660, 24 [pid 7162] <... close resumed>) = 0 [pid 7159] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... openat resumed>) = 3 [pid 7163] <... set_robust_list resumed>) = 0 [pid 7162] symlink("/dev/binderfs", "./binderfs" [pid 7163] chdir("./340") = 0 [pid 7163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7163] setpgid(0, 0) = 0 [pid 7163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7161] close(3 [pid 5073] newfstatat(3, "", [pid 7163] <... openat resumed>) = 3 [pid 7162] <... symlink resumed>) = 0 [pid 7161] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7163] write(3, "1000", 4 [pid 7161] close(4 [pid 5073] getdents64(3, [pid 7163] <... write resumed>) = 4 [pid 7162] memfd_create("syzkaller", 0 [pid 7161] <... close resumed>) = 0 [pid 7160] munmap(0x7f943d000000, 138412032 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7162] <... memfd_create resumed>) = 3 [pid 7160] <... munmap resumed>) = 0 [pid 5073] umount2("./345/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7163] close(3 [pid 7162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7161] mkdir("./file1", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7163] <... close resumed>) = 0 [pid 7162] <... mmap resumed>) = 0x7f943d000000 [pid 7161] <... mkdir resumed>) = 0 [pid 7163] symlink("/dev/binderfs", "./binderfs" [ 259.546725][ T7161] loop3: detected capacity change from 0 to 1024 [ 259.569799][ T7159] loop0: detected capacity change from 0 to 1024 [pid 5073] newfstatat(AT_FDCWD, "./345/binderfs", [pid 7163] <... symlink resumed>) = 0 [pid 7162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7160] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7163] memfd_create("syzkaller", 0 [pid 7161] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7160] <... openat resumed>) = 4 [pid 7159] <... ioctl resumed>) = 0 [pid 5073] unlink("./345/binderfs" [pid 7160] ioctl(4, LOOP_SET_FD, 3 [pid 7159] close(3 [pid 7163] <... memfd_create resumed>) = 3 [pid 7159] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7159] close(4 [pid 7160] <... ioctl resumed>) = 0 [pid 7159] <... close resumed>) = 0 [pid 7159] mkdir("./file1", 0777) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7160] close(3 [pid 7159] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7160] <... close resumed>) = 0 [pid 7162] <... write resumed>) = 524288 [pid 7160] close(4 [pid 7162] munmap(0x7f943d000000, 138412032 [pid 7160] <... close resumed>) = 0 [pid 7160] mkdir("./file1", 0777 [pid 7159] <... mount resumed>) = 0 [pid 7160] <... mkdir resumed>) = 0 [pid 7159] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7162] <... munmap resumed>) = 0 [pid 7161] <... mount resumed>) = 0 [pid 7160] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7159] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7163] <... write resumed>) = 524288 [pid 7162] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7161] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7159] chdir("./file1") = 0 [pid 7159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7162] <... openat resumed>) = 4 [ 259.599750][ T7160] loop4: detected capacity change from 0 to 1024 [pid 7162] ioctl(4, LOOP_SET_FD, 3 [pid 7161] <... openat resumed>) = 3 [pid 7159] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] newfstatat(AT_FDCWD, "./345/file1", [pid 7161] chdir("./file1" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7161] <... chdir resumed>) = 0 [pid 5073] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7161] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7161] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7161] truncate("./file1", 0 [pid 5073] openat(AT_FDCWD, "./345/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7163] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 7161] <... truncate resumed>) = 0 [pid 7159] truncate("./file1", 0 [pid 7161] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7163] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7161] <... memfd_create resumed>) = 4 [pid 5073] close(4 [pid 7163] <... openat resumed>) = 4 [pid 7161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 7163] ioctl(4, LOOP_SET_FD, 3 [pid 7161] <... mmap resumed>) = 0x7f943d000000 [pid 7160] <... mount resumed>) = 0 [pid 7159] <... truncate resumed>) = 0 [pid 5073] rmdir("./345/file1" [pid 7160] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7159] memfd_create("syzkaller", 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7162] <... ioctl resumed>) = 0 [pid 7161] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7160] <... openat resumed>) = 3 [pid 7159] <... memfd_create resumed>) = 4 [pid 7162] close(3 [pid 7159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7162] <... close resumed>) = 0 [pid 7162] close(4 [pid 7159] <... mmap resumed>) = 0x7f943d000000 [pid 7160] chdir("./file1" [pid 7162] <... close resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./345" [pid 7162] mkdir("./file1", 0777 [pid 7160] <... chdir resumed>) = 0 [pid 7159] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./346", 0777 [pid 7162] <... mkdir resumed>) = 0 [pid 7160] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... mkdir resumed>) = 0 [pid 7162] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7160] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7160] truncate("./file1", 0 [pid 5073] <... openat resumed>) = 3 [pid 7162] <... mount resumed>) = 0 [pid 7160] <... truncate resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7160] memfd_create("syzkaller", 0) = 4 [pid 7162] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7162] chdir("./file1") = 0 [pid 7160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7162] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7160] <... mmap resumed>) = 0x7f943d000000 [pid 7163] <... ioctl resumed>) = 0 [pid 7162] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7163] close(3) = 0 [pid 7163] close(4) = 0 [pid 7163] mkdir("./file1", 0777) = 0 [pid 7161] <... write resumed>) = 524288 [pid 7163] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7162] truncate("./file1", 0 [pid 7161] munmap(0x7f943d000000, 138412032 [pid 7160] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7163] <... mount resumed>) = 0 [pid 7162] <... truncate resumed>) = 0 [ 259.657750][ T7162] loop1: detected capacity change from 0 to 1024 [ 259.680415][ T7163] loop5: detected capacity change from 0 to 1024 [pid 7163] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7162] memfd_create("syzkaller", 0 [pid 7163] <... openat resumed>) = 3 [pid 7161] <... munmap resumed>) = 0 [pid 7160] <... write resumed>) = 524288 [pid 7162] <... memfd_create resumed>) = 4 [pid 7161] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7163] chdir("./file1" [pid 7161] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7159] <... write resumed>) = 524288 [pid 7162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7159] munmap(0x7f943d000000, 138412032 [pid 7162] <... mmap resumed>) = 0x7f943d000000 [pid 7163] <... chdir resumed>) = 0 [pid 7161] close(4 [pid 7159] <... munmap resumed>) = 0 [pid 7163] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7161] <... close resumed>) = 0 [pid 7163] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7162] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7160] munmap(0x7f943d000000, 138412032 [pid 7159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... ioctl resumed>) = 0 [pid 7163] truncate("./file1", 0 [pid 7159] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7161] exit_group(0) = ? [pid 7163] <... truncate resumed>) = 0 [pid 7160] <... munmap resumed>) = 0 [pid 7159] close(4 [pid 7163] memfd_create("syzkaller", 0 [pid 7160] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] close(3 [pid 7163] <... memfd_create resumed>) = 4 [pid 7160] close(4 [pid 5073] <... close resumed>) = 0 [pid 7163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7162] <... write resumed>) = 524288 [pid 7161] +++ exited with 0 +++ [pid 7160] <... close resumed>) = 0 [pid 7159] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7163] <... mmap resumed>) = 0x7f943d000000 [pid 7162] munmap(0x7f943d000000, 138412032) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7161, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7162] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7159] exit_group(0 [pid 7162] close(4 [pid 5074] umount2("./345", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7159] <... exit_group resumed>) = ? [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7164 ./strace-static-x86_64: Process 7164 attached [pid 5074] newfstatat(3, "", [pid 7164] set_robust_list(0x555583d53660, 24 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7164] <... set_robust_list resumed>) = 0 [pid 5074] getdents64(3, [pid 7164] chdir("./346" [pid 7160] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7164] <... chdir resumed>) = 0 [pid 7160] <... exit_group resumed>) = ? [pid 5074] umount2("./345/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7164] <... prctl resumed>) = 0 [pid 7162] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./345/binderfs", [pid 7164] setpgid(0, 0 [pid 7163] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7162] exit_group(0 [pid 7160] +++ exited with 0 +++ [pid 7159] +++ exited with 0 +++ [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7160, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7159, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] umount2("./345", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] unlink("./345/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7164] <... setpgid resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 7164] <... openat resumed>) = 3 [pid 7162] <... exit_group resumed>) = ? [pid 5075] umount2("./343", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 7164] write(3, "1000", 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7164] <... write resumed>) = 4 [pid 5071] getdents64(3, [pid 7164] close(3 [pid 7162] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7164] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7162, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] umount2("./345/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7164] symlink("/dev/binderfs", "./binderfs" [pid 5075] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7164] <... symlink resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] umount2("./345", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./345/binderfs", [pid 7164] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] unlink("./345/binderfs" [pid 7164] <... memfd_create resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 5071] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] getdents64(3, [pid 7164] <... mmap resumed>) = 0x7f943d000000 [pid 5075] umount2("./343/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7163] <... write resumed>) = 524288 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7163] munmap(0x7f943d000000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 5072] umount2("./345/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7163] <... munmap resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./343/binderfs", [pid 5074] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./345/binderfs", [pid 7163] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] unlink("./343/binderfs" [pid 5074] newfstatat(AT_FDCWD, "./345/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5072] unlink("./345/binderfs" [pid 7163] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5074] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7163] close(4 [pid 5072] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./345/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 7163] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./345/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./345/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./345/file1" [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 5075] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7163] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(4, [pid 7163] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./343/file1", [pid 5074] close(3 [pid 5072] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7164] <... write resumed>) = 524288 [pid 5074] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./345" [pid 5072] newfstatat(AT_FDCWD, "./345/file1", [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7164] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] close(4 [pid 7164] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5072] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7163] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "./343/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] mkdir("./346", 0777 [pid 7164] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] rmdir("./345/file1" [pid 7164] <... openat resumed>) = 4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7163, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] openat(AT_FDCWD, "./345/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7164] ioctl(4, LOOP_SET_FD, 3 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... openat resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... restart_syscall resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 5071] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, [pid 5071] close(3 [pid 5076] umount2("./340", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5071] rmdir("./345" [pid 5076] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] newfstatat(3, "", [pid 5075] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] close(4 [pid 5076] getdents64(3, [pid 5075] getdents64(4, [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] mkdir("./346", 0777 [pid 5076] umount2("./340/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5072] rmdir("./345/file1" [pid 5071] <... mkdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./340/binderfs", [pid 5075] rmdir("./343/file1") = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 5071] <... openat resumed>) = 3 [pid 5075] close(3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 5072] close(3 [pid 5075] rmdir("./343" [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./345" [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] mkdir("./344", 0777 [pid 5076] unlink("./340/binderfs" [pid 5075] <... mkdir resumed>) = 0 [pid 5072] mkdir("./346", 0777 [pid 7164] <... ioctl resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 7164] close(3 [pid 5075] <... openat resumed>) = 3 [pid 7164] <... close resumed>) = 0 [pid 5076] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7164] close(4) = 0 [pid 7164] mkdir("./file1", 0777) = 0 [pid 7164] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./340/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 259.888776][ T7164] loop2: detected capacity change from 0 to 1024 [pid 5076] umount2("./340/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./340/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./340/file1" [pid 5071] <... ioctl resumed>) = 0 [pid 7164] <... mount resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7164] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7164] chdir("./file1") = 0 [pid 7164] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] close(3 [pid 7164] truncate("./file1", 0 [pid 5076] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3) = 0 [pid 5076] rmdir("./340") = 0 [pid 5076] mkdir("./341", 0777) = 0 ./strace-static-x86_64: Process 7165 attached [pid 5075] close(3 [pid 5074] close(3 [pid 5072] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7165 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7164] <... truncate resumed>) = 0 [pid 7164] memfd_create("syzkaller", 0) = 4 ./strace-static-x86_64: Process 7166 attached [pid 7165] set_robust_list(0x555583d53660, 24 [pid 7164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7164] <... mmap resumed>) = 0x7f943d000000 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7165] <... set_robust_list resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7166] set_robust_list(0x555583d53660, 24 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7166] <... set_robust_list resumed>) = 0 [pid 7165] chdir("./346" [pid 5076] <... openat resumed>) = 3 [pid 7166] chdir("./346" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7166] <... chdir resumed>) = 0 [pid 7165] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 7167 attached [pid 7166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7165] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7166 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7167 [pid 7167] set_robust_list(0x555583d53660, 24 [pid 7166] <... prctl resumed>) = 0 [pid 7165] <... prctl resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7168 ./strace-static-x86_64: Process 7168 attached [pid 7167] <... set_robust_list resumed>) = 0 [pid 7166] setpgid(0, 0 [pid 7168] set_robust_list(0x555583d53660, 24 [pid 7167] chdir("./346" [pid 7166] <... setpgid resumed>) = 0 [pid 7165] setpgid(0, 0 [pid 7168] <... set_robust_list resumed>) = 0 [pid 7167] <... chdir resumed>) = 0 [pid 7166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7165] <... setpgid resumed>) = 0 [pid 7164] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7168] chdir("./344" [pid 7167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7166] <... openat resumed>) = 3 [pid 7167] <... prctl resumed>) = 0 [pid 7165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7167] setpgid(0, 0 [pid 7166] write(3, "1000", 4 [pid 7168] <... chdir resumed>) = 0 [pid 7166] <... write resumed>) = 4 [pid 7165] <... openat resumed>) = 3 [pid 7167] <... setpgid resumed>) = 0 [pid 7168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7166] close(3) = 0 [pid 7167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7168] <... prctl resumed>) = 0 [pid 7167] <... openat resumed>) = 3 [pid 7166] memfd_create("syzkaller", 0 [pid 7165] write(3, "1000", 4 [pid 7168] setpgid(0, 0 [pid 7165] <... write resumed>) = 4 [pid 5076] <... ioctl resumed>) = 0 [pid 7168] <... setpgid resumed>) = 0 [pid 7166] <... memfd_create resumed>) = 3 [pid 7168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7164] <... write resumed>) = 524288 [pid 7167] write(3, "1000", 4 [pid 7166] <... mmap resumed>) = 0x7f943d000000 [pid 7166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7167] <... write resumed>) = 4 [pid 7165] close(3 [pid 7168] <... openat resumed>) = 3 [pid 7167] close(3 [pid 7165] <... close resumed>) = 0 [pid 7167] <... close resumed>) = 0 [pid 7165] symlink("/dev/binderfs", "./binderfs" [pid 7167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7164] munmap(0x7f943d000000, 138412032 [pid 7165] <... symlink resumed>) = 0 [pid 7164] <... munmap resumed>) = 0 [pid 7168] write(3, "1000", 4 [pid 7167] memfd_create("syzkaller", 0 [pid 7165] memfd_create("syzkaller", 0 [pid 7164] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] close(3 [pid 7168] <... write resumed>) = 4 [pid 7167] <... memfd_create resumed>) = 3 [pid 7165] <... memfd_create resumed>) = 3 [pid 7164] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 7167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7168] close(3 [pid 7167] <... mmap resumed>) = 0x7f943d000000 [pid 7165] <... mmap resumed>) = 0x7f943d000000 [pid 7164] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7168] <... close resumed>) = 0 [pid 7167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7164] <... close resumed>) = 0 [pid 7168] symlink("/dev/binderfs", "./binderfs" [pid 7166] <... write resumed>) = 524288 [pid 7168] <... symlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7169 [pid 7168] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7169 attached ) = 3 [pid 7169] set_robust_list(0x555583d53660, 24 [pid 7168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7169] <... set_robust_list resumed>) = 0 [pid 7168] <... mmap resumed>) = 0x7f943d000000 [pid 7169] chdir("./341" [pid 7168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7169] <... chdir resumed>) = 0 [pid 7166] munmap(0x7f943d000000, 138412032 [pid 7164] exit_group(0 [pid 7169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7166] <... munmap resumed>) = 0 [pid 7164] <... exit_group resumed>) = ? [pid 7169] <... prctl resumed>) = 0 [pid 7165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7164] +++ exited with 0 +++ [pid 7169] setpgid(0, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7164, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7169] <... setpgid resumed>) = 0 [pid 7166] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7166] <... openat resumed>) = 4 [pid 7169] <... openat resumed>) = 3 [pid 7166] ioctl(4, LOOP_SET_FD, 3 [pid 7165] <... write resumed>) = 524288 [pid 7169] write(3, "1000", 4 [pid 7168] <... write resumed>) = 524288 [pid 7169] <... write resumed>) = 4 [pid 7169] close(3) = 0 [pid 5073] umount2("./346", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7169] symlink("/dev/binderfs", "./binderfs" [pid 7167] <... write resumed>) = 524288 [pid 7165] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7167] munmap(0x7f943d000000, 138412032 [pid 7169] <... symlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7169] memfd_create("syzkaller", 0 [pid 7165] <... munmap resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7169] <... memfd_create resumed>) = 3 [pid 7167] <... munmap resumed>) = 0 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7167] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] getdents64(3, [pid 7169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7167] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7169] <... mmap resumed>) = 0x7f943d000000 [pid 7167] ioctl(4, LOOP_SET_FD, 3 [pid 7165] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7165] <... openat resumed>) = 4 [pid 5073] umount2("./346/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./346/binderfs" [pid 7168] munmap(0x7f943d000000, 138412032 [pid 7166] <... ioctl resumed>) = 0 [pid 7165] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... unlink resumed>) = 0 [pid 7168] <... munmap resumed>) = 0 [pid 7167] <... ioctl resumed>) = 0 [pid 7166] close(3 [pid 5073] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7167] close(3 [pid 5073] <... umount2 resumed>) = 0 [pid 7167] <... close resumed>) = 0 [pid 7165] <... ioctl resumed>) = 0 [pid 7167] close(4 [pid 7165] close(3 [pid 7169] <... write resumed>) = 524288 [pid 7168] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7167] <... close resumed>) = 0 [pid 7166] <... close resumed>) = 0 [pid 7165] <... close resumed>) = 0 [pid 5073] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7169] munmap(0x7f943d000000, 138412032 [pid 7168] <... openat resumed>) = 4 [pid 7167] mkdir("./file1", 0777 [pid 7166] close(4 [pid 7165] close(4 [pid 7169] <... munmap resumed>) = 0 [pid 7168] ioctl(4, LOOP_SET_FD, 3 [pid 7166] <... close resumed>) = 0 [pid 7165] <... close resumed>) = 0 [ 260.107612][ T7166] loop3: detected capacity change from 0 to 1024 [ 260.138033][ T7167] loop1: detected capacity change from 0 to 1024 [ 260.147115][ T7165] loop0: detected capacity change from 0 to 1024 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7168] <... ioctl resumed>) = 0 [pid 7167] <... mkdir resumed>) = 0 [pid 7166] mkdir("./file1", 0777 [pid 7165] mkdir("./file1", 0777) = 0 [pid 7169] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7165] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] newfstatat(AT_FDCWD, "./346/file1", [pid 7169] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7169] ioctl(4, LOOP_SET_FD, 3 [pid 7165] <... mount resumed>) = 0 [pid 7167] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7166] <... mkdir resumed>) = 0 [pid 7165] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7165] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7165] chdir("./file1" [pid 5073] openat(AT_FDCWD, "./346/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7165] <... chdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 7166] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7165] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] newfstatat(4, "", [pid 7165] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7165] truncate("./file1", 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./346/file1") = 0 [pid 5073] getdents64(3, [pid 7168] close(3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7169] <... ioctl resumed>) = 0 [pid 7168] <... close resumed>) = 0 [pid 5073] close(3 [pid 7169] close(3 [pid 7168] close(4 [pid 5073] <... close resumed>) = 0 [pid 7169] <... close resumed>) = 0 [pid 7168] <... close resumed>) = 0 [pid 5073] rmdir("./346" [pid 7169] close(4 [pid 7168] mkdir("./file1", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 7169] <... close resumed>) = 0 [pid 7168] <... mkdir resumed>) = 0 [pid 7167] <... mount resumed>) = 0 [pid 5073] mkdir("./347", 0777 [pid 7169] mkdir("./file1", 0777 [pid 7167] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... mkdir resumed>) = 0 [pid 7169] <... mkdir resumed>) = 0 [pid 7168] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7166] <... mount resumed>) = 0 [pid 7169] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... openat resumed>) = 3 [pid 7167] <... openat resumed>) = 3 [pid 7166] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7165] <... truncate resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7167] chdir("./file1" [pid 7166] <... openat resumed>) = 3 [ 260.166436][ T7168] loop4: detected capacity change from 0 to 1024 [ 260.179280][ T7169] loop5: detected capacity change from 0 to 1024 [pid 7165] memfd_create("syzkaller", 0 [pid 7167] <... chdir resumed>) = 0 [pid 7166] chdir("./file1" [pid 7165] <... memfd_create resumed>) = 4 [pid 7167] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7166] <... chdir resumed>) = 0 [pid 7165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7166] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7167] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7169] <... mount resumed>) = 0 [pid 7167] truncate("./file1", 0 [pid 7166] truncate("./file1", 0 [pid 7169] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7169] chdir("./file1") = 0 [pid 7169] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7169] truncate("./file1", 0 [pid 7168] <... mount resumed>) = 0 [pid 7168] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7165] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7168] <... openat resumed>) = 3 [pid 7166] <... truncate resumed>) = 0 [pid 7166] memfd_create("syzkaller", 0 [pid 7168] chdir("./file1" [pid 7167] <... truncate resumed>) = 0 [pid 7168] <... chdir resumed>) = 0 [pid 7168] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7167] memfd_create("syzkaller", 0 [pid 7168] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7167] <... memfd_create resumed>) = 4 [pid 7166] <... memfd_create resumed>) = 4 [pid 7169] <... truncate resumed>) = 0 [pid 7168] truncate("./file1", 0 [pid 7167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7169] memfd_create("syzkaller", 0 [pid 7167] <... mmap resumed>) = 0x7f943d000000 [pid 7166] <... mmap resumed>) = 0x7f943d000000 [pid 7169] <... memfd_create resumed>) = 4 [pid 7169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7168] <... truncate resumed>) = 0 [pid 7168] memfd_create("syzkaller", 0) = 4 [pid 7168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7168] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7166] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7165] <... write resumed>) = 524288 [pid 7167] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7169] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7165] munmap(0x7f943d000000, 138412032 [pid 7167] <... write resumed>) = 524288 [pid 7165] <... munmap resumed>) = 0 [pid 7165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7165] close(4 [pid 7166] <... write resumed>) = 524288 [pid 7166] munmap(0x7f943d000000, 138412032 [pid 7168] <... write resumed>) = 524288 [pid 7167] munmap(0x7f943d000000, 138412032 [pid 7166] <... munmap resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7169] munmap(0x7f943d000000, 138412032 [pid 7167] <... munmap resumed>) = 0 [pid 7166] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7165] <... close resumed>) = 0 [pid 7167] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7166] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7167] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(3 [pid 7166] close(4 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7169] <... munmap resumed>) = 0 [pid 7166] <... close resumed>) = 0 [pid 7169] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7168] munmap(0x7f943d000000, 138412032 [pid 7169] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7168] <... munmap resumed>) = 0 [pid 7165] exit_group(0 [pid 7167] close(4 [pid 7165] <... exit_group resumed>) = ? [pid 7169] close(4 [pid 7168] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7170 [pid 7168] close(4./strace-static-x86_64: Process 7170 attached [pid 7169] <... close resumed>) = 0 [pid 7168] <... close resumed>) = 0 [pid 7167] <... close resumed>) = 0 [pid 7166] exit_group(0 [pid 7165] +++ exited with 0 +++ [pid 7170] set_robust_list(0x555583d53660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7165, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7170] <... set_robust_list resumed>) = 0 [pid 7170] chdir("./347") = 0 [pid 7170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7170] setpgid(0, 0 [pid 7169] exit_group(0 [pid 5071] umount2("./346", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7170] <... setpgid resumed>) = 0 [pid 7169] <... exit_group resumed>) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7169] +++ exited with 0 +++ [pid 7166] <... exit_group resumed>) = ? [pid 5071] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7169, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] <... openat resumed>) = 3 [pid 7170] <... openat resumed>) = 3 [pid 7166] +++ exited with 0 +++ [pid 5071] newfstatat(3, "", [pid 7170] write(3, "1000", 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7166, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7170] <... write resumed>) = 4 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7170] close(3 [pid 7167] exit_group(0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5071] getdents64(3, [pid 7170] <... close resumed>) = 0 [pid 7168] exit_group(0 [pid 7167] <... exit_group resumed>) = ? [pid 7170] symlink("/dev/binderfs", "./binderfs" [pid 7168] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7170] <... symlink resumed>) = 0 [pid 7168] +++ exited with 0 +++ [pid 7167] +++ exited with 0 +++ [pid 5076] umount2("./341", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./346", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./346/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7170] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7168, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7167, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7170] <... memfd_create resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... openat resumed>) = 3 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5072] <... restart_syscall resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./346/binderfs", [pid 7170] <... mmap resumed>) = 0x7f943d000000 [pid 5076] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./344", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./346", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] unlink("./346/binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./346/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5075] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... unlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5072] <... openat resumed>) = 3 [pid 5071] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./341/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(3, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] unlink("./346/binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./341/binderfs", [pid 5075] getdents64(3, [pid 5072] getdents64(3, [pid 7170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] unlink("./341/binderfs" [pid 5075] umount2("./344/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./346/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./344/binderfs", [pid 5072] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./344/binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5072] unlink("./346/binderfs") = 0 [pid 5075] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./346/file1", [pid 7170] <... write resumed>) = 524288 [pid 5076] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7170] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./341/file1", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7170] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7170] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./341/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./346/file1", [pid 7170] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "./341/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7170] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(4, "", [pid 5071] openat(AT_FDCWD, "./346/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./346/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 5071] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] newfstatat(AT_FDCWD, "./346/file1", [pid 5074] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(4 [pid 5075] newfstatat(AT_FDCWD, "./344/file1", [pid 5074] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./346/file1" [pid 5072] openat(AT_FDCWD, "./346/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "./344/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 5072] newfstatat(4, "", [pid 5071] getdents64(4, [pid 5076] close(4 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] close(3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7170] <... ioctl resumed>) = 0 [pid 5076] rmdir("./341/file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5071] getdents64(4, [pid 7170] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7170] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7170] close(4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./346" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 5076] close(3 [pid 5075] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 [pid 5072] close(4 [pid 5071] <... close resumed>) = 0 [pid 7170] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5071] rmdir("./346/file1" [pid 7170] mkdir("./file1", 0777 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] mkdir("./347", 0777 [pid 5072] <... close resumed>) = 0 [pid 7170] <... mkdir resumed>) = 0 [pid 5076] rmdir("./341" [pid 5075] close(4 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7170] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... close resumed>) = 0 [pid 5072] rmdir("./346/file1" [pid 5076] <... rmdir resumed>) = 0 [pid 5075] rmdir("./344/file1" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5076] mkdir("./342", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 5075] close(3 [pid 5072] close(3 [pid 5071] rmdir("./346" [pid 5075] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./346" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] rmdir("./344" [pid 7170] <... mount resumed>) = 0 [pid 5076] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] mkdir("./347", 0777 [pid 5071] mkdir("./347", 0777 [pid 7170] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 7170] <... openat resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [ 260.417615][ T7170] loop2: detected capacity change from 0 to 1024 [pid 7170] chdir("./file1"./strace-static-x86_64: Process 7171 attached ) = 0 [pid 5075] mkdir("./345", 0777 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7171] set_robust_list(0x555583d53660, 24 [pid 7170] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7171 [pid 5071] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7170] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7171] <... set_robust_list resumed>) = 0 [pid 7170] truncate("./file1", 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7171] chdir("./342" [pid 7170] <... truncate resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7170] memfd_create("syzkaller", 0 [pid 7171] <... chdir resumed>) = 0 [pid 7171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7170] <... memfd_create resumed>) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7171] <... prctl resumed>) = 0 [pid 7170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7170] <... mmap resumed>) = 0x7f943d000000 [pid 7171] setpgid(0, 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7171] <... setpgid resumed>) = 0 [pid 7170] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 7171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7170] <... write resumed>) = 524288 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 7172 ./strace-static-x86_64: Process 7172 attached [pid 7172] set_robust_list(0x555583d53660, 24) = 0 [pid 7172] chdir("./347") = 0 [pid 7172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7171] write(3, "1000", 4 [pid 7172] <... prctl resumed>) = 0 [pid 7171] <... write resumed>) = 4 [pid 7172] setpgid(0, 0 [pid 7171] close(3 [pid 7170] munmap(0x7f943d000000, 138412032 [pid 7172] <... setpgid resumed>) = 0 [pid 7172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7171] <... close resumed>) = 0 [pid 7172] write(3, "1000", 4 [pid 7171] symlink("/dev/binderfs", "./binderfs" [pid 7170] <... munmap resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7172] <... write resumed>) = 4 [pid 7171] <... symlink resumed>) = 0 [pid 7170] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7172] close(3) = 0 [pid 7171] memfd_create("syzkaller", 0 [pid 7170] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7172] symlink("/dev/binderfs", "./binderfs" [pid 7171] <... memfd_create resumed>) = 3 [pid 7170] close(4 [pid 7171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7172] <... symlink resumed>) = 0 [pid 7171] <... mmap resumed>) = 0x7f943d000000 [pid 7170] <... close resumed>) = 0 [pid 7172] memfd_create("syzkaller", 0) = 3 [pid 5072] close(3 [pid 7172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... close resumed>) = 0 [pid 7172] <... mmap resumed>) = 0x7f943d000000 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7173 attached [pid 7173] set_robust_list(0x555583d53660, 24 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7173 [pid 7173] <... set_robust_list resumed>) = 0 [pid 7173] chdir("./347" [pid 7172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7170] exit_group(0 [pid 5075] close(3 [pid 5071] close(3 [pid 7173] <... chdir resumed>) = 0 [pid 7173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7173] <... prctl resumed>) = 0 [pid 7170] <... exit_group resumed>) = ? [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7173] setpgid(0, 0) = 0 [pid 7173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7173] write(3, "1000", 4) = 4 [pid 7173] close(3 [pid 7170] +++ exited with 0 +++ [pid 7173] <... close resumed>) = 0 [pid 7173] symlink("/dev/binderfs", "./binderfs" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7170, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7173] <... symlink resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7175 [pid 5073] umount2("./347", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7174 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 7171] <... write resumed>) = 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, ./strace-static-x86_64: Process 7174 attached [pid 7173] memfd_create("syzkaller", 0 [pid 7172] munmap(0x7f943d000000, 138412032./strace-static-x86_64: Process 7175 attached [pid 7174] set_robust_list(0x555583d53660, 24 [pid 7172] <... munmap resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7175] set_robust_list(0x555583d53660, 24 [pid 7174] <... set_robust_list resumed>) = 0 [pid 7173] <... memfd_create resumed>) = 3 [pid 7172] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] umount2("./347/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7175] <... set_robust_list resumed>) = 0 [pid 7174] chdir("./347" [pid 7173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7172] <... openat resumed>) = 4 [pid 7171] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7175] chdir("./345" [pid 7174] <... chdir resumed>) = 0 [pid 7173] <... mmap resumed>) = 0x7f943d000000 [pid 7172] ioctl(4, LOOP_SET_FD, 3 [pid 5073] newfstatat(AT_FDCWD, "./347/binderfs", [pid 7175] <... chdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7171] <... munmap resumed>) = 0 [pid 7175] <... prctl resumed>) = 0 [pid 5073] unlink("./347/binderfs") = 0 [pid 7175] setpgid(0, 0) = 0 [pid 7174] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7171] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7174] <... prctl resumed>) = 0 [pid 7173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7171] <... openat resumed>) = 4 [pid 7175] <... openat resumed>) = 3 [pid 7174] setpgid(0, 0 [pid 7171] ioctl(4, LOOP_SET_FD, 3 [pid 7174] <... setpgid resumed>) = 0 [pid 7174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7174] write(3, "1000", 4) = 4 [pid 7174] close(3) = 0 [pid 7174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7174] memfd_create("syzkaller", 0 [pid 7175] write(3, "1000", 4 [pid 7174] <... memfd_create resumed>) = 3 [pid 5073] <... umount2 resumed>) = 0 [pid 7175] <... write resumed>) = 4 [pid 7174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7175] close(3 [pid 7174] <... mmap resumed>) = 0x7f943d000000 [pid 7175] <... close resumed>) = 0 [pid 7172] <... ioctl resumed>) = 0 [pid 7171] <... ioctl resumed>) = 0 [pid 5073] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7175] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7175] <... symlink resumed>) = 0 [pid 7174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7173] <... write resumed>) = 524288 [pid 7172] close(3 [pid 7171] close(3 [pid 5073] newfstatat(AT_FDCWD, "./347/file1", [pid 7175] memfd_create("syzkaller", 0 [pid 7173] munmap(0x7f943d000000, 138412032 [pid 7172] <... close resumed>) = 0 [pid 7171] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7175] <... memfd_create resumed>) = 3 [pid 7172] close(4 [pid 7171] close(4 [pid 5073] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7172] <... close resumed>) = 0 [pid 7171] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7175] <... mmap resumed>) = 0x7f943d000000 [pid 7172] mkdir("./file1", 0777 [pid 7171] mkdir("./file1", 0777 [pid 5073] openat(AT_FDCWD, "./347/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7173] <... munmap resumed>) = 0 [pid 7172] <... mkdir resumed>) = 0 [pid 7171] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [ 260.628432][ T7172] loop3: detected capacity change from 0 to 1024 [ 260.644775][ T7171] loop5: detected capacity change from 0 to 1024 [pid 7175] <... write resumed>) = 524288 [pid 7174] <... write resumed>) = 524288 [pid 7173] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7172] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] getdents64(4, [pid 7171] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7173] <... openat resumed>) = 4 [pid 7173] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./347/file1") = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./347") = 0 [pid 5073] mkdir("./348", 0777 [pid 7174] munmap(0x7f943d000000, 138412032 [pid 7171] <... mount resumed>) = 0 [pid 7171] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7174] <... munmap resumed>) = 0 [pid 7171] <... openat resumed>) = 3 [pid 7174] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7171] chdir("./file1" [pid 7174] <... openat resumed>) = 4 [pid 7171] <... chdir resumed>) = 0 [pid 7171] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7174] ioctl(4, LOOP_SET_FD, 3 [pid 7173] <... ioctl resumed>) = 0 [pid 7172] <... mount resumed>) = 0 [pid 7171] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7172] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7171] truncate("./file1", 0 [pid 5073] <... mkdir resumed>) = 0 [pid 7172] <... openat resumed>) = 3 [pid 7172] chdir("./file1") = 0 [pid 7172] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7175] munmap(0x7f943d000000, 138412032 [pid 7172] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7175] <... munmap resumed>) = 0 [pid 7173] close(3 [pid 7172] truncate("./file1", 0 [pid 7173] <... close resumed>) = 0 [pid 7173] close(4) = 0 [pid 7171] <... truncate resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7173] mkdir("./file1", 0777 [pid 7171] memfd_create("syzkaller", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7171] <... memfd_create resumed>) = 4 [pid 7175] <... openat resumed>) = 4 [pid 7174] <... ioctl resumed>) = 0 [pid 7173] <... mkdir resumed>) = 0 [pid 7171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7175] ioctl(4, LOOP_SET_FD, 3 [pid 7174] close(3 [pid 7173] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7172] <... truncate resumed>) = 0 [pid 7171] <... mmap resumed>) = 0x7f943d000000 [pid 7174] <... close resumed>) = 0 [pid 7172] memfd_create("syzkaller", 0 [pid 7171] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7174] close(4) = 0 [pid 7172] <... memfd_create resumed>) = 4 [pid 7172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7174] mkdir("./file1", 0777 [pid 7172] <... mmap resumed>) = 0x7f943d000000 [pid 7174] <... mkdir resumed>) = 0 [pid 7172] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7174] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7173] <... mount resumed>) = 0 [pid 7171] <... write resumed>) = 524288 [pid 7175] <... ioctl resumed>) = 0 [pid 7175] close(3) = 0 [pid 7175] close(4) = 0 [pid 7173] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7175] mkdir("./file1", 0777) = 0 [pid 7173] <... openat resumed>) = 3 [pid 7173] chdir("./file1") = 0 [ 260.696133][ T7173] loop1: detected capacity change from 0 to 1024 [ 260.714592][ T7174] loop0: detected capacity change from 0 to 1024 [ 260.730235][ T7175] loop4: detected capacity change from 0 to 1024 [pid 7175] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7174] <... mount resumed>) = 0 [pid 7173] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7172] <... write resumed>) = 524288 [pid 7174] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7173] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7174] chdir("./file1" [pid 7173] truncate("./file1", 0 [pid 7174] <... chdir resumed>) = 0 [pid 7171] munmap(0x7f943d000000, 138412032 [pid 7174] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7173] <... truncate resumed>) = 0 [pid 7171] <... munmap resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7171] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7171] close(4) = 0 [pid 7175] <... mount resumed>) = 0 [pid 7174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7173] memfd_create("syzkaller", 0 [pid 7172] munmap(0x7f943d000000, 138412032 [pid 5073] close(3 [pid 7175] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7174] truncate("./file1", 0 [pid 7173] <... memfd_create resumed>) = 4 [pid 7175] <... openat resumed>) = 3 [pid 7173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7175] chdir("./file1" [pid 7173] <... mmap resumed>) = 0x7f943d000000 [pid 7172] <... munmap resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7175] <... chdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7175] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7171] exit_group(0 [pid 7175] truncate("./file1", 0 [pid 7172] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7171] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7176 attached [pid 7174] <... truncate resumed>) = 0 [pid 7172] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7171] +++ exited with 0 +++ [pid 7176] set_robust_list(0x555583d53660, 24 [pid 7174] memfd_create("syzkaller", 0 [pid 7173] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7172] close(4 [pid 7175] <... truncate resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7171, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7176 [pid 7176] <... set_robust_list resumed>) = 0 [pid 7175] memfd_create("syzkaller", 0 [pid 7174] <... memfd_create resumed>) = 4 [pid 7173] <... write resumed>) = 524288 [pid 7172] <... close resumed>) = 0 [pid 7176] chdir("./348" [pid 7175] <... memfd_create resumed>) = 4 [pid 7174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./342", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7176] <... chdir resumed>) = 0 [pid 7175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7176] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7175] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7176] <... prctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 7176] setpgid(0, 0 [pid 7174] <... mmap resumed>) = 0x7f943d000000 [pid 7176] <... setpgid resumed>) = 0 [pid 7174] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7176] <... openat resumed>) = 3 [pid 5076] umount2("./342/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7175] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./342/binderfs") = 0 [pid 7173] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7173] <... munmap resumed>) = 0 [pid 7172] exit_group(0 [pid 7176] write(3, "1000", 4 [pid 7172] <... exit_group resumed>) = ? [pid 7176] <... write resumed>) = 4 [pid 7176] close(3) = 0 [pid 7173] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7176] symlink("/dev/binderfs", "./binderfs" [pid 7175] <... write resumed>) = 524288 [pid 7173] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = 0 [pid 7173] close(4 [pid 7176] <... symlink resumed>) = 0 [pid 7173] <... close resumed>) = 0 [pid 7172] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7172, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] umount2("./347", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7176] memfd_create("syzkaller", 0 [pid 7175] munmap(0x7f943d000000, 138412032 [pid 7174] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7176] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] newfstatat(3, "", [pid 7176] <... mmap resumed>) = 0x7f943d000000 [pid 7175] <... munmap resumed>) = 0 [pid 5076] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./342/file1", [pid 5074] getdents64(3, [pid 7175] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7175] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7174] munmap(0x7f943d000000, 138412032 [pid 7173] exit_group(0 [pid 5076] umount2("./342/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./347/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7175] close(4 [pid 7174] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./342/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./347/binderfs", [pid 5076] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7174] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7173] <... exit_group resumed>) = ? [pid 5076] newfstatat(4, "", [pid 5074] unlink("./347/binderfs" [pid 7176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7175] <... close resumed>) = 0 [pid 7174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7173] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7174] close(4 [pid 5076] getdents64(4, [pid 5074] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7174] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7173, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7175] exit_group(0 [pid 5076] close(4 [pid 5072] umount2("./347", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./342/file1" [pid 5072] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7175] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5072] newfstatat(3, "", [pid 7176] <... write resumed>) = 524288 [pid 7175] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(3 [pid 5072] getdents64(3, [pid 7174] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7174] <... exit_group resumed>) = ? [pid 5076] rmdir("./342" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7175, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] umount2("./347/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7176] munmap(0x7f943d000000, 138412032 [pid 7174] +++ exited with 0 +++ [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./345", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7176] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./347/binderfs", [pid 5075] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(AT_FDCWD, "./347/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7176] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] mkdir("./343", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./347/binderfs" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7174, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7176] <... openat resumed>) = 4 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5074] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... unlink resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7176] ioctl(4, LOOP_SET_FD, 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] openat(AT_FDCWD, "./347/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... restart_syscall resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 4 [pid 7176] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7176] close(3 [pid 5075] umount2("./345/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] newfstatat(4, "", [pid 5071] umount2("./347", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7176] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7176] close(4 [pid 5075] newfstatat(AT_FDCWD, "./345/binderfs", [pid 5074] getdents64(4, [pid 5071] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7176] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7176] mkdir("./file1", 0777) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7176] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] unlink("./345/binderfs" [pid 5071] getdents64(3, [pid 5072] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./347/file1", [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4) = 0 [pid 5072] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] rmdir("./347/file1" [pid 5071] umount2("./347/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./347/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./347/binderfs", [pid 7176] <... mount resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./347/binderfs" [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7176] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] getdents64(4, [pid 5074] getdents64(3, [pid 5071] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7176] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7176] chdir("./file1" [pid 5074] close(3 [pid 7176] <... chdir resumed>) = 0 [pid 5075] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7176] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./347" [pid 5072] close(4 [pid 5075] newfstatat(AT_FDCWD, "./345/file1", [pid 5072] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] rmdir("./347/file1" [pid 7176] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... rmdir resumed>) = 0 [pid 7176] truncate("./file1", 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] mkdir("./348", 0777 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./347" [pid 5071] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5071] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./345/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./347/file1", [pid 5074] <... mkdir resumed>) = 0 [ 260.945788][ T7176] loop2: detected capacity change from 0 to 1024 [pid 5075] newfstatat(4, "", [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] mkdir("./348", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./347/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7176] <... truncate resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] getdents64(4, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] close(3 [pid 5075] close(4 [pid 5071] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] rmdir("./345/file1" [pid 5071] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7176] memfd_create("syzkaller", 0 [pid 5071] rmdir("./347/file1" [pid 7176] <... memfd_create resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 7176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7177 attached [pid 5075] getdents64(3, [pid 7177] set_robust_list(0x555583d53660, 24 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7177] <... set_robust_list resumed>) = 0 [pid 7176] <... mmap resumed>) = 0x7f943d000000 [pid 5075] close(3 [pid 5071] getdents64(3, [pid 7177] chdir("./343" [pid 5075] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7177] <... chdir resumed>) = 0 [pid 5075] rmdir("./345" [pid 5071] close(3 [pid 7177] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7177] <... prctl resumed>) = 0 [pid 7176] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7177 [pid 7177] setpgid(0, 0 [pid 5071] rmdir("./347" [pid 7177] <... setpgid resumed>) = 0 [pid 7177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 5075] mkdir("./346", 0777) = 0 [pid 7177] <... openat resumed>) = 3 [pid 5071] mkdir("./348", 0777) = 0 [pid 7177] write(3, "1000", 4 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7177] <... write resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7177] close(3 [pid 5071] <... openat resumed>) = 3 [pid 7177] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7177] memfd_create("syzkaller", 0) = 3 [pid 7177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7176] <... write resumed>) = 524288 [pid 5072] <... ioctl resumed>) = 0 [pid 7177] <... mmap resumed>) = 0x7f943d000000 [pid 7177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7176] munmap(0x7f943d000000, 138412032 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] close(3 [pid 7177] <... write resumed>) = 524288 [pid 7176] <... munmap resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7176] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] close(3 [pid 5071] close(3 [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7176] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7177] munmap(0x7f943d000000, 138412032) = 0 [pid 7176] close(4./strace-static-x86_64: Process 7178 attached [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7178 [pid 7178] set_robust_list(0x555583d53660, 24 [pid 5072] <... close resumed>) = 0 [pid 7177] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7178] <... set_robust_list resumed>) = 0 [pid 7177] <... openat resumed>) = 4 [pid 7178] chdir("./348" [pid 7177] ioctl(4, LOOP_SET_FD, 3 [pid 7176] <... close resumed>) = 0 ./strace-static-x86_64: Process 7179 attached [pid 7178] <... chdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7179 [pid 7179] set_robust_list(0x555583d53660, 24 [pid 7178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7180 [pid 7178] setpgid(0, 0) = 0 [pid 7178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7179] <... set_robust_list resumed>) = 0 [pid 7179] chdir("./346" [pid 7176] exit_group(0 [pid 5074] close(3 [pid 7179] <... chdir resumed>) = 0 [pid 7176] <... exit_group resumed>) = ? [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 7180 attached [pid 7178] <... openat resumed>) = 3 [pid 7180] set_robust_list(0x555583d53660, 24 [pid 7179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7178] write(3, "1000", 4 [pid 7176] +++ exited with 0 +++ [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7176, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7180] <... set_robust_list resumed>) = 0 [pid 7178] <... write resumed>) = 4 [pid 7180] chdir("./348" [pid 7178] close(3./strace-static-x86_64: Process 7181 attached [pid 7179] <... prctl resumed>) = 0 [pid 7178] <... close resumed>) = 0 [pid 7179] setpgid(0, 0 [pid 7178] symlink("/dev/binderfs", "./binderfs" [pid 7181] set_robust_list(0x555583d53660, 24 [pid 7179] <... setpgid resumed>) = 0 [pid 7178] <... symlink resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7181 [pid 5073] umount2("./348", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7181] <... set_robust_list resumed>) = 0 [pid 7180] <... chdir resumed>) = 0 [pid 7179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7178] memfd_create("syzkaller", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7180] <... prctl resumed>) = 0 [pid 7180] setpgid(0, 0 [pid 7179] <... openat resumed>) = 3 [pid 7178] <... memfd_create resumed>) = 3 [pid 7177] <... ioctl resumed>) = 0 [pid 7181] chdir("./348" [pid 5073] <... openat resumed>) = 3 [pid 7181] <... chdir resumed>) = 0 [pid 7180] <... setpgid resumed>) = 0 [pid 7178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7177] close(3 [pid 7181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7179] write(3, "1000", 4 [pid 7178] <... mmap resumed>) = 0x7f943d000000 [pid 7177] <... close resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 7181] <... prctl resumed>) = 0 [pid 7180] <... openat resumed>) = 3 [pid 7179] <... write resumed>) = 4 [pid 7178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7177] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7181] setpgid(0, 0 [pid 7180] write(3, "1000", 4 [pid 7179] close(3 [pid 7177] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 7181] <... setpgid resumed>) = 0 [pid 7180] <... write resumed>) = 4 [pid 7179] <... close resumed>) = 0 [pid 7177] mkdir("./file1", 0777 [pid 7181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7180] close(3 [pid 7179] symlink("/dev/binderfs", "./binderfs" [pid 7177] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7181] <... openat resumed>) = 3 [pid 7180] <... close resumed>) = 0 [pid 7179] <... symlink resumed>) = 0 [pid 5073] umount2("./348/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7181] write(3, "1000", 4 [pid 7180] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7177] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7181] <... write resumed>) = 4 [ 261.113456][ T7177] loop5: detected capacity change from 0 to 1024 [pid 7180] memfd_create("syzkaller", 0 [pid 5073] newfstatat(AT_FDCWD, "./348/binderfs", [pid 7181] close(3) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7181] symlink("/dev/binderfs", "./binderfs" [pid 7180] <... memfd_create resumed>) = 3 [pid 7181] <... symlink resumed>) = 0 [pid 5073] unlink("./348/binderfs" [pid 7181] memfd_create("syzkaller", 0 [pid 5073] <... unlink resumed>) = 0 [pid 7181] <... memfd_create resumed>) = 3 [pid 7180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7180] <... mmap resumed>) = 0x7f943d000000 [pid 7179] memfd_create("syzkaller", 0 [pid 7178] <... write resumed>) = 524288 [pid 7181] <... mmap resumed>) = 0x7f943d000000 [pid 7181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7179] <... memfd_create resumed>) = 3 [pid 7180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7178] munmap(0x7f943d000000, 138412032 [pid 7180] <... write resumed>) = 524288 [pid 7179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7178] <... munmap resumed>) = 0 [pid 7177] <... mount resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7178] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7177] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7178] <... openat resumed>) = 4 [pid 7177] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7179] <... mmap resumed>) = 0x7f943d000000 [pid 7178] ioctl(4, LOOP_SET_FD, 3 [pid 7177] chdir("./file1" [pid 7181] <... write resumed>) = 524288 [pid 7179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(AT_FDCWD, "./348/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7177] <... chdir resumed>) = 0 [pid 5073] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7177] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7177] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./348/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7177] truncate("./file1", 0 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7177] <... truncate resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7180] munmap(0x7f943d000000, 138412032 [pid 7177] memfd_create("syzkaller", 0 [pid 5073] getdents64(4, [pid 7181] munmap(0x7f943d000000, 138412032 [pid 7180] <... munmap resumed>) = 0 [pid 7177] <... memfd_create resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] close(4 [pid 7180] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 7180] <... openat resumed>) = 4 [pid 7177] <... mmap resumed>) = 0x7f943d000000 [pid 5073] rmdir("./348/file1" [pid 7180] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... rmdir resumed>) = 0 [pid 7181] <... munmap resumed>) = 0 [pid 7180] <... ioctl resumed>) = 0 [pid 7179] <... write resumed>) = 524288 [pid 7178] <... ioctl resumed>) = 0 [pid 7177] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./348" [pid 7181] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 7181] <... openat resumed>) = 4 [pid 5073] mkdir("./349", 0777 [pid 7181] ioctl(4, LOOP_SET_FD, 3 [pid 7179] munmap(0x7f943d000000, 138412032 [pid 5073] <... mkdir resumed>) = 0 [pid 7179] <... munmap resumed>) = 0 [pid 7178] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7178] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7178] close(4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7178] <... close resumed>) = 0 [pid 7178] mkdir("./file1", 0777) = 0 [pid 7178] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7180] close(3 [pid 7181] <... ioctl resumed>) = 0 [pid 7179] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7177] <... write resumed>) = 524288 [pid 7179] <... openat resumed>) = 4 [pid 7181] close(3 [pid 7180] <... close resumed>) = 0 [ 261.211967][ T7178] loop0: detected capacity change from 0 to 1024 [ 261.235909][ T7180] loop1: detected capacity change from 0 to 1024 [ 261.251788][ T7181] loop3: detected capacity change from 0 to 1024 [pid 7179] ioctl(4, LOOP_SET_FD, 3 [pid 7181] <... close resumed>) = 0 [pid 7180] close(4 [pid 7177] munmap(0x7f943d000000, 138412032 [pid 7181] close(4 [pid 7180] <... close resumed>) = 0 [pid 7177] <... munmap resumed>) = 0 [pid 7181] <... close resumed>) = 0 [pid 7181] mkdir("./file1", 0777) = 0 [pid 7180] mkdir("./file1", 0777) = 0 [pid 7178] <... mount resumed>) = 0 [pid 7177] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7181] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7177] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... ioctl resumed>) = 0 [pid 7180] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7178] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7177] close(4 [pid 7179] <... ioctl resumed>) = 0 [pid 7178] <... openat resumed>) = 3 [pid 7177] <... close resumed>) = 0 [pid 7178] chdir("./file1") = 0 [pid 7178] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7179] close(3 [pid 7178] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7179] <... close resumed>) = 0 [pid 7178] truncate("./file1", 0 [pid 7179] close(4) = 0 [pid 7179] mkdir("./file1", 0777 [pid 5073] close(3 [pid 7181] <... mount resumed>) = 0 [pid 7179] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7179] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7178] <... truncate resumed>) = 0 [pid 7181] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7177] exit_group(0 [pid 7181] <... openat resumed>) = 3 [pid 7177] <... exit_group resumed>) = ? [pid 7181] chdir("./file1" [pid 7177] +++ exited with 0 +++ [pid 7181] <... chdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7182 [pid 7181] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 7182 attached [pid 7181] truncate("./file1", 0 [pid 7182] set_robust_list(0x555583d53660, 24 [pid 7178] memfd_create("syzkaller", 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7177, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7182] <... set_robust_list resumed>) = 0 [pid 7178] <... memfd_create resumed>) = 4 [pid 7182] chdir("./349" [pid 7178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7182] <... chdir resumed>) = 0 [pid 7178] <... mmap resumed>) = 0x7f943d000000 [ 261.270798][ T7179] loop4: detected capacity change from 0 to 1024 [pid 7182] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7182] setpgid(0, 0 [pid 5076] umount2("./343", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7180] <... mount resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7180] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7178] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 3 [pid 7180] <... openat resumed>) = 3 [pid 7179] <... mount resumed>) = 0 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7182] <... setpgid resumed>) = 0 [pid 7181] <... truncate resumed>) = 0 [pid 7180] chdir("./file1" [pid 7182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7181] memfd_create("syzkaller", 0) = 4 [pid 7180] <... chdir resumed>) = 0 [pid 7181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7180] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7181] <... mmap resumed>) = 0x7f943d000000 [pid 7180] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7179] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 7182] <... openat resumed>) = 3 [pid 7181] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7180] truncate("./file1", 0 [pid 7182] write(3, "1000", 4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7182] <... write resumed>) = 4 [pid 7179] <... openat resumed>) = 3 [pid 5076] umount2("./343/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] close(3 [pid 7180] <... truncate resumed>) = 0 [pid 7179] chdir("./file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7182] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./343/binderfs", [pid 7182] symlink("/dev/binderfs", "./binderfs" [pid 7180] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./343/binderfs" [pid 7182] <... symlink resumed>) = 0 [pid 7181] <... write resumed>) = 524288 [pid 7180] <... memfd_create resumed>) = 4 [pid 7179] <... chdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7182] memfd_create("syzkaller", 0 [pid 7180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7178] <... write resumed>) = 524288 [pid 5076] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7179] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7182] <... memfd_create resumed>) = 3 [pid 7180] <... mmap resumed>) = 0x7f943d000000 [pid 7179] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7180] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7179] truncate("./file1", 0 [pid 7182] <... mmap resumed>) = 0x7f943d000000 [pid 7178] munmap(0x7f943d000000, 138412032) = 0 [pid 7179] <... truncate resumed>) = 0 [pid 7179] memfd_create("syzkaller", 0) = 4 [pid 7179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7181] munmap(0x7f943d000000, 138412032 [pid 7178] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7181] <... munmap resumed>) = 0 [pid 7178] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = 0 [pid 7180] <... write resumed>) = 524288 [pid 7178] close(4 [pid 5076] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7181] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7179] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7178] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7181] close(4 [pid 5076] newfstatat(AT_FDCWD, "./343/file1", [pid 7181] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7180] munmap(0x7f943d000000, 138412032) = 0 [pid 5076] umount2("./343/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7180] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] openat(AT_FDCWD, "./343/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7180] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7178] exit_group(0 [pid 5076] <... openat resumed>) = 4 [pid 7178] <... exit_group resumed>) = ? [pid 7180] close(4 [pid 7182] <... write resumed>) = 524288 [pid 7180] <... close resumed>) = 0 [pid 7179] <... write resumed>) = 524288 [pid 5076] newfstatat(4, "", [pid 7182] munmap(0x7f943d000000, 138412032 [pid 7181] exit_group(0 [pid 7182] <... munmap resumed>) = 0 [pid 7181] <... exit_group resumed>) = ? [pid 7179] munmap(0x7f943d000000, 138412032 [pid 7178] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7181] +++ exited with 0 +++ [pid 7179] <... munmap resumed>) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7178, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7182] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7181, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] umount2("./348", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] <... openat resumed>) = 4 [pid 7179] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] getdents64(4, [pid 5074] umount2("./348", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7182] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7179] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] close(4 [pid 7179] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 7180] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 7180] <... exit_group resumed>) = ? [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7180] +++ exited with 0 +++ [pid 7179] <... close resumed>) = 0 [pid 5076] rmdir("./343/file1" [pid 5074] newfstatat(3, "", [pid 5071] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7180, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./348/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5076] getdents64(3, [pid 7179] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7182] close(3 [pid 7179] <... exit_group resumed>) = ? [pid 5076] close(3 [pid 5074] umount2("./348/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./348/binderfs", [pid 7182] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./348/binderfs", [pid 5071] unlink("./348/binderfs" [pid 5076] rmdir("./343" [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./348", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 7182] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] unlink("./348/binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./348/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./348/binderfs") = 0 [pid 7182] mkdir("./file1", 0777 [pid 7179] +++ exited with 0 +++ [pid 5076] mkdir("./344", 0777 [pid 5074] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 7182] <... mkdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7179, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./346", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(AT_FDCWD, "./348/file1", [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 261.456895][ T7182] loop2: detected capacity change from 0 to 1024 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./346/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./346/binderfs" [pid 5071] openat(AT_FDCWD, "./348/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5075] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7182] <... mount resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7182] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./346/file1", [pid 7182] chdir("./file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 7182] <... chdir resumed>) = 0 [pid 5075] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./346/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7182] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... openat resumed>) = 4 [pid 5071] rmdir("./348/file1" [pid 7182] truncate("./file1", 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] <... truncate resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] newfstatat(AT_FDCWD, "./348/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 7182] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(AT_FDCWD, "./348/file1", [pid 7182] <... memfd_create resumed>) = 4 [pid 5075] close(4 [pid 5074] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 7182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./346/file1" [pid 5072] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7182] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./348/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 5075] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./348/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(4, "", [pid 5075] close(3 [pid 5072] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] newfstatat(4, "", [pid 5075] rmdir("./346" [pid 5071] rmdir("./348" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./349", 0777 [pid 7182] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] getdents64(4, [pid 5071] <... mkdir resumed>) = 0 [pid 5072] getdents64(4, [pid 5076] <... ioctl resumed>) = 0 [pid 5075] mkdir("./347", 0777 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] close(4 [pid 5072] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... openat resumed>) = 3 [pid 5074] rmdir("./348/file1" [pid 5072] close(4) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] rmdir("./348/file1" [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7183 [pid 5072] getdents64(3, [pid 5074] close(3./strace-static-x86_64: Process 7183 attached [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7183] set_robust_list(0x555583d53660, 24 [pid 5074] <... close resumed>) = 0 [pid 5072] close(3) = 0 [pid 5074] rmdir("./348" [pid 7183] <... set_robust_list resumed>) = 0 [pid 5072] rmdir("./348" [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7183] chdir("./344" [pid 7182] <... write resumed>) = 524288 [pid 5074] mkdir("./349", 0777 [pid 5072] mkdir("./349", 0777 [pid 7183] <... chdir resumed>) = 0 [pid 7182] munmap(0x7f943d000000, 138412032 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7182] <... munmap resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7183] <... prctl resumed>) = 0 [pid 7183] setpgid(0, 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... openat resumed>) = 3 [pid 7183] <... setpgid resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7182] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7182] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7183] <... openat resumed>) = 3 [pid 7182] close(4 [pid 7183] write(3, "1000", 4 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7183] <... write resumed>) = 4 [pid 7182] <... close resumed>) = 0 [pid 5071] close(3 [pid 7183] close(3 [pid 5071] <... close resumed>) = 0 [pid 7183] <... close resumed>) = 0 [pid 7183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7183] memfd_create("syzkaller", 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7183] <... memfd_create resumed>) = 3 [pid 7183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7184 ./strace-static-x86_64: Process 7185 attached ./strace-static-x86_64: Process 7184 attached [pid 7182] exit_group(0 [pid 7183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7185 [pid 7185] set_robust_list(0x555583d53660, 24 [pid 7184] set_robust_list(0x555583d53660, 24 [pid 7183] <... write resumed>) = 524288 [pid 7185] <... set_robust_list resumed>) = 0 [pid 7184] <... set_robust_list resumed>) = 0 [pid 7182] <... exit_group resumed>) = ? [pid 7185] chdir("./347") = 0 [pid 7184] chdir("./349" [pid 7182] +++ exited with 0 +++ [pid 7184] <... chdir resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7182, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7185] setpgid(0, 0 [pid 7184] setpgid(0, 0 [pid 7185] <... setpgid resumed>) = 0 [pid 5073] umount2("./349", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7184] <... setpgid resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7183] munmap(0x7f943d000000, 138412032 [pid 7185] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 7183] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7184] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 7184] write(3, "1000", 4 [pid 7183] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7184] <... write resumed>) = 4 [pid 5072] close(3 [pid 7184] close(3 [pid 7185] write(3, "1000", 4 [pid 7184] <... close resumed>) = 0 [pid 7183] <... openat resumed>) = 4 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7185] <... write resumed>) = 4 [pid 7184] symlink("/dev/binderfs", "./binderfs" [pid 5074] close(3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7184] <... symlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7183] ioctl(4, LOOP_SET_FD, 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7185] close(3 [pid 7184] memfd_create("syzkaller", 0 [pid 5073] umount2("./349/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7186 attached [pid 7185] <... close resumed>) = 0 [pid 7184] <... memfd_create resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./349/binderfs", [pid 7185] symlink("/dev/binderfs", "./binderfs" [pid 7184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7184] <... mmap resumed>) = 0x7f943d000000 [pid 5073] unlink("./349/binderfs" [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7186 [pid 7185] <... symlink resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7187 [pid 5073] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7187 attached [pid 7186] set_robust_list(0x555583d53660, 24 [pid 7185] memfd_create("syzkaller", 0 [pid 7184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7187] set_robust_list(0x555583d53660, 24 [pid 7186] <... set_robust_list resumed>) = 0 [pid 7185] <... memfd_create resumed>) = 3 [pid 7185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7186] chdir("./349" [pid 7183] <... ioctl resumed>) = 0 [pid 7183] close(3 [pid 7185] <... mmap resumed>) = 0x7f943d000000 [pid 7187] <... set_robust_list resumed>) = 0 [pid 7187] chdir("./349") = 0 [pid 7186] <... chdir resumed>) = 0 [pid 7187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7187] <... prctl resumed>) = 0 [pid 7186] <... prctl resumed>) = 0 [pid 7187] setpgid(0, 0 [pid 7186] setpgid(0, 0) = 0 [pid 7187] <... setpgid resumed>) = 0 [pid 7186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... umount2 resumed>) = 0 [pid 7186] <... openat resumed>) = 3 [pid 7183] <... close resumed>) = 0 [pid 7183] close(4 [pid 7187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7183] <... close resumed>) = 0 [pid 7183] mkdir("./file1", 0777 [pid 5073] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7183] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(AT_FDCWD, "./349/file1", [pid 7187] <... openat resumed>) = 3 [pid 7186] write(3, "1000", 4 [pid 7183] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7187] write(3, "1000", 4 [pid 7186] <... write resumed>) = 4 [pid 7187] <... write resumed>) = 4 [pid 7186] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./349/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 261.663591][ T7183] loop5: detected capacity change from 0 to 1024 [pid 5073] newfstatat(4, "", [pid 7187] close(3 [pid 7186] <... close resumed>) = 0 [pid 7183] <... mount resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7183] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7186] symlink("/dev/binderfs", "./binderfs" [pid 5073] getdents64(4, [pid 7187] <... close resumed>) = 0 [pid 7183] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7183] chdir("./file1" [pid 5073] getdents64(4, [pid 7187] symlink("/dev/binderfs", "./binderfs" [pid 7186] <... symlink resumed>) = 0 [pid 7183] <... chdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7183] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] close(4 [pid 7187] <... symlink resumed>) = 0 [pid 7183] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... close resumed>) = 0 [pid 7186] memfd_create("syzkaller", 0 [pid 7183] truncate("./file1", 0 [pid 5073] rmdir("./349/file1" [pid 7187] memfd_create("syzkaller", 0 [pid 7186] <... memfd_create resumed>) = 3 [pid 7184] <... write resumed>) = 524288 [pid 7187] <... memfd_create resumed>) = 3 [pid 7186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7184] munmap(0x7f943d000000, 138412032 [pid 7186] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... rmdir resumed>) = 0 [pid 7187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7184] <... munmap resumed>) = 0 [pid 5073] getdents64(3, [pid 7187] <... mmap resumed>) = 0x7f943d000000 [pid 7183] <... truncate resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7183] memfd_create("syzkaller", 0 [pid 5073] close(3 [pid 7183] <... memfd_create resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 7183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] rmdir("./349" [pid 7183] <... mmap resumed>) = 0x7f943d000000 [pid 7187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./350", 0777 [pid 7184] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7185] <... write resumed>) = 524288 [pid 7184] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... mkdir resumed>) = 0 [pid 7186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7183] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7185] munmap(0x7f943d000000, 138412032 [pid 7186] <... write resumed>) = 524288 [pid 7183] <... write resumed>) = 524288 [pid 7185] <... munmap resumed>) = 0 [pid 7185] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7185] ioctl(4, LOOP_SET_FD, 3 [pid 7183] munmap(0x7f943d000000, 138412032 [pid 7184] <... ioctl resumed>) = 0 [pid 7184] close(3 [pid 7183] <... munmap resumed>) = 0 [pid 7184] <... close resumed>) = 0 [pid 7184] close(4 [pid 7183] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7187] <... write resumed>) = 524288 [pid 7186] munmap(0x7f943d000000, 138412032 [pid 7185] <... ioctl resumed>) = 0 [pid 7184] <... close resumed>) = 0 [pid 7187] munmap(0x7f943d000000, 138412032 [pid 7184] mkdir("./file1", 0777 [pid 7183] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7186] <... munmap resumed>) = 0 [pid 7185] close(3 [pid 7184] <... mkdir resumed>) = 0 [pid 7183] close(4 [pid 7185] <... close resumed>) = 0 [pid 7184] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7185] close(4 [pid 7187] <... munmap resumed>) = 0 [pid 7185] <... close resumed>) = 0 [pid 7186] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7185] mkdir("./file1", 0777 [pid 5073] <... ioctl resumed>) = 0 [pid 7187] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7185] <... mkdir resumed>) = 0 [ 261.755476][ T7184] loop0: detected capacity change from 0 to 1024 [ 261.780200][ T7185] loop4: detected capacity change from 0 to 1024 [pid 7187] <... openat resumed>) = 4 [pid 7186] <... openat resumed>) = 4 [pid 7183] <... close resumed>) = 0 [pid 7185] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7186] ioctl(4, LOOP_SET_FD, 3 [pid 7187] ioctl(4, LOOP_SET_FD, 3 [pid 7183] exit_group(0 [pid 5073] close(3 [pid 7183] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 7183] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7183, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7187] <... ioctl resumed>) = 0 [pid 7187] close(3) = 0 [pid 7184] <... mount resumed>) = 0 [pid 5076] umount2("./344", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7187] close(4 [pid 7184] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7188 ./strace-static-x86_64: Process 7188 attached [pid 7187] <... close resumed>) = 0 [pid 7184] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7188] set_robust_list(0x555583d53660, 24) = 0 [pid 7187] mkdir("./file1", 0777 [pid 7186] <... ioctl resumed>) = 0 [pid 7185] <... mount resumed>) = 0 [pid 7184] chdir("./file1" [pid 5076] <... openat resumed>) = 3 [pid 7188] chdir("./350" [pid 7187] <... mkdir resumed>) = 0 [pid 7186] close(3 [pid 7185] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(3, "", [pid 7184] <... chdir resumed>) = 0 [pid 7188] <... chdir resumed>) = 0 [pid 7186] <... close resumed>) = 0 [pid 7185] <... openat resumed>) = 3 [pid 7184] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7187] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7184] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7184] truncate("./file1", 0 [pid 7188] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7186] close(4 [pid 7185] chdir("./file1" [pid 5076] getdents64(3, [pid 7188] <... prctl resumed>) = 0 [pid 7186] <... close resumed>) = 0 [pid 7185] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7188] setpgid(0, 0 [pid 7186] mkdir("./file1", 0777 [pid 7185] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./344/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7188] <... setpgid resumed>) = 0 [pid 7186] <... mkdir resumed>) = 0 [pid 7185] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7186] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [ 261.828762][ T7186] loop1: detected capacity change from 0 to 1024 [ 261.837552][ T7187] loop3: detected capacity change from 0 to 1024 [pid 7185] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7188] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./344/binderfs", [pid 7184] <... truncate resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7188] write(3, "1000", 4 [pid 7184] memfd_create("syzkaller", 0 [pid 5076] unlink("./344/binderfs" [pid 7188] <... write resumed>) = 4 [pid 7187] <... mount resumed>) = 0 [pid 7184] <... memfd_create resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 7188] close(3 [pid 7184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7188] <... close resumed>) = 0 [pid 7185] <... truncate resumed>) = 0 [pid 7188] symlink("/dev/binderfs", "./binderfs" [pid 7185] memfd_create("syzkaller", 0 [pid 7184] <... mmap resumed>) = 0x7f943d000000 [pid 7188] <... symlink resumed>) = 0 [pid 7187] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7185] <... memfd_create resumed>) = 4 [pid 7188] memfd_create("syzkaller", 0 [pid 7187] <... openat resumed>) = 3 [pid 7185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7188] <... memfd_create resumed>) = 3 [pid 7185] <... mmap resumed>) = 0x7f943d000000 [pid 7188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7187] chdir("./file1" [pid 7186] <... mount resumed>) = 0 [pid 7184] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7186] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7187] <... chdir resumed>) = 0 [pid 7185] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7186] <... openat resumed>) = 3 [pid 7186] chdir("./file1") = 0 [pid 7186] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7187] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7186] truncate("./file1", 0 [pid 7187] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7186] <... truncate resumed>) = 0 [pid 7188] <... write resumed>) = 524288 [pid 7187] <... truncate resumed>) = 0 [pid 7186] memfd_create("syzkaller", 0 [pid 7184] <... write resumed>) = 524288 [pid 5076] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7187] memfd_create("syzkaller", 0 [pid 7185] <... write resumed>) = 524288 [pid 7188] munmap(0x7f943d000000, 138412032 [pid 7187] <... memfd_create resumed>) = 4 [pid 7186] <... memfd_create resumed>) = 4 [pid 7184] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./344/file1", [pid 7186] <... mmap resumed>) = 0x7f943d000000 [pid 7187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7186] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7184] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7188] <... munmap resumed>) = 0 [pid 7187] <... mmap resumed>) = 0x7f943d000000 [pid 7185] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./344/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7185] <... munmap resumed>) = 0 [pid 7188] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7185] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7188] ioctl(4, LOOP_SET_FD, 3 [pid 7187] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7185] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7184] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./344/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7184] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7186] <... write resumed>) = 524288 [pid 7185] close(4 [pid 7184] close(4 [pid 5076] <... openat resumed>) = 4 [pid 7188] <... ioctl resumed>) = 0 [pid 7186] munmap(0x7f943d000000, 138412032 [pid 7185] <... close resumed>) = 0 [pid 7184] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 7187] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7188] close(3) = 0 [pid 7188] close(4) = 0 [pid 7186] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 7188] mkdir("./file1", 0777 [pid 7185] exit_group(0 [pid 7187] munmap(0x7f943d000000, 138412032 [pid 7186] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7184] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7185] <... exit_group resumed>) = ? [pid 7187] <... munmap resumed>) = 0 [pid 7188] <... mkdir resumed>) = 0 [pid 7185] +++ exited with 0 +++ [pid 5076] close(4 [pid 7187] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7186] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7184] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 7186] close(4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7185, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] rmdir("./344/file1" [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7188] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... restart_syscall resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./347", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7187] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7188] <... mount resumed>) = 0 [pid 7187] close(4 [pid 7186] <... close resumed>) = 0 [pid 7184] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7184, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7188] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7188] <... openat resumed>) = 3 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7188] chdir("./file1" [pid 5075] umount2("./347/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7188] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7188] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./347/binderfs", [pid 7188] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./349", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] unlink("./347/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7188] truncate("./file1", 0 [pid 5076] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 7188] <... truncate resumed>) = 0 [pid 7187] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5076] rmdir("./344" [pid 7186] exit_group(0 [pid 7188] memfd_create("syzkaller", 0 [ 261.964387][ T7188] loop2: detected capacity change from 0 to 1024 [pid 5075] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7188] <... memfd_create resumed>) = 4 [pid 7187] exit_group(0 [pid 7186] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 7186] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7187] <... exit_group resumed>) = ? [pid 5076] mkdir("./345", 0777 [pid 5071] getdents64(3, [pid 7188] <... mmap resumed>) = 0x7f943d000000 [pid 7187] +++ exited with 0 +++ [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7186, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7187, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./349", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./349/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./347/file1", [pid 5072] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./349/binderfs", [pid 7188] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./349/binderfs" [pid 5074] umount2("./349", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7188] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./347/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = 0 [pid 7188] munmap(0x7f943d000000, 138412032) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5072] umount2("./349/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5074] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(AT_FDCWD, "./349/binderfs", [pid 5071] newfstatat(AT_FDCWD, "./349/file1", [pid 5075] getdents64(4, [pid 5074] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5072] unlink("./349/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... unlink resumed>) = 0 [pid 5071] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5074] umount2("./349/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./349/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./347/file1" [pid 5074] newfstatat(AT_FDCWD, "./349/binderfs", [pid 7188] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7189 [pid 5075] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7189 attached [pid 7188] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] unlink("./349/binderfs" [pid 5071] newfstatat(4, "", [pid 7189] set_robust_list(0x555583d53660, 24 [pid 5075] close(3 [pid 7189] <... set_robust_list resumed>) = 0 [pid 7188] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7189] chdir("./345" [pid 7188] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./347" [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7188] exit_group(0 [pid 7189] <... chdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 7189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7188] <... exit_group resumed>) = ? [pid 5075] mkdir("./348", 0777 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7189] <... prctl resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./349/file1", [pid 5071] close(4 [pid 7189] setpgid(0, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 7189] <... setpgid resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./349/file1" [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 7189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] openat(AT_FDCWD, "./349/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7188] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 4 [pid 5071] getdents64(3, [pid 7189] <... openat resumed>) = 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7188, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7189] write(3, "1000", 4 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 5071] close(3 [pid 7189] <... write resumed>) = 4 [pid 5074] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7189] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... close resumed>) = 0 [pid 7189] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./349/file1", [pid 5073] umount2("./350", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 5071] rmdir("./349" [pid 7189] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7189] <... symlink resumed>) = 0 [pid 5074] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(4, [pid 7189] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7189] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./349/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 5072] close(4 [pid 5073] newfstatat(3, "", [pid 5071] mkdir("./350", 0777 [pid 7189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... close resumed>) = 0 [pid 7189] <... mmap resumed>) = 0x7f943d000000 [pid 5073] getdents64(3, [pid 5072] rmdir("./349/file1" [pid 5071] <... mkdir resumed>) = 0 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(4, [pid 5073] umount2("./350/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./350/binderfs", [pid 5072] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4 [pid 5073] unlink("./350/binderfs" [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] close(3 [pid 5074] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5074] rmdir("./349/file1" [pid 5072] rmdir("./349" [pid 5074] <... rmdir resumed>) = 0 [pid 5073] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] mkdir("./350", 0777 [pid 7189] <... write resumed>) = 524288 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7189] munmap(0x7f943d000000, 138412032 [pid 5074] close(3 [pid 5073] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7189] <... munmap resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... ioctl resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(AT_FDCWD, "./350/file1", [pid 7189] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] rmdir("./349" [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7190 ./strace-static-x86_64: Process 7190 attached [pid 7189] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7190] set_robust_list(0x555583d53660, 24 [pid 7189] ioctl(4, LOOP_SET_FD, 3 [pid 5074] mkdir("./350", 0777 [pid 5073] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7190] <... set_robust_list resumed>) = 0 [pid 7190] chdir("./348") = 0 [pid 7190] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7190] setpgid(0, 0) = 0 [pid 7189] <... ioctl resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... ioctl resumed>) = 0 [pid 7190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7189] close(3 [pid 5073] openat(AT_FDCWD, "./350/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7189] <... close resumed>) = 0 [pid 7190] <... openat resumed>) = 3 [pid 7189] close(4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... openat resumed>) = 4 [pid 5071] close(3 [pid 7189] <... close resumed>) = 0 [pid 7190] write(3, "1000", 4) = 4 [pid 7190] close(3) = 0 [pid 7190] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7189] mkdir("./file1", 0777 [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7189] <... mkdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7190] memfd_create("syzkaller", 0) = 3 [pid 7190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] getdents64(4, [pid 7190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] close(3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... close resumed>) = 0 [pid 7189] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7191 [pid 5073] <... close resumed>) = 0 [ 262.179287][ T7189] loop5: detected capacity change from 0 to 1024 [pid 5073] rmdir("./350/file1"./strace-static-x86_64: Process 7192 attached ./strace-static-x86_64: Process 7191 attached [pid 7190] <... write resumed>) = 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 7191] set_robust_list(0x555583d53660, 24 [pid 7192] set_robust_list(0x555583d53660, 24 [pid 7191] <... set_robust_list resumed>) = 0 [pid 7189] <... mount resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7192 [pid 7191] chdir("./350" [pid 7189] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7191] <... chdir resumed>) = 0 [pid 7189] <... openat resumed>) = 3 [pid 7191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] close(3 [pid 7191] <... prctl resumed>) = 0 [pid 7189] chdir("./file1" [pid 5073] <... close resumed>) = 0 [pid 7191] setpgid(0, 0 [pid 7189] <... chdir resumed>) = 0 [pid 5073] rmdir("./350" [pid 7191] <... setpgid resumed>) = 0 [pid 7189] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7192] <... set_robust_list resumed>) = 0 [pid 7191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7192] chdir("./350" [pid 7190] munmap(0x7f943d000000, 138412032 [pid 7192] <... chdir resumed>) = 0 [pid 7190] <... munmap resumed>) = 0 [pid 7189] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... rmdir resumed>) = 0 [pid 7192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7192] setpgid(0, 0) = 0 [pid 7190] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7190] <... openat resumed>) = 4 [pid 7190] ioctl(4, LOOP_SET_FD, 3 [pid 7189] truncate("./file1", 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7192] <... openat resumed>) = 3 [pid 7192] write(3, "1000", 4) = 4 [pid 7192] close(3) = 0 [pid 7191] <... openat resumed>) = 3 [pid 5073] mkdir("./351", 0777 [pid 7192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7192] memfd_create("syzkaller", 0) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 7192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7191] write(3, "1000", 4 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7191] <... write resumed>) = 4 [pid 7191] close(3) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7191] symlink("/dev/binderfs", "./binderfs" [pid 7190] <... ioctl resumed>) = 0 [pid 7190] close(3 [pid 7191] <... symlink resumed>) = 0 [pid 7190] <... close resumed>) = 0 [pid 7192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7191] memfd_create("syzkaller", 0 [pid 7190] close(4 [pid 7189] <... truncate resumed>) = 0 [pid 5074] close(3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7189] memfd_create("syzkaller", 0 [pid 5074] <... close resumed>) = 0 [pid 7189] <... memfd_create resumed>) = 4 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7191] <... memfd_create resumed>) = 3 [pid 7190] <... close resumed>) = 0 [pid 7189] <... mmap resumed>) = 0x7f943d000000 ./strace-static-x86_64: Process 7193 attached [pid 7191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7193 [pid 7191] <... mmap resumed>) = 0x7f943d000000 [pid 7193] set_robust_list(0x555583d53660, 24) = 0 [pid 7190] mkdir("./file1", 0777 [pid 7193] chdir("./350" [pid 7190] <... mkdir resumed>) = 0 [pid 7190] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7193] <... chdir resumed>) = 0 [pid 7193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7193] setpgid(0, 0) = 0 [pid 7193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7190] <... mount resumed>) = 0 [pid 7192] <... write resumed>) = 524288 [pid 7190] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7189] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7193] <... openat resumed>) = 3 [pid 7190] <... openat resumed>) = 3 [pid 7190] chdir("./file1" [pid 7192] munmap(0x7f943d000000, 138412032 [pid 7193] write(3, "1000", 4 [pid 7190] <... chdir resumed>) = 0 [pid 7193] <... write resumed>) = 4 [pid 7192] <... munmap resumed>) = 0 [pid 7191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 262.267739][ T7190] loop4: detected capacity change from 0 to 1024 [pid 7190] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7193] close(3 [pid 7190] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7190] truncate("./file1", 0 [pid 7193] <... close resumed>) = 0 [pid 7192] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7191] <... write resumed>) = 524288 [pid 7193] symlink("/dev/binderfs", "./binderfs" [pid 7192] <... openat resumed>) = 4 [pid 7190] <... truncate resumed>) = 0 [pid 7193] <... symlink resumed>) = 0 [pid 7192] ioctl(4, LOOP_SET_FD, 3 [pid 7190] memfd_create("syzkaller", 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7193] memfd_create("syzkaller", 0 [pid 7192] <... ioctl resumed>) = 0 [pid 7190] <... memfd_create resumed>) = 4 [pid 7193] <... memfd_create resumed>) = 3 [pid 7191] munmap(0x7f943d000000, 138412032 [pid 7189] <... write resumed>) = 524288 [pid 5073] close(3 [pid 7193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7194 attached [pid 7193] <... mmap resumed>) = 0x7f943d000000 [pid 7191] <... munmap resumed>) = 0 [pid 7190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7189] munmap(0x7f943d000000, 138412032 [pid 7194] set_robust_list(0x555583d53660, 24) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7194 [pid 7190] <... mmap resumed>) = 0x7f943d000000 [pid 7189] <... munmap resumed>) = 0 [pid 7191] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7194] chdir("./351" [pid 7193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7191] <... openat resumed>) = 4 [pid 7190] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7189] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7194] <... chdir resumed>) = 0 [pid 7191] ioctl(4, LOOP_SET_FD, 3 [pid 7194] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7189] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7189] close(4 [pid 7194] <... prctl resumed>) = 0 [pid 7194] setpgid(0, 0 [pid 7192] close(3 [pid 7194] <... setpgid resumed>) = 0 [pid 7192] <... close resumed>) = 0 [pid 7194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7192] close(4) = 0 [pid 7194] <... openat resumed>) = 3 [pid 7192] mkdir("./file1", 0777 [pid 7190] <... write resumed>) = 524288 [pid 7194] write(3, "1000", 4 [pid 7192] <... mkdir resumed>) = 0 [pid 7189] <... close resumed>) = 0 [pid 7194] <... write resumed>) = 4 [pid 7194] close(3) = 0 [pid 7192] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7189] exit_group(0 [pid 7194] symlink("/dev/binderfs", "./binderfs" [pid 7189] <... exit_group resumed>) = ? [pid 7194] <... symlink resumed>) = 0 [pid 7193] <... write resumed>) = 524288 [pid 7191] <... ioctl resumed>) = 0 [pid 7189] +++ exited with 0 +++ [pid 7194] memfd_create("syzkaller", 0 [pid 7193] munmap(0x7f943d000000, 138412032 [pid 7191] close(3 [pid 7194] <... memfd_create resumed>) = 3 [pid 7191] <... close resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7189, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7191] close(4 [pid 5076] umount2("./345", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7193] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7191] <... close resumed>) = 0 [pid 7194] <... mmap resumed>) = 0x7f943d000000 [pid 7192] <... mount resumed>) = 0 [ 262.343877][ T7192] loop1: detected capacity change from 0 to 1024 [ 262.372362][ T7191] loop0: detected capacity change from 0 to 1024 [pid 7190] munmap(0x7f943d000000, 138412032 [pid 7194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7193] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7192] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7191] mkdir("./file1", 0777 [pid 7190] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7193] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 7193] ioctl(4, LOOP_SET_FD, 3 [pid 7192] <... openat resumed>) = 3 [pid 7191] <... mkdir resumed>) = 0 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7190] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7190] close(4) = 0 [pid 7193] <... ioctl resumed>) = 0 [pid 5076] getdents64(3, [pid 7192] chdir("./file1" [pid 7191] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7192] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7192] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./345/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7192] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./345/binderfs" [pid 7193] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 7193] <... close resumed>) = 0 [pid 7193] close(4 [pid 5076] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7193] <... close resumed>) = 0 [pid 7193] mkdir("./file1", 0777) = 0 [pid 7192] truncate("./file1", 0 [pid 7194] <... write resumed>) = 524288 [pid 7191] <... mount resumed>) = 0 [pid 7190] exit_group(0) = ? [pid 7190] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7190, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] umount2("./348", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./348/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7191] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7194] munmap(0x7f943d000000, 138412032 [pid 7193] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7191] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./348/binderfs", [pid 7194] <... munmap resumed>) = 0 [pid 7191] chdir("./file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7191] <... chdir resumed>) = 0 [pid 5075] unlink("./348/binderfs" [pid 7192] <... truncate resumed>) = 0 [pid 7191] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 7194] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7192] memfd_create("syzkaller", 0 [pid 7191] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = 0 [ 262.435220][ T7193] loop3: detected capacity change from 0 to 1024 [pid 5075] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7194] <... openat resumed>) = 4 [pid 7193] <... mount resumed>) = 0 [pid 7192] <... memfd_create resumed>) = 4 [pid 7191] truncate("./file1", 0 [pid 7194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7193] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7191] <... truncate resumed>) = 0 [pid 7193] <... openat resumed>) = 3 [pid 7192] <... mmap resumed>) = 0x7f943d000000 [pid 7191] memfd_create("syzkaller", 0 [pid 5076] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7193] chdir("./file1" [pid 7191] <... memfd_create resumed>) = 4 [pid 7191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7192] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7191] <... mmap resumed>) = 0x7f943d000000 [pid 7194] close(3 [pid 7193] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 7194] <... close resumed>) = 0 [pid 7193] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7192] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./345/file1", [pid 7193] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7194] close(4 [pid 5076] umount2("./345/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7194] <... close resumed>) = 0 [pid 7193] truncate("./file1", 0 [pid 7191] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7193] <... truncate resumed>) = 0 [pid 7193] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7194] mkdir("./file1", 0777 [pid 7193] <... memfd_create resumed>) = 4 [pid 7193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7194] <... mkdir resumed>) = 0 [pid 7193] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] openat(AT_FDCWD, "./345/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./348/file1", [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7194] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7192] munmap(0x7f943d000000, 138412032) = 0 [pid 5076] getdents64(4, [pid 5075] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7192] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7192] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7191] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7193] <... write resumed>) = 524288 [pid 7192] close(4 [pid 7191] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "./348/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5076] close(4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(4, [ 262.494877][ T7194] loop2: detected capacity change from 0 to 1024 [pid 5076] rmdir("./345/file1" [pid 7191] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 7191] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7191] close(4 [pid 7194] <... mount resumed>) = 0 [pid 7193] munmap(0x7f943d000000, 138412032 [pid 7191] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7194] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 7194] <... openat resumed>) = 3 [pid 7193] <... munmap resumed>) = 0 [pid 7192] <... close resumed>) = 0 [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7194] chdir("./file1" [pid 5076] <... close resumed>) = 0 [pid 5075] close(4 [pid 7194] <... chdir resumed>) = 0 [pid 5076] rmdir("./345" [pid 5075] <... close resumed>) = 0 [pid 7194] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7192] exit_group(0 [pid 7193] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7192] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 7194] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7193] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7192] +++ exited with 0 +++ [pid 5075] rmdir("./348/file1" [pid 7193] close(4 [pid 7194] truncate("./file1", 0 [pid 5076] mkdir("./346", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 7191] exit_group(0) = ? [pid 7191] +++ exited with 0 +++ [pid 7193] <... close resumed>) = 0 [pid 7194] <... truncate resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7192, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7194] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7191, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] <... openat resumed>) = 3 [pid 5075] close(3 [pid 7194] <... memfd_create resumed>) = 4 [pid 7193] exit_group(0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 5071] umount2("./350", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7193] <... exit_group resumed>) = ? [pid 5075] rmdir("./348" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7194] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7194] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] mkdir("./349", 0777 [pid 5072] umount2("./350", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 7193] +++ exited with 0 +++ [pid 5071] newfstatat(3, "", [pid 5075] <... mkdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7193, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5072] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... openat resumed>) = 3 [pid 5071] umount2("./350/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./350/binderfs", [pid 5072] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] unlink("./350/binderfs") = 0 [pid 7194] <... write resumed>) = 524288 [pid 5074] umount2("./350", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./350/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7194] munmap(0x7f943d000000, 138412032 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7194] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(AT_FDCWD, "./350/binderfs", [pid 5074] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(3, "", [pid 5072] unlink("./350/binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5072] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7194] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] umount2("./350/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7194] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] unlink("./350/binderfs" [pid 7194] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5072] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 5074] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7194] <... close resumed>) = 0 [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7194] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./350/file1", [pid 5074] newfstatat(AT_FDCWD, "./350/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7194] <... exit_group resumed>) = ? [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./350/file1", ./strace-static-x86_64: Process 7195 attached [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7195] set_robust_list(0x555583d53660, 24 [pid 5074] openat(AT_FDCWD, "./350/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7195] <... set_robust_list resumed>) = 0 [pid 5074] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7196 attached [pid 7195] chdir("./346" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7195 [pid 5074] newfstatat(4, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7196 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] openat(AT_FDCWD, "./350/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./350/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(4, [pid 5072] <... openat resumed>) = 4 [pid 7196] set_robust_list(0x555583d53660, 24 [pid 7195] <... chdir resumed>) = 0 [pid 7194] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] newfstatat(4, "", [pid 5071] <... openat resumed>) = 4 [pid 7196] <... set_robust_list resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7196] chdir("./349" [pid 7195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] close(4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7194, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] getdents64(4, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7196] <... chdir resumed>) = 0 [pid 7195] <... prctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7195] setpgid(0, 0 [pid 5071] getdents64(4, [pid 7196] <... prctl resumed>) = 0 [pid 7195] <... setpgid resumed>) = 0 [pid 5074] rmdir("./350/file1" [pid 5072] getdents64(4, [pid 7196] setpgid(0, 0 [pid 7195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7196] <... setpgid resumed>) = 0 [pid 7195] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(4, [pid 7196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7195] write(3, "1000", 4 [pid 5074] getdents64(3, [pid 5072] close(4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] close(4 [pid 5074] close(3 [pid 5072] rmdir("./350/file1" [pid 5074] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7195] <... write resumed>) = 4 [pid 5073] umount2("./351", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7195] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 7195] <... close resumed>) = 0 [pid 5074] rmdir("./350" [pid 5073] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./350/file1" [pid 7196] <... openat resumed>) = 3 [pid 7195] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... openat resumed>) = 3 [pid 7195] <... symlink resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 7196] write(3, "1000", 4 [pid 7195] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 7196] <... write resumed>) = 4 [pid 7195] <... memfd_create resumed>) = 3 [pid 5074] mkdir("./351", 0777 [pid 5073] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 7196] close(3 [pid 7195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7196] <... close resumed>) = 0 [pid 7195] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] umount2("./351/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] close(3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7196] symlink("/dev/binderfs", "./binderfs" [pid 7195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7196] <... symlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] close(3 [pid 7196] memfd_create("syzkaller", 0 [pid 5072] rmdir("./350" [pid 5071] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] newfstatat(AT_FDCWD, "./351/binderfs", [pid 5072] <... rmdir resumed>) = 0 [pid 5071] rmdir("./350" [pid 7196] <... memfd_create resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] unlink("./351/binderfs" [pid 5072] mkdir("./351", 0777 [pid 7196] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... unlink resumed>) = 0 [pid 7196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] mkdir("./351", 0777) = 0 [pid 7196] <... write resumed>) = 524288 [pid 7195] <... write resumed>) = 524288 [pid 5073] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7196] munmap(0x7f943d000000, 138412032 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 7196] <... munmap resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7196] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7195] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = 0 [pid 7196] <... openat resumed>) = 4 [pid 7195] <... munmap resumed>) = 0 [pid 7196] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./351/file1", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7195] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7195] <... openat resumed>) = 4 [pid 7195] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7197 attached [pid 5073] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7197 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7197] set_robust_list(0x555583d53660, 24 [pid 5073] openat(AT_FDCWD, "./351/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7197] <... set_robust_list resumed>) = 0 [pid 7197] chdir("./351" [pid 5073] <... openat resumed>) = 4 [pid 7197] <... chdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7196] <... ioctl resumed>) = 0 [pid 7197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7197] <... prctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7197] setpgid(0, 0 [pid 7195] <... ioctl resumed>) = 0 [pid 7196] close(3 [pid 5073] getdents64(4, [pid 7197] <... setpgid resumed>) = 0 [pid 7196] <... close resumed>) = 0 [pid 7195] close(3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7196] close(4 [pid 5073] close(4 [pid 7197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7196] <... close resumed>) = 0 [pid 7195] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7197] <... openat resumed>) = 3 [pid 7196] mkdir("./file1", 0777 [pid 7195] close(4 [pid 5073] rmdir("./351/file1" [pid 7197] write(3, "1000", 4 [pid 7196] <... mkdir resumed>) = 0 [pid 7197] <... write resumed>) = 4 [pid 7197] close(3 [pid 7196] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7195] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7195] mkdir("./file1", 0777 [pid 5073] getdents64(3, [pid 7197] <... close resumed>) = 0 [pid 7197] symlink("/dev/binderfs", "./binderfs" [pid 7195] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7197] <... symlink resumed>) = 0 [pid 7195] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] close(3 [pid 5072] <... ioctl resumed>) = 0 [pid 7197] memfd_create("syzkaller", 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./351" [pid 7197] <... memfd_create resumed>) = 3 [pid 7197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7196] <... mount resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7196] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 262.753245][ T7196] loop4: detected capacity change from 0 to 1024 [ 262.761881][ T7195] loop5: detected capacity change from 0 to 1024 [pid 7196] chdir("./file1" [pid 5073] mkdir("./352", 0777 [pid 5072] close(3 [pid 7196] <... chdir resumed>) = 0 [pid 7197] <... write resumed>) = 524288 [pid 7196] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7195] <... mount resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7196] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7195] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7196] truncate("./file1", 0 [pid 7195] <... openat resumed>) = 3 [pid 7195] chdir("./file1" [pid 5073] <... openat resumed>) = 3 [pid 7196] <... truncate resumed>) = 0 [pid 7195] <... chdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7196] memfd_create("syzkaller", 0) = 4 [pid 7195] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7195] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7198 [pid 5071] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7198 attached [pid 7195] truncate("./file1", 0 [pid 7198] set_robust_list(0x555583d53660, 24 [pid 5071] close(3 [pid 7198] <... set_robust_list resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7198] chdir("./351" [pid 7197] munmap(0x7f943d000000, 138412032 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7198] <... chdir resumed>) = 0 [pid 7197] <... munmap resumed>) = 0 [pid 7195] <... truncate resumed>) = 0 [pid 7198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7196] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7195] memfd_create("syzkaller", 0 [pid 7198] <... prctl resumed>) = 0 [pid 7195] <... memfd_create resumed>) = 4 [pid 7198] setpgid(0, 0 [pid 7195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7198] <... setpgid resumed>) = 0 [pid 7197] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 7199 attached [pid 7198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7197] <... openat resumed>) = 4 [pid 7195] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7199 [pid 7198] <... openat resumed>) = 3 [pid 7198] write(3, "1000", 4 [pid 7197] ioctl(4, LOOP_SET_FD, 3 [pid 7199] set_robust_list(0x555583d53660, 24 [pid 7195] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7198] <... write resumed>) = 4 [pid 7198] close(3) = 0 [pid 7198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7198] memfd_create("syzkaller", 0 [pid 7199] <... set_robust_list resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7198] <... memfd_create resumed>) = 3 [pid 7198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7199] chdir("./351" [pid 7198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7196] <... write resumed>) = 524288 [pid 7199] <... chdir resumed>) = 0 [pid 7197] <... ioctl resumed>) = 0 [pid 7197] close(3 [pid 7199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7198] <... write resumed>) = 524288 [pid 7197] <... close resumed>) = 0 [pid 7196] munmap(0x7f943d000000, 138412032 [pid 7195] <... write resumed>) = 524288 [pid 5073] close(3 [pid 7199] <... prctl resumed>) = 0 [pid 7198] munmap(0x7f943d000000, 138412032 [pid 7197] close(4 [pid 7196] <... munmap resumed>) = 0 [pid 7195] munmap(0x7f943d000000, 138412032 [pid 5073] <... close resumed>) = 0 [pid 7199] setpgid(0, 0 [pid 7198] <... munmap resumed>) = 0 [pid 7197] <... close resumed>) = 0 [pid 7199] <... setpgid resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7197] mkdir("./file1", 0777 [pid 7195] <... munmap resumed>) = 0 [pid 7199] <... openat resumed>) = 3 [pid 7198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7197] <... mkdir resumed>) = 0 [pid 7196] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7199] write(3, "1000", 4 [pid 7198] <... openat resumed>) = 4 [pid 7196] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 262.848013][ T7197] loop3: detected capacity change from 0 to 1024 [pid 7195] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7199] <... write resumed>) = 4 [pid 7198] ioctl(4, LOOP_SET_FD, 3 [pid 7197] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7196] close(4 [pid 7195] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 7200 attached [pid 7199] close(3 [pid 7200] set_robust_list(0x555583d53660, 24 [pid 7199] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7200 [pid 7195] close(4 [pid 7199] symlink("/dev/binderfs", "./binderfs" [pid 7200] <... set_robust_list resumed>) = 0 [pid 7199] <... symlink resumed>) = 0 [pid 7200] chdir("./352" [pid 7199] memfd_create("syzkaller", 0) = 3 [pid 7200] <... chdir resumed>) = 0 [pid 7200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7200] setpgid(0, 0 [pid 7196] <... close resumed>) = 0 [pid 7195] <... close resumed>) = 0 [pid 7200] <... setpgid resumed>) = 0 [pid 7199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7197] <... mount resumed>) = 0 [pid 7198] <... ioctl resumed>) = 0 [pid 7197] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7196] exit_group(0 [pid 7195] exit_group(0 [pid 7198] close(3 [pid 7197] <... openat resumed>) = 3 [pid 7195] <... exit_group resumed>) = ? [pid 7200] write(3, "1000", 4 [pid 7198] <... close resumed>) = 0 [pid 7197] chdir("./file1" [pid 7196] <... exit_group resumed>) = ? [pid 7200] <... write resumed>) = 4 [pid 7198] close(4 [pid 7197] <... chdir resumed>) = 0 [pid 7200] close(3 [pid 7198] <... close resumed>) = 0 [pid 7197] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7195] +++ exited with 0 +++ [pid 7200] <... close resumed>) = 0 [pid 7199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7198] mkdir("./file1", 0777 [pid 7197] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7196] +++ exited with 0 +++ [pid 7200] symlink("/dev/binderfs", "./binderfs" [pid 7198] <... mkdir resumed>) = 0 [pid 7197] truncate("./file1", 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7195, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7196, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7200] <... symlink resumed>) = 0 [pid 5076] umount2("./346", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7200] memfd_create("syzkaller", 0 [pid 7198] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7197] <... truncate resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7197] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [ 262.898468][ T7198] loop1: detected capacity change from 0 to 1024 [pid 7198] <... mount resumed>) = 0 [pid 7197] <... memfd_create resumed>) = 4 [pid 5076] newfstatat(3, "", [pid 7198] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./349", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7198] <... openat resumed>) = 3 [pid 7197] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7200] <... memfd_create resumed>) = 3 [pid 7198] chdir("./file1" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7198] <... chdir resumed>) = 0 [pid 5076] umount2("./346/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 7200] <... mmap resumed>) = 0x7f943d000000 [pid 7199] <... write resumed>) = 524288 [pid 7198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 7198] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7198] truncate("./file1", 0 [pid 7197] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, [pid 7200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7199] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] unlink("./346/binderfs" [pid 5075] umount2("./349/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7200] <... write resumed>) = 524288 [pid 7199] <... munmap resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7200] munmap(0x7f943d000000, 138412032) = 0 [pid 7199] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7197] <... write resumed>) = 524288 [pid 7200] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7198] <... truncate resumed>) = 0 [pid 5076] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./349/binderfs", [pid 7199] <... openat resumed>) = 4 [pid 7200] ioctl(4, LOOP_SET_FD, 3 [pid 7199] ioctl(4, LOOP_SET_FD, 3 [pid 7198] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./349/binderfs") = 0 [pid 5075] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7197] munmap(0x7f943d000000, 138412032 [pid 7198] <... memfd_create resumed>) = 4 [pid 7197] <... munmap resumed>) = 0 [pid 7197] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7200] <... ioctl resumed>) = 0 [pid 7199] <... ioctl resumed>) = 0 [pid 7198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7197] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7198] <... mmap resumed>) = 0x7f943d000000 [pid 7197] close(4 [pid 7200] close(3 [pid 7199] close(3 [pid 7198] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7197] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7200] <... close resumed>) = 0 [pid 7199] <... close resumed>) = 0 [pid 7197] exit_group(0) = ? [pid 5076] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7200] close(4 [pid 7199] close(4 [pid 7197] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7200] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./346/file1", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7197, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7199] <... close resumed>) = 0 [pid 7200] mkdir("./file1", 0777 [pid 7199] mkdir("./file1", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./346/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7200] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./346/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(AT_FDCWD, "./349/file1", [pid 7200] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7199] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [ 262.992151][ T7200] loop2: detected capacity change from 0 to 1024 [ 263.002517][ T7199] loop0: detected capacity change from 0 to 1024 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7199] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7198] <... write resumed>) = 524288 [pid 5076] newfstatat(4, "", [pid 5075] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./349/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(4, "", [pid 5074] umount2("./351", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] newfstatat(3, "", [pid 7200] <... mount resumed>) = 0 [pid 7198] munmap(0x7f943d000000, 138412032 [pid 5076] rmdir("./346/file1" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7199] <... mount resumed>) = 0 [pid 7198] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./349/file1" [pid 5076] getdents64(3, [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 7198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 7198] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7198] close(4 [pid 5076] <... close resumed>) = 0 [pid 5075] close(3 [pid 7200] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 7200] <... openat resumed>) = 3 [pid 7199] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] rmdir("./346" [pid 5075] rmdir("./349" [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7200] chdir("./file1" [pid 7199] <... openat resumed>) = 3 [pid 5074] umount2("./351/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7200] <... chdir resumed>) = 0 [pid 7199] chdir("./file1" [pid 5075] <... rmdir resumed>) = 0 [pid 7200] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7199] <... chdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] mkdir("./350", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7200] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7199] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7198] <... close resumed>) = 0 [pid 5076] mkdir("./347", 0777 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./351/binderfs", [pid 7200] truncate("./file1", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7199] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... openat resumed>) = 3 [pid 5074] unlink("./351/binderfs" [pid 5076] <... mkdir resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7198] exit_group(0 [pid 7199] truncate("./file1", 0 [pid 7198] <... exit_group resumed>) = ? [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... unlink resumed>) = 0 [pid 7198] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 5074] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7198, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] umount2("./351", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7200] <... truncate resumed>) = 0 [pid 7199] <... truncate resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 3 [pid 7200] memfd_create("syzkaller", 0 [pid 7199] memfd_create("syzkaller", 0 [pid 5072] newfstatat(3, "", [pid 7199] <... memfd_create resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 7200] <... memfd_create resumed>) = 4 [pid 7199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7199] <... mmap resumed>) = 0x7f943d000000 [pid 5072] umount2("./351/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./351/binderfs", [pid 7200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7200] <... mmap resumed>) = 0x7f943d000000 [pid 5072] unlink("./351/binderfs") = 0 [pid 5072] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 7200] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7199] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./351/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 7201 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./351/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7201 attached [pid 5072] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7201] set_robust_list(0x555583d53660, 24 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7201] <... set_robust_list resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./351/file1", [pid 7201] chdir("./350" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7201] <... chdir resumed>) = 0 [pid 5072] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7201] <... prctl resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./351/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7201] setpgid(0, 0 [pid 5074] newfstatat(4, "", [pid 5072] <... openat resumed>) = 4 [pid 7201] <... setpgid resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7201] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7199] <... write resumed>) = 524288 [pid 5074] getdents64(4, [pid 7200] <... write resumed>) = 524288 [pid 7201] write(3, "1000", 4 [pid 7200] munmap(0x7f943d000000, 138412032 [pid 7199] munmap(0x7f943d000000, 138412032 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7201] <... write resumed>) = 4 [pid 5072] getdents64(4, [pid 7201] close(3 [pid 7200] <... munmap resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7201] <... close resumed>) = 0 [pid 5072] close(4 [pid 7199] <... munmap resumed>) = 0 [pid 7201] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 7201] <... symlink resumed>) = 0 [pid 7200] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7199] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] close(4 [pid 7201] memfd_create("syzkaller", 0 [pid 7200] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7199] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./351/file1" [pid 7201] <... memfd_create resumed>) = 3 [pid 7200] close(4 [pid 7199] close(4 [pid 5076] close(3 [pid 5074] rmdir("./351/file1" [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./351") = 0 [pid 7201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 7201] <... mmap resumed>) = 0x7f943d000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7199] <... close resumed>) = 0 [pid 7201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7200] <... close resumed>) = 0 [pid 5072] mkdir("./352", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 ./strace-static-x86_64: Process 7202 attached [pid 7202] set_robust_list(0x555583d53660, 24 [pid 5074] getdents64(3, [pid 7202] <... set_robust_list resumed>) = 0 [pid 7202] chdir("./347" [pid 7199] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7200] exit_group(0 [pid 7202] <... chdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7200] <... exit_group resumed>) = ? [pid 5074] close(3 [pid 7202] <... prctl resumed>) = 0 [pid 7202] setpgid(0, 0) = 0 [pid 7202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7200] +++ exited with 0 +++ [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7202 [pid 5074] <... close resumed>) = 0 [pid 7199] <... exit_group resumed>) = ? [pid 5074] rmdir("./351" [pid 7202] <... openat resumed>) = 3 [pid 7199] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7200, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7199, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... rmdir resumed>) = 0 [pid 5073] umount2("./352", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] mkdir("./352", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] newfstatat(3, "", [pid 7202] write(3, "1000", 4 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./351", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7202] <... write resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7202] close(3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./352/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7202] <... close resumed>) = 0 [pid 7201] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./352/binderfs", [pid 5071] newfstatat(3, "", [pid 7202] symlink("/dev/binderfs", "./binderfs" [pid 7201] munmap(0x7f943d000000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7202] <... symlink resumed>) = 0 [pid 7201] <... munmap resumed>) = 0 [pid 5073] unlink("./352/binderfs" [pid 5071] getdents64(3, [pid 7202] memfd_create("syzkaller", 0 [pid 5073] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./351/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7202] <... memfd_create resumed>) = 3 [pid 7201] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./351/binderfs", [pid 7202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7201] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7202] <... mmap resumed>) = 0x7f943d000000 [pid 7201] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] unlink("./351/binderfs" [pid 5073] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./352/file1", [pid 5072] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7202] <... write resumed>) = 524288 [pid 5073] openat(AT_FDCWD, "./352/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] close(3 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7203 [pid 5071] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7203 attached [pid 5073] close(4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./351/file1", [pid 5074] <... ioctl resumed>) = 0 [pid 5073] rmdir("./352/file1" [pid 7203] set_robust_list(0x555583d53660, 24 [pid 7201] <... ioctl resumed>) = 0 [pid 7203] <... set_robust_list resumed>) = 0 [pid 7201] close(3 [pid 7203] chdir("./352" [pid 7201] <... close resumed>) = 0 [pid 7201] close(4) = 0 [pid 7203] <... chdir resumed>) = 0 [pid 7201] mkdir("./file1", 0777 [pid 7203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7201] <... mkdir resumed>) = 0 [pid 7203] <... prctl resumed>) = 0 [pid 7202] munmap(0x7f943d000000, 138412032 [pid 7203] setpgid(0, 0) = 0 [pid 7202] <... munmap resumed>) = 0 [pid 7201] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 7203] write(3, "1000", 4 [pid 7202] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7203] <... write resumed>) = 4 [pid 7202] <... openat resumed>) = 4 [pid 5074] close(3 [pid 5073] getdents64(3, [pid 5071] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7203] close(3 [pid 7201] <... mount resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7201] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 263.256462][ T7201] loop4: detected capacity change from 0 to 1024 [pid 5073] close(3 [pid 5071] openat(AT_FDCWD, "./351/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7201] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 7203] <... close resumed>) = 0 [pid 7201] chdir("./file1" [pid 5071] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7204 attached [pid 7203] symlink("/dev/binderfs", "./binderfs" [pid 7202] ioctl(4, LOOP_SET_FD, 3 [pid 7201] <... chdir resumed>) = 0 [pid 5073] rmdir("./352" [pid 5071] newfstatat(4, "", [pid 7204] set_robust_list(0x555583d53660, 24 [pid 7203] <... symlink resumed>) = 0 [pid 7202] <... ioctl resumed>) = 0 [pid 7201] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7204 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7204] <... set_robust_list resumed>) = 0 [pid 7203] memfd_create("syzkaller", 0 [pid 5071] getdents64(4, [pid 5073] mkdir("./353", 0777 [pid 7203] <... memfd_create resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7204] chdir("./352" [pid 7201] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... mkdir resumed>) = 0 [pid 5071] getdents64(4, [pid 7203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7204] <... chdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7203] <... mmap resumed>) = 0x7f943d000000 [pid 7201] truncate("./file1", 0 [pid 5071] close(4 [pid 7204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7204] setpgid(0, 0 [pid 5071] rmdir("./351/file1" [pid 7204] <... setpgid resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 7204] <... openat resumed>) = 3 [pid 7204] write(3, "1000", 4 [pid 5071] getdents64(3, [pid 7204] <... write resumed>) = 4 [pid 7204] close(3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7204] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7204] symlink("/dev/binderfs", "./binderfs" [pid 7201] <... truncate resumed>) = 0 [pid 7201] memfd_create("syzkaller", 0) = 4 [pid 7201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] rmdir("./351" [pid 7204] <... symlink resumed>) = 0 [pid 7201] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7204] memfd_create("syzkaller", 0 [pid 7202] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 7202] <... close resumed>) = 0 [pid 7202] close(4) = 0 [pid 7202] mkdir("./file1", 0777 [pid 7204] <... memfd_create resumed>) = 3 [pid 7202] <... mkdir resumed>) = 0 [pid 5071] mkdir("./352", 0777 [ 263.325165][ T7202] loop5: detected capacity change from 0 to 1024 [pid 7204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... mkdir resumed>) = 0 [pid 7202] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7203] <... write resumed>) = 524288 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7203] munmap(0x7f943d000000, 138412032) = 0 [pid 7202] <... mount resumed>) = 0 [pid 7202] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7201] <... write resumed>) = 524288 [pid 7203] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7202] <... openat resumed>) = 3 [pid 7203] <... openat resumed>) = 4 [pid 7202] chdir("./file1" [pid 7203] ioctl(4, LOOP_SET_FD, 3 [pid 7202] <... chdir resumed>) = 0 [pid 7203] <... ioctl resumed>) = 0 [pid 7202] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... ioctl resumed>) = 0 [pid 7201] munmap(0x7f943d000000, 138412032) = 0 [pid 7201] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7201] close(4 [pid 7204] <... write resumed>) = 524288 [pid 7201] <... close resumed>) = 0 [pid 5073] close(3 [pid 7202] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7202] truncate("./file1", 0 [pid 7203] close(3 [pid 7201] exit_group(0 [pid 5073] <... close resumed>) = 0 [pid 7204] munmap(0x7f943d000000, 138412032 [pid 7202] <... truncate resumed>) = 0 [pid 7202] memfd_create("syzkaller", 0) = 4 [pid 7204] <... munmap resumed>) = 0 [pid 7202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7203] <... close resumed>) = 0 [pid 7202] <... mmap resumed>) = 0x7f943d000000 [pid 7203] close(4 [pid 7202] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7201] <... exit_group resumed>) = ? [pid 7203] <... close resumed>) = 0 ./strace-static-x86_64: Process 7205 attached [pid 7204] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7205 [pid 7203] mkdir("./file1", 0777 [pid 7205] set_robust_list(0x555583d53660, 24 [pid 7204] <... openat resumed>) = 4 [pid 7203] <... mkdir resumed>) = 0 [ 263.404201][ T7203] loop1: detected capacity change from 0 to 1024 [pid 7201] +++ exited with 0 +++ [pid 7205] <... set_robust_list resumed>) = 0 [pid 7204] ioctl(4, LOOP_SET_FD, 3 [pid 7203] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... ioctl resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7201, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7202] <... write resumed>) = 524288 [pid 5075] umount2("./350", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./350/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./350/binderfs") = 0 [pid 5075] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7205] chdir("./353") = 0 [pid 5071] close(3 [pid 7205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... close resumed>) = 0 [pid 7205] <... prctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7203] <... mount resumed>) = 0 [pid 7203] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7205] setpgid(0, 0 [pid 7203] chdir("./file1"./strace-static-x86_64: Process 7206 attached [pid 7205] <... setpgid resumed>) = 0 [pid 7203] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7206] set_robust_list(0x555583d53660, 24 [pid 7203] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7202] munmap(0x7f943d000000, 138412032 [pid 7206] <... set_robust_list resumed>) = 0 [pid 7205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7204] <... ioctl resumed>) = 0 [pid 7203] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7202] <... munmap resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7206 [pid 7206] chdir("./352" [pid 7203] truncate("./file1", 0 [pid 5075] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7204] close(3 [pid 7206] <... chdir resumed>) = 0 [pid 7205] <... openat resumed>) = 3 [pid 7202] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7205] write(3, "1000", 4 [pid 7204] <... close resumed>) = 0 [pid 7202] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(AT_FDCWD, "./350/file1", [pid 7206] <... prctl resumed>) = 0 [pid 7205] <... write resumed>) = 4 [pid 7204] close(4 [pid 7202] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7206] setpgid(0, 0 [pid 7205] close(3 [pid 7204] <... close resumed>) = 0 [pid 7203] <... truncate resumed>) = 0 [pid 7202] <... close resumed>) = 0 [pid 7206] <... setpgid resumed>) = 0 [pid 7203] memfd_create("syzkaller", 0 [pid 7206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7205] <... close resumed>) = 0 [pid 7204] mkdir("./file1", 0777 [pid 7203] <... memfd_create resumed>) = 4 [pid 7203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7206] <... openat resumed>) = 3 [pid 7205] symlink("/dev/binderfs", "./binderfs" [pid 7204] <... mkdir resumed>) = 0 [pid 7203] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7205] <... symlink resumed>) = 0 [pid 7206] write(3, "1000", 4 [pid 5075] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7206] <... write resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7206] close(3 [pid 5075] openat(AT_FDCWD, "./350/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7206] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 7206] symlink("/dev/binderfs", "./binderfs" [pid 5075] newfstatat(4, "", [pid 7206] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7206] memfd_create("syzkaller", 0 [pid 7205] memfd_create("syzkaller", 0 [pid 7204] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] getdents64(4, [pid 7206] <... memfd_create resumed>) = 3 [pid 7202] exit_group(0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7202] <... exit_group resumed>) = ? [pid 5075] getdents64(4, [pid 7206] <... mmap resumed>) = 0x7f943d000000 [pid 7205] <... memfd_create resumed>) = 3 [ 263.471464][ T7204] loop3: detected capacity change from 0 to 1024 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7203] <... write resumed>) = 524288 [pid 5075] close(4 [pid 7205] <... mmap resumed>) = 0x7f943d000000 [pid 7202] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./350/file1" [pid 7206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7202, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] <... rmdir resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5076] umount2("./347", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./350" [pid 5076] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] mkdir("./351", 0777) = 0 [pid 5076] newfstatat(3, "", [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7203] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7206] <... write resumed>) = 524288 [pid 7203] <... munmap resumed>) = 0 [pid 5076] umount2("./347/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./347/binderfs", [pid 7205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./347/binderfs") = 0 [pid 7203] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7204] <... mount resumed>) = 0 [pid 7203] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7204] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7203] close(4 [pid 7205] <... write resumed>) = 524288 [pid 7204] <... openat resumed>) = 3 [pid 7203] <... close resumed>) = 0 [pid 7206] munmap(0x7f943d000000, 138412032 [pid 7205] munmap(0x7f943d000000, 138412032 [pid 7204] chdir("./file1" [pid 7206] <... munmap resumed>) = 0 [pid 7205] <... munmap resumed>) = 0 [pid 7204] <... chdir resumed>) = 0 [pid 7204] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = 0 [pid 7204] truncate("./file1", 0 [pid 7206] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7206] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7206] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(AT_FDCWD, "./347/file1", [pid 7205] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7203] exit_group(0) = ? [pid 7205] <... openat resumed>) = 4 [pid 7203] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7205] ioctl(4, LOOP_SET_FD, 3 [pid 5076] umount2("./347/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7203, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./352", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./347/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", [pid 5076] newfstatat(4, "", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5076] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] umount2("./352/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(AT_FDCWD, "./352/binderfs", [pid 5076] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5072] unlink("./352/binderfs" [pid 5076] rmdir("./347/file1" [pid 5072] <... unlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5076] close(3) = 0 [pid 5075] close(3 [pid 5076] rmdir("./347" [pid 7205] <... ioctl resumed>) = 0 [pid 7204] <... truncate resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] mkdir("./348", 0777 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7207 attached [pid 7206] <... ioctl resumed>) = 0 [pid 7205] close(3 [pid 7204] memfd_create("syzkaller", 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7205] <... close resumed>) = 0 [pid 7204] <... memfd_create resumed>) = 4 [pid 7205] close(4 [ 263.578697][ T7206] loop0: detected capacity change from 0 to 1024 [ 263.596570][ T7205] loop2: detected capacity change from 0 to 1024 [pid 7204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7205] <... close resumed>) = 0 [pid 7207] set_robust_list(0x555583d53660, 24 [pid 7206] close(3 [pid 7204] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7207 [pid 5072] newfstatat(AT_FDCWD, "./352/file1", [pid 7205] mkdir("./file1", 0777 [pid 7206] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7205] <... mkdir resumed>) = 0 [pid 7206] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7206] <... close resumed>) = 0 [pid 7206] mkdir("./file1", 0777 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7206] <... mkdir resumed>) = 0 [pid 7206] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] openat(AT_FDCWD, "./352/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7205] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7207] <... set_robust_list resumed>) = 0 [pid 7206] <... mount resumed>) = 0 [pid 7204] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] newfstatat(4, "", [pid 7206] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7207] chdir("./351") = 0 [pid 7206] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7205] <... mount resumed>) = 0 [pid 5072] getdents64(4, [pid 7207] <... prctl resumed>) = 0 [pid 7206] chdir("./file1" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7207] setpgid(0, 0 [pid 7206] <... chdir resumed>) = 0 [pid 5072] getdents64(4, [pid 7207] <... setpgid resumed>) = 0 [pid 7206] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7206] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(4 [pid 7206] truncate("./file1", 0 [pid 7205] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... close resumed>) = 0 [pid 7207] <... openat resumed>) = 3 [pid 7206] <... truncate resumed>) = 0 [pid 7205] <... openat resumed>) = 3 [pid 5072] rmdir("./352/file1" [pid 7207] write(3, "1000", 4 [pid 7206] memfd_create("syzkaller", 0 [pid 7205] chdir("./file1" [pid 7207] <... write resumed>) = 4 [pid 7204] <... write resumed>) = 524288 [pid 7207] close(3 [pid 7205] <... chdir resumed>) = 0 [pid 7207] <... close resumed>) = 0 [pid 7205] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7204] munmap(0x7f943d000000, 138412032 [pid 7207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7204] <... munmap resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7207] memfd_create("syzkaller", 0 [pid 7204] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7207] <... memfd_create resumed>) = 3 [pid 7204] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7205] truncate("./file1", 0 [pid 7204] close(4 [pid 7206] <... memfd_create resumed>) = 4 [pid 7206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7206] <... mmap resumed>) = 0x7f943d000000 [pid 7206] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] getdents64(3, [pid 7207] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./352") = 0 [pid 5072] mkdir("./353", 0777 [pid 7204] <... close resumed>) = 0 [pid 5076] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7208 attached [pid 7208] set_robust_list(0x555583d53660, 24 [pid 7207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7205] <... truncate resumed>) = 0 [pid 7204] exit_group(0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7208 [pid 7208] <... set_robust_list resumed>) = 0 [pid 7205] memfd_create("syzkaller", 0 [pid 7204] <... exit_group resumed>) = ? [pid 7206] <... write resumed>) = 524288 [pid 7204] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7204, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7208] chdir("./348" [pid 7205] <... memfd_create resumed>) = 4 [pid 7208] <... chdir resumed>) = 0 [pid 7208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7208] setpgid(0, 0 [pid 7205] <... mmap resumed>) = 0x7f943d000000 [pid 5074] umount2("./352", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7208] <... setpgid resumed>) = 0 [pid 7205] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 3 [pid 7208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7207] <... write resumed>) = 524288 [pid 7206] munmap(0x7f943d000000, 138412032 [pid 5074] newfstatat(3, "", [pid 7208] <... openat resumed>) = 3 [pid 7207] munmap(0x7f943d000000, 138412032 [pid 7206] <... munmap resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7208] write(3, "1000", 4 [pid 7207] <... munmap resumed>) = 0 [pid 5074] getdents64(3, [pid 7206] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... ioctl resumed>) = 0 [pid 7208] <... write resumed>) = 4 [pid 7207] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7205] <... write resumed>) = 524288 [pid 7207] <... openat resumed>) = 4 [pid 7208] close(3 [pid 7207] ioctl(4, LOOP_SET_FD, 3 [pid 7205] munmap(0x7f943d000000, 138412032 [pid 5074] umount2("./352/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./352/binderfs") = 0 [pid 5074] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7206] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7206] close(4 [pid 7208] <... close resumed>) = 0 [pid 7206] <... close resumed>) = 0 [pid 7207] <... ioctl resumed>) = 0 [pid 7205] <... munmap resumed>) = 0 [pid 7208] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... umount2 resumed>) = 0 [pid 5072] close(3 [pid 7207] close(3 [pid 7205] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7208] <... symlink resumed>) = 0 [pid 7207] <... close resumed>) = 0 [pid 7206] exit_group(0 [pid 5072] <... close resumed>) = 0 [pid 7205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7205] close(4 [pid 7207] close(4 [pid 7206] <... exit_group resumed>) = ? [pid 5074] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7207] <... close resumed>) = 0 [pid 7206] +++ exited with 0 +++ [pid 7205] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./352/file1", [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7209 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7209 attached [pid 5074] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7206, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7207] mkdir("./file1", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7209] set_robust_list(0x555583d53660, 24 [pid 5074] openat(AT_FDCWD, "./352/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7209] <... set_robust_list resumed>) = 0 [pid 7207] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7209] chdir("./353") = 0 [pid 7207] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./352", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] getdents64(4, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7209] <... prctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7209] setpgid(0, 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7209] <... setpgid resumed>) = 0 [pid 5074] close(4 [pid 7209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7209] <... openat resumed>) = 3 [pid 5074] rmdir("./352/file1" [pid 7209] write(3, "1000", 4 [pid 7208] memfd_create("syzkaller", 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 7209] <... write resumed>) = 4 [pid 5074] getdents64(3, [pid 7209] close(3 [pid 7208] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7209] <... close resumed>) = 0 [pid 7208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5071] getdents64(3, [pid 7209] symlink("/dev/binderfs", "./binderfs" [pid 7208] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... close resumed>) = 0 [pid 7209] <... symlink resumed>) = 0 [pid 5074] rmdir("./352" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7205] exit_group(0 [pid 5074] <... rmdir resumed>) = 0 [pid 7205] <... exit_group resumed>) = ? [pid 5074] mkdir("./353", 0777 [pid 5071] umount2("./352/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 7209] memfd_create("syzkaller", 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7209] <... memfd_create resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 7209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7205] +++ exited with 0 +++ [ 263.766336][ T7207] loop4: detected capacity change from 0 to 1024 [pid 5071] newfstatat(AT_FDCWD, "./352/binderfs", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7205, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7207] <... mount resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./352/binderfs" [pid 5073] umount2("./353", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7207] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = 0 [pid 5073] umount2("./353/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./353/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./352/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./352/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", [pid 7208] <... write resumed>) = 524288 [pid 7207] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./353/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7207] chdir("./file1" [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7207] <... chdir resumed>) = 0 [pid 5071] getdents64(4, [pid 5073] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7207] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 7207] truncate("./file1", 0 [pid 7208] munmap(0x7f943d000000, 138412032 [pid 5071] rmdir("./352/file1") = 0 [pid 7209] <... write resumed>) = 524288 [pid 7208] <... munmap resumed>) = 0 [pid 5071] getdents64(3, [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7207] <... truncate resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7209] munmap(0x7f943d000000, 138412032 [pid 5071] rmdir("./352" [pid 7208] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7207] memfd_create("syzkaller", 0 [pid 5073] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 7207] <... memfd_create resumed>) = 4 [pid 7207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7209] <... munmap resumed>) = 0 [pid 7208] <... openat resumed>) = 4 [pid 7207] <... mmap resumed>) = 0x7f943d000000 [pid 5073] newfstatat(AT_FDCWD, "./353/file1", [pid 5071] mkdir("./353", 0777 [pid 7208] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7209] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] close(3 [pid 7209] <... openat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 7209] ioctl(4, LOOP_SET_FD, 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 7208] <... ioctl resumed>) = 0 [pid 7207] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7208] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./353/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7208] <... close resumed>) = 0 [pid 7208] close(4 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7210 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7208] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4./strace-static-x86_64: Process 7210 attached ) = 0 [pid 5073] rmdir("./353/file1" [pid 7208] mkdir("./file1", 0777 [pid 7210] set_robust_list(0x555583d53660, 24) = 0 [pid 7210] chdir("./353" [pid 5073] <... rmdir resumed>) = 0 [pid 7210] <... chdir resumed>) = 0 [pid 7210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7208] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, [pid 7210] <... prctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7210] setpgid(0, 0 [pid 5073] close(3) = 0 [pid 7210] <... setpgid resumed>) = 0 [pid 5073] rmdir("./353" [pid 7210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7208] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7210] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 7210] write(3, "1000", 4 [pid 5073] mkdir("./354", 0777 [pid 7210] <... write resumed>) = 4 [pid 7210] close(3 [pid 7209] <... ioctl resumed>) = 0 [pid 7210] <... close resumed>) = 0 [pid 7209] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 7210] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7209] <... close resumed>) = 0 [pid 7209] close(4 [pid 7210] memfd_create("syzkaller", 0 [pid 7209] <... close resumed>) = 0 [pid 7209] mkdir("./file1", 0777 [pid 7210] <... memfd_create resumed>) = 3 [pid 7209] <... mkdir resumed>) = 0 [pid 7210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7209] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7208] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7207] <... write resumed>) = 524288 [pid 7208] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 7208] <... openat resumed>) = 3 [pid 7208] chdir("./file1" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7208] <... chdir resumed>) = 0 [pid 7207] munmap(0x7f943d000000, 138412032) = 0 [pid 7208] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7207] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7208] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7207] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7208] truncate("./file1", 0 [pid 7209] <... mount resumed>) = 0 [ 263.873564][ T7208] loop5: detected capacity change from 0 to 1024 [ 263.878607][ T7209] loop1: detected capacity change from 0 to 1024 [pid 7209] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7207] close(4 [pid 7209] chdir("./file1" [pid 7210] <... write resumed>) = 524288 [pid 7209] <... chdir resumed>) = 0 [pid 7208] <... truncate resumed>) = 0 [pid 7207] <... close resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7209] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7209] truncate("./file1", 0 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7209] <... truncate resumed>) = 0 [pid 7209] memfd_create("syzkaller", 0) = 4 [pid 7208] memfd_create("syzkaller", 0 [pid 7209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7208] <... memfd_create resumed>) = 4 [pid 7208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7207] exit_group(0./strace-static-x86_64: Process 7211 attached [pid 7210] munmap(0x7f943d000000, 138412032 [pid 7209] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7208] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... ioctl resumed>) = 0 [pid 7211] set_robust_list(0x555583d53660, 24 [pid 7210] <... munmap resumed>) = 0 [pid 7209] <... write resumed>) = 524288 [pid 7208] <... write resumed>) = 524288 [pid 7207] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7211 [pid 7211] <... set_robust_list resumed>) = 0 [pid 7207] +++ exited with 0 +++ [pid 7211] chdir("./353" [pid 7210] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7207, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7211] <... chdir resumed>) = 0 [pid 7210] <... openat resumed>) = 4 [pid 5075] umount2("./351", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7211] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7210] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7211] <... prctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7211] setpgid(0, 0 [pid 5075] <... openat resumed>) = 3 [pid 7211] <... setpgid resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 7211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 7211] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 7211] write(3, "1000", 4 [pid 7208] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7212 attached [pid 7211] <... write resumed>) = 4 [pid 7208] <... munmap resumed>) = 0 [pid 7211] close(3) = 0 [pid 7211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7211] memfd_create("syzkaller", 0 [pid 7209] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./351/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7209] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./351/binderfs") = 0 [pid 7211] <... memfd_create resumed>) = 3 [pid 7209] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7212] set_robust_list(0x555583d53660, 24 [pid 7209] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7208] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7212 [pid 7211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7208] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7212] <... set_robust_list resumed>) = 0 [pid 7212] chdir("./354" [pid 7211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7208] close(4 [pid 7209] close(4 [pid 7212] <... chdir resumed>) = 0 [pid 7209] <... close resumed>) = 0 [pid 7212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7210] <... ioctl resumed>) = 0 [pid 7208] <... close resumed>) = 0 [pid 7212] <... prctl resumed>) = 0 [pid 7210] close(3 [pid 5075] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7212] setpgid(0, 0 [pid 7210] <... close resumed>) = 0 [pid 7208] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7212] <... setpgid resumed>) = 0 [pid 7210] close(4 [pid 7208] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./351/file1", [pid 7212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7210] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7212] <... openat resumed>) = 3 [pid 7210] mkdir("./file1", 0777 [pid 7208] +++ exited with 0 +++ [pid 5075] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7212] write(3, "1000", 4 [pid 7210] <... mkdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7208, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 264.002795][ T7210] loop3: detected capacity change from 0 to 1024 [pid 7210] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7212] <... write resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./351/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7212] close(3 [pid 5075] <... openat resumed>) = 4 [pid 7212] <... close resumed>) = 0 [pid 7212] symlink("/dev/binderfs", "./binderfs" [pid 7209] exit_group(0 [pid 5075] newfstatat(4, "", [pid 7209] <... exit_group resumed>) = ? [pid 5076] umount2("./348", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7212] <... symlink resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] getdents64(4, [pid 7212] memfd_create("syzkaller", 0 [pid 5076] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7212] <... memfd_create resumed>) = 3 [pid 7211] <... write resumed>) = 524288 [pid 7209] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] close(4 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7209, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7212] <... mmap resumed>) = 0x7f943d000000 [pid 7210] <... mount resumed>) = 0 [pid 5076] umount2("./348/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./353", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7211] munmap(0x7f943d000000, 138412032 [pid 7210] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] rmdir("./351/file1" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7211] <... munmap resumed>) = 0 [pid 7210] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7210] chdir("./file1" [pid 5076] newfstatat(AT_FDCWD, "./348/binderfs", [pid 5075] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 7210] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(3, "", [pid 7211] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7210] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] unlink("./348/binderfs" [pid 5075] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7211] <... openat resumed>) = 4 [pid 7210] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 7211] ioctl(4, LOOP_SET_FD, 3 [pid 7210] truncate("./file1", 0 [pid 5075] rmdir("./351" [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./353/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7210] <... truncate resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] unlink("./353/binderfs" [pid 7210] memfd_create("syzkaller", 0 [pid 5072] <... unlink resumed>) = 0 [pid 7210] <... memfd_create resumed>) = 4 [pid 5072] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5075] mkdir("./352", 0777 [pid 7210] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] newfstatat(AT_FDCWD, "./353/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7211] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5072] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7211] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7211] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./353/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7211] close(4) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7211] mkdir("./file1", 0777 [pid 5072] newfstatat(4, "", [pid 7211] <... mkdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7212] <... write resumed>) = 524288 [pid 7210] <... write resumed>) = 524288 [pid 5072] getdents64(4, [pid 5076] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7211] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] newfstatat(AT_FDCWD, "./348/file1", [pid 5072] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7212] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./348/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7212] <... munmap resumed>) = 0 [pid 7211] <... mount resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./348/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7211] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... openat resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 7212] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7211] <... openat resumed>) = 3 [pid 5076] newfstatat(4, "", [pid 5075] <... ioctl resumed>) = 0 [pid 5072] rmdir("./353/file1" [pid 7212] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 7211] chdir("./file1" [pid 5072] <... rmdir resumed>) = 0 [ 264.081652][ T7211] loop0: detected capacity change from 0 to 1024 [pid 7211] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(3, [pid 7212] ioctl(4, LOOP_SET_FD, 3 [pid 7211] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7211] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(4, [pid 5072] close(3 [pid 7211] truncate("./file1", 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./353") = 0 [pid 5072] mkdir("./354", 0777 [pid 7210] munmap(0x7f943d000000, 138412032 [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7210] <... munmap resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7210] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7210] close(4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5075] close(3 [pid 7210] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./348/file1" [pid 7211] <... truncate resumed>) = 0 [pid 7211] memfd_create("syzkaller", 0) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 7211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(3, [pid 7211] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./348" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... rmdir resumed>) = 0 [pid 7211] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] mkdir("./349", 0777 [pid 7212] <... ioctl resumed>) = 0 [pid 7210] exit_group(0 [pid 5076] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7213 attached [pid 7213] set_robust_list(0x555583d53660, 24) = 0 [pid 7213] chdir("./352") = 0 [pid 7213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7213] setpgid(0, 0 [pid 7212] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7213] <... setpgid resumed>) = 0 [pid 7212] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7212] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7212] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7213 [pid 7212] mkdir("./file1", 0777 [pid 7210] <... exit_group resumed>) = ? [pid 7212] <... mkdir resumed>) = 0 [pid 7210] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7210, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 264.143502][ T7212] loop2: detected capacity change from 0 to 1024 [pid 7212] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7213] <... openat resumed>) = 3 [pid 7213] write(3, "1000", 4 [pid 5074] umount2("./353", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7213] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7213] close(3 [pid 5074] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7213] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 7213] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7213] <... symlink resumed>) = 0 [pid 5074] getdents64(3, [pid 7213] memfd_create("syzkaller", 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./353/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7211] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./353/binderfs", [pid 7213] <... memfd_create resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7211] munmap(0x7f943d000000, 138412032 [pid 5074] unlink("./353/binderfs" [pid 5072] close(3 [pid 7213] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... unlink resumed>) = 0 [pid 7213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... close resumed>) = 0 [pid 7211] <... munmap resumed>) = 0 [pid 5074] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7214 attached [pid 7214] set_robust_list(0x555583d53660, 24 [pid 7211] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7214] <... set_robust_list resumed>) = 0 [pid 7214] chdir("./354" [pid 7211] close(4 [pid 7212] <... mount resumed>) = 0 [pid 7211] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7214 [pid 7214] <... chdir resumed>) = 0 [pid 7214] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7212] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7214] setpgid(0, 0 [pid 7213] <... write resumed>) = 524288 [pid 7212] <... openat resumed>) = 3 [pid 5076] <... ioctl resumed>) = 0 [pid 7212] chdir("./file1" [pid 7214] <... setpgid resumed>) = 0 [pid 7214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7212] <... chdir resumed>) = 0 [pid 5074] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7212] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7214] <... openat resumed>) = 3 [pid 7212] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./353/file1", [pid 7212] truncate("./file1", 0 [pid 7214] write(3, "1000", 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7214] <... write resumed>) = 4 [pid 7214] close(3 [pid 7211] exit_group(0 [pid 7214] <... close resumed>) = 0 [pid 5074] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7214] symlink("/dev/binderfs", "./binderfs" [pid 7211] <... exit_group resumed>) = ? [pid 7214] <... symlink resumed>) = 0 [pid 7211] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7211, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7214] memfd_create("syzkaller", 0) = 3 [pid 5071] umount2("./353", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 7214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7214] <... mmap resumed>) = 0x7f943d000000 [pid 5074] openat(AT_FDCWD, "./353/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7213] munmap(0x7f943d000000, 138412032 [pid 7212] <... truncate resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5071] getdents64(3, [pid 7214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7213] <... munmap resumed>) = 0 [pid 7212] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 5074] newfstatat(4, "", [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./353/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./353/binderfs" [pid 7212] <... memfd_create resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(4, [pid 7213] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7213] <... openat resumed>) = 4 [pid 7213] ioctl(4, LOOP_SET_FD, 3 [pid 7212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7215 attached [pid 7212] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7215 [pid 5074] getdents64(4, [pid 7215] set_robust_list(0x555583d53660, 24 [pid 7214] <... write resumed>) = 524288 [pid 7212] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 7215] <... set_robust_list resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./353/file1" [pid 7215] chdir("./349") = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] getdents64(3, [pid 7215] <... prctl resumed>) = 0 [pid 7215] setpgid(0, 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7215] <... setpgid resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./353/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./353/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7215] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 4 [pid 7214] munmap(0x7f943d000000, 138412032 [pid 7213] <... ioctl resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 5074] close(3 [pid 7215] write(3, "1000", 4 [pid 7213] close(3 [pid 5074] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7215] <... write resumed>) = 4 [pid 7213] <... close resumed>) = 0 [pid 5074] rmdir("./353" [pid 7213] close(4 [pid 5071] getdents64(4, [pid 7214] <... munmap resumed>) = 0 [pid 7213] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7213] mkdir("./file1", 0777) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7213] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... close resumed>) = 0 [ 264.276968][ T7213] loop4: detected capacity change from 0 to 1024 [pid 7215] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] rmdir("./353/file1") = 0 [pid 7214] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] getdents64(3, [pid 7214] <... openat resumed>) = 4 [pid 7214] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7215] <... close resumed>) = 0 [pid 7212] <... write resumed>) = 524288 [pid 5074] mkdir("./354", 0777 [pid 5071] close(3 [pid 7215] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7215] <... symlink resumed>) = 0 [pid 7212] munmap(0x7f943d000000, 138412032 [pid 5074] <... openat resumed>) = 3 [pid 5071] rmdir("./353" [pid 7215] memfd_create("syzkaller", 0 [pid 7213] <... mount resumed>) = 0 [pid 7212] <... munmap resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... rmdir resumed>) = 0 [pid 7213] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] mkdir("./354", 0777 [pid 7215] <... memfd_create resumed>) = 3 [pid 7215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7213] <... openat resumed>) = 3 [pid 7212] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] <... mkdir resumed>) = 0 [pid 7213] chdir("./file1") = 0 [pid 7213] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7215] <... mmap resumed>) = 0x7f943d000000 [pid 7213] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7212] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... openat resumed>) = 3 [pid 7212] close(4 [pid 7213] truncate("./file1", 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7213] <... truncate resumed>) = 0 [pid 7213] memfd_create("syzkaller", 0) = 4 [pid 7213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7213] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7212] <... close resumed>) = 0 [pid 7214] <... ioctl resumed>) = 0 [pid 7214] close(3) = 0 [pid 7214] close(4) = 0 [pid 7214] mkdir("./file1", 0777) = 0 [pid 7214] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7212] exit_group(0) = ? [pid 7214] <... mount resumed>) = 0 [pid 7214] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 264.319876][ T7214] loop1: detected capacity change from 0 to 1024 [pid 7215] <... write resumed>) = 524288 [pid 7213] <... write resumed>) = 524288 [pid 7212] +++ exited with 0 +++ [pid 5074] <... ioctl resumed>) = 0 [pid 7214] chdir("./file1" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7212, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7214] <... chdir resumed>) = 0 [pid 7214] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7215] munmap(0x7f943d000000, 138412032 [pid 7214] truncate("./file1", 0 [pid 5073] umount2("./354", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7214] <... truncate resumed>) = 0 [pid 7213] munmap(0x7f943d000000, 138412032 [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... ioctl resumed>) = 0 [pid 7215] <... munmap resumed>) = 0 [pid 7214] memfd_create("syzkaller", 0 [pid 7213] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7214] <... memfd_create resumed>) = 4 [pid 7214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7213] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] newfstatat(3, "", [pid 7214] <... mmap resumed>) = 0x7f943d000000 [pid 7213] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7215] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7213] close(4 [pid 5073] getdents64(3, [pid 7215] <... openat resumed>) = 4 [pid 7213] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./354/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7215] ioctl(4, LOOP_SET_FD, 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7216 attached [pid 7214] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(AT_FDCWD, "./354/binderfs", [pid 5071] close(3 [pid 7216] set_robust_list(0x555583d53660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7216 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7216] <... set_robust_list resumed>) = 0 [pid 5073] unlink("./354/binderfs" [pid 5071] <... close resumed>) = 0 [pid 7216] chdir("./354" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7216] <... chdir resumed>) = 0 [pid 7213] exit_group(0 [pid 5073] <... unlink resumed>) = 0 [pid 7216] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7216] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7217 attached [pid 7213] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7217 [pid 7217] set_robust_list(0x555583d53660, 24 [pid 7216] setpgid(0, 0 [pid 7217] <... set_robust_list resumed>) = 0 [pid 7216] <... setpgid resumed>) = 0 [pid 7213] +++ exited with 0 +++ [pid 7217] chdir("./354") = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7213, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./352", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7217] <... prctl resumed>) = 0 [pid 7217] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7217] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... openat resumed>) = 3 [pid 7217] <... openat resumed>) = 3 [pid 7216] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 7217] write(3, "1000", 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7217] <... write resumed>) = 4 [pid 7215] <... ioctl resumed>) = 0 [pid 5075] getdents64(3, [pid 7217] close(3 [pid 7216] write(3, "1000", 4 [pid 7215] close(3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7217] <... close resumed>) = 0 [pid 7216] <... write resumed>) = 4 [pid 7215] <... close resumed>) = 0 [pid 5075] umount2("./352/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7217] symlink("/dev/binderfs", "./binderfs" [pid 7216] close(3 [pid 7215] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7217] <... symlink resumed>) = 0 [pid 7214] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 7217] memfd_create("syzkaller", 0 [pid 7216] <... close resumed>) = 0 [pid 7217] <... memfd_create resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./352/binderfs", [pid 7217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7215] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7217] <... mmap resumed>) = 0x7f943d000000 [pid 7216] symlink("/dev/binderfs", "./binderfs" [pid 7215] mkdir("./file1", 0777 [pid 5075] unlink("./352/binderfs" [pid 5073] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7214] munmap(0x7f943d000000, 138412032 [pid 7216] <... symlink resumed>) = 0 [pid 7215] <... mkdir resumed>) = 0 [pid 7214] <... munmap resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./354/file1", [pid 7216] memfd_create("syzkaller", 0 [pid 7214] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7215] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7216] <... memfd_create resumed>) = 3 [pid 7214] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7214] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./354/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7216] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... openat resumed>) = 4 [pid 7214] <... close resumed>) = 0 [ 264.410977][ T7215] loop5: detected capacity change from 0 to 1024 [pid 5073] newfstatat(4, "", [pid 7216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7215] <... mount resumed>) = 0 [pid 7214] exit_group(0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7217] <... write resumed>) = 524288 [pid 5073] getdents64(4, [pid 5075] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7215] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 7215] <... openat resumed>) = 3 [pid 7214] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./352/file1", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7215] chdir("./file1" [pid 5073] close(4 [pid 7217] munmap(0x7f943d000000, 138412032 [pid 7215] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 7215] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] rmdir("./354/file1" [pid 7215] truncate("./file1", 0 [pid 5075] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7217] <... munmap resumed>) = 0 [pid 7215] <... truncate resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7215] memfd_create("syzkaller", 0) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 7215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7217] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7216] <... write resumed>) = 524288 [pid 5075] openat(AT_FDCWD, "./352/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7214] +++ exited with 0 +++ [pid 7217] <... openat resumed>) = 4 [pid 7215] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7214, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] umount2("./354", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7217] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 5073] close(3 [pid 7216] munmap(0x7f943d000000, 138412032 [pid 7215] <... write resumed>) = 524288 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... close resumed>) = 0 [pid 5072] umount2("./354/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./354/binderfs", [pid 7216] <... munmap resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5073] rmdir("./354" [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./354/binderfs") = 0 [pid 5072] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7216] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7216] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5073] mkdir("./355", 0777 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7215] munmap(0x7f943d000000, 138412032 [pid 5072] newfstatat(AT_FDCWD, "./354/file1", [pid 5073] <... mkdir resumed>) = 0 [pid 7216] ioctl(4, LOOP_SET_FD, 3 [pid 5075] getdents64(4, [pid 7215] <... munmap resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./354/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7217] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5072] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 7217] close(3 [pid 5075] rmdir("./352/file1" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7217] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7217] close(4 [pid 5075] getdents64(3, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7215] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] close(3 [pid 5072] getdents64(4, [pid 7215] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./354/file1") = 0 [pid 7217] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./352" [pid 7217] mkdir("./file1", 0777 [pid 7215] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 7217] <... mkdir resumed>) = 0 [pid 7216] <... ioctl resumed>) = 0 [pid 5075] mkdir("./353", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./354" [pid 7217] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7216] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7216] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] mkdir("./355", 0777 [pid 7216] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5072] <... mkdir resumed>) = 0 [pid 7216] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7215] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7216] mkdir("./file1", 0777 [pid 7215] exit_group(0 [pid 5072] ioctl(3, LOOP_CLR_FD) = 0 [pid 7215] <... exit_group resumed>) = ? [pid 5072] close(3 [pid 7216] <... mkdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [ 264.505061][ T7217] loop0: detected capacity change from 0 to 1024 [ 264.525215][ T7216] loop3: detected capacity change from 0 to 1024 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7217] <... mount resumed>) = 0 [pid 7216] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7215] +++ exited with 0 +++ [pid 5073] <... ioctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7215, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7218 ./strace-static-x86_64: Process 7218 attached [pid 7217] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7218] set_robust_list(0x555583d53660, 24 [pid 7217] <... openat resumed>) = 3 [pid 7218] <... set_robust_list resumed>) = 0 [pid 7218] chdir("./355") = 0 [pid 7218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7218] setpgid(0, 0 [pid 7217] chdir("./file1" [pid 5076] umount2("./349", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 7218] <... setpgid resumed>) = 0 [pid 7217] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7217] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 7219 attached [pid 5076] <... openat resumed>) = 3 [pid 7219] set_robust_list(0x555583d53660, 24 [pid 7218] write(3, "1000", 4 [pid 7217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(3, "", [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7219 [pid 7219] <... set_robust_list resumed>) = 0 [pid 7218] <... write resumed>) = 4 [pid 7217] truncate("./file1", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7219] chdir("./355" [pid 7218] close(3 [pid 5076] getdents64(3, [pid 5075] <... ioctl resumed>) = 0 [pid 7219] <... chdir resumed>) = 0 [pid 7217] <... truncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7218] <... close resumed>) = 0 [pid 5076] umount2("./349/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7218] symlink("/dev/binderfs", "./binderfs" [pid 7217] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7218] <... symlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./349/binderfs", [pid 7217] <... memfd_create resumed>) = 4 [pid 7219] <... prctl resumed>) = 0 [pid 7218] memfd_create("syzkaller", 0 [pid 7217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7216] <... mount resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7219] setpgid(0, 0 [pid 7218] <... memfd_create resumed>) = 3 [pid 7217] <... mmap resumed>) = 0x7f943d000000 [pid 5076] unlink("./349/binderfs" [pid 7219] <... setpgid resumed>) = 0 [pid 7218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... unlink resumed>) = 0 [pid 7219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7216] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7219] <... openat resumed>) = 3 [pid 7216] <... openat resumed>) = 3 [pid 7219] write(3, "1000", 4 [pid 7216] chdir("./file1" [pid 7219] <... write resumed>) = 4 [pid 7216] <... chdir resumed>) = 0 [pid 7219] close(3 [pid 7216] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7219] <... close resumed>) = 0 [pid 7218] <... mmap resumed>) = 0x7f943d000000 [pid 7216] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 7219] symlink("/dev/binderfs", "./binderfs" [pid 7216] truncate("./file1", 0 [pid 7219] <... symlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7219] memfd_create("syzkaller", 0) = 3 [pid 7219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7216] <... truncate resumed>) = 0 [pid 7218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7217] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7216] memfd_create("syzkaller", 0 [pid 7219] <... write resumed>) = 524288 [pid 7216] <... memfd_create resumed>) = 4 ./strace-static-x86_64: Process 7220 attached [pid 7217] <... write resumed>) = 524288 [pid 7216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7220 [pid 7220] set_robust_list(0x555583d53660, 24 [pid 7216] <... mmap resumed>) = 0x7f943d000000 [pid 7220] <... set_robust_list resumed>) = 0 [pid 7216] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7220] chdir("./353" [pid 7219] munmap(0x7f943d000000, 138412032 [pid 7218] <... write resumed>) = 524288 [pid 7217] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = 0 [pid 7220] <... chdir resumed>) = 0 [pid 7219] <... munmap resumed>) = 0 [pid 7220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7220] setpgid(0, 0) = 0 [pid 7219] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7219] <... openat resumed>) = 4 [pid 7219] ioctl(4, LOOP_SET_FD, 3 [pid 7217] <... munmap resumed>) = 0 [pid 7216] <... write resumed>) = 524288 [pid 7220] <... openat resumed>) = 3 [pid 7218] munmap(0x7f943d000000, 138412032 [pid 7216] munmap(0x7f943d000000, 138412032 [pid 7218] <... munmap resumed>) = 0 [pid 7217] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7216] <... munmap resumed>) = 0 [pid 5076] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7220] write(3, "1000", 4 [pid 7217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7216] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7218] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7217] close(4 [pid 7220] <... write resumed>) = 4 [pid 7216] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./349/file1", [pid 7220] close(3 [pid 7216] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7220] <... close resumed>) = 0 [pid 7218] <... openat resumed>) = 4 [pid 7217] <... close resumed>) = 0 [pid 5076] umount2("./349/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7220] symlink("/dev/binderfs", "./binderfs" [pid 7218] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7220] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./349/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7220] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 4 [pid 7220] <... memfd_create resumed>) = 3 [pid 7220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(4, "", [pid 7220] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7220] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7218] <... ioctl resumed>) = 0 [pid 7217] exit_group(0 [pid 5076] getdents64(4, [pid 7217] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 7219] <... ioctl resumed>) = 0 [pid 7218] close(3 [pid 7217] +++ exited with 0 +++ [pid 7216] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7219] close(3 [pid 7218] <... close resumed>) = 0 [pid 7216] exit_group(0 [pid 5076] close(4 [pid 7219] <... close resumed>) = 0 [pid 7218] close(4 [pid 7216] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7217, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7219] close(4 [pid 7218] <... close resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7219] <... close resumed>) = 0 [pid 7218] mkdir("./file1", 0777 [pid 7219] mkdir("./file1", 0777 [pid 5071] <... restart_syscall resumed>) = 0 [pid 7219] <... mkdir resumed>) = 0 [pid 7218] <... mkdir resumed>) = 0 [pid 7216] +++ exited with 0 +++ [pid 5076] rmdir("./349/file1" [pid 7219] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7218] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7216, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] umount2("./354", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./354", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5071] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] rmdir("./349" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7218] <... mount resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5071] <... openat resumed>) = 3 [pid 7218] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] mkdir("./350", 0777 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] newfstatat(3, "", [pid 7220] <... write resumed>) = 524288 [pid 7218] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] umount2("./354/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7218] chdir("./file1") = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 7218] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./354/binderfs", [pid 7218] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 264.719584][ T7219] loop2: detected capacity change from 0 to 1024 [ 264.745889][ T7218] loop1: detected capacity change from 0 to 1024 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7220] munmap(0x7f943d000000, 138412032 [pid 7218] truncate("./file1", 0 [pid 5074] unlink("./354/binderfs" [pid 5071] umount2("./354/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./354/binderfs", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] unlink("./354/binderfs" [pid 7220] <... munmap resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 7220] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5071] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7220] ioctl(4, LOOP_SET_FD, 3 [pid 7219] <... mount resumed>) = 0 [pid 7219] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7218] <... truncate resumed>) = 0 [pid 7220] <... ioctl resumed>) = 0 [pid 7219] <... openat resumed>) = 3 [pid 7218] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./354/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7220] close(3 [pid 7219] chdir("./file1" [pid 7220] <... close resumed>) = 0 [pid 7219] <... chdir resumed>) = 0 [pid 7218] <... memfd_create resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./354/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7220] close(4 [pid 7219] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 4 [pid 7220] <... close resumed>) = 0 [pid 7219] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... umount2 resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5071] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7220] mkdir("./file1", 0777 [pid 7218] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7220] <... mkdir resumed>) = 0 [pid 7219] truncate("./file1", 0 [pid 5074] newfstatat(4, "", [pid 5071] newfstatat(AT_FDCWD, "./354/file1", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, [pid 5071] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7220] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7219] <... truncate resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./354/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7219] memfd_create("syzkaller", 0 [pid 5074] getdents64(4, [pid 7219] <... memfd_create resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(3 [pid 5074] close(4 [pid 5071] <... openat resumed>) = 4 [pid 7219] <... mmap resumed>) = 0x7f943d000000 [pid 7218] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7219] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] rmdir("./354/file1" [pid 5071] newfstatat(4, "", [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(4, [pid 5074] close(3) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [ 264.811426][ T7220] loop4: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 7221 attached [pid 7220] <... mount resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7221 [pid 5074] rmdir("./354" [pid 5071] getdents64(4, [pid 7221] set_robust_list(0x555583d53660, 24 [pid 7220] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7221] <... set_robust_list resumed>) = 0 [pid 7220] <... openat resumed>) = 3 [pid 7219] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7221] chdir("./350" [pid 7220] chdir("./file1" [pid 5071] close(4 [pid 7221] <... chdir resumed>) = 0 [pid 7220] <... chdir resumed>) = 0 [pid 7221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7220] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7221] <... prctl resumed>) = 0 [pid 7221] setpgid(0, 0 [pid 7220] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7221] <... setpgid resumed>) = 0 [pid 7220] truncate("./file1", 0 [pid 5071] <... close resumed>) = 0 [pid 7221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] rmdir("./354/file1" [pid 7221] <... openat resumed>) = 3 [pid 7221] write(3, "1000", 4 [pid 7220] <... truncate resumed>) = 0 [pid 7221] <... write resumed>) = 4 [pid 7221] close(3 [pid 7218] <... write resumed>) = 524288 [pid 7221] <... close resumed>) = 0 [pid 7220] memfd_create("syzkaller", 0 [pid 7221] symlink("/dev/binderfs", "./binderfs" [pid 5074] mkdir("./355", 0777 [pid 5071] <... rmdir resumed>) = 0 [pid 7221] <... symlink resumed>) = 0 [pid 7220] <... memfd_create resumed>) = 4 [pid 7219] munmap(0x7f943d000000, 138412032 [pid 7221] memfd_create("syzkaller", 0 [pid 7220] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7219] <... munmap resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, [pid 7221] <... memfd_create resumed>) = 3 [pid 7220] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7218] munmap(0x7f943d000000, 138412032 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] close(3 [pid 7219] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7221] <... mmap resumed>) = 0x7f943d000000 [pid 7219] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7218] <... munmap resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... close resumed>) = 0 [pid 7221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7219] close(4 [pid 7218] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] rmdir("./354" [pid 7219] <... close resumed>) = 0 [pid 7221] <... write resumed>) = 524288 [pid 7219] exit_group(0 [pid 7218] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... rmdir resumed>) = 0 [pid 7218] close(4 [pid 5071] mkdir("./355", 0777 [pid 7219] <... exit_group resumed>) = ? [pid 7219] +++ exited with 0 +++ [pid 5071] <... mkdir resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7219, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5073] umount2("./355", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7220] <... write resumed>) = 524288 [pid 7218] <... close resumed>) = 0 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7220] munmap(0x7f943d000000, 138412032 [pid 5073] getdents64(3, [pid 7220] <... munmap resumed>) = 0 [pid 7218] exit_group(0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./355/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7221] munmap(0x7f943d000000, 138412032 [pid 7220] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./355/binderfs", [pid 7220] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7220] close(4 [pid 5073] unlink("./355/binderfs" [pid 7218] <... exit_group resumed>) = ? [pid 7221] <... munmap resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7221] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7221] <... openat resumed>) = 4 [pid 7221] ioctl(4, LOOP_SET_FD, 3 [pid 7218] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7218, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7220] <... close resumed>) = 0 [pid 7221] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7220] exit_group(0 [pid 5073] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7220] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./355/file1", [pid 5072] umount2("./355", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7221] close(3 [pid 7220] +++ exited with 0 +++ [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7221] <... close resumed>) = 0 [pid 5073] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7221] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 7221] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./355/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(3, "", [pid 7221] mkdir("./file1", 0777 [pid 5073] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7221] <... mkdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5072] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] getdents64(4, [pid 5072] umount2("./355/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./355/binderfs", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7221] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] close(4 [pid 5072] unlink("./355/binderfs" [pid 5073] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5073] rmdir("./355/file1" [pid 5072] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7220, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5074] close(3 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./353", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7222 [ 264.960124][ T7221] loop5: detected capacity change from 0 to 1024 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(3, ./strace-static-x86_64: Process 7223 attached ./strace-static-x86_64: Process 7222 attached [pid 5075] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7223] set_robust_list(0x555583d53660, 24 [pid 7222] set_robust_list(0x555583d53660, 24 [pid 5075] newfstatat(3, "", [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7223 [pid 7223] <... set_robust_list resumed>) = 0 [pid 7222] <... set_robust_list resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7222] chdir("./355" [pid 5073] close(3 [pid 7223] chdir("./355" [pid 7222] <... chdir resumed>) = 0 [pid 7221] <... mount resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 7223] <... chdir resumed>) = 0 [pid 7222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7222] setpgid(0, 0 [pid 7221] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] rmdir("./355" [pid 7223] <... prctl resumed>) = 0 [pid 7222] <... setpgid resumed>) = 0 [pid 5075] umount2("./353/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] setpgid(0, 0) = 0 [pid 7222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7221] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./356", 0777 [pid 7223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7222] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./353/binderfs", [pid 5073] <... mkdir resumed>) = 0 [pid 7223] <... openat resumed>) = 3 [pid 7222] write(3, "1000", 4 [pid 7221] chdir("./file1" [pid 5072] <... umount2 resumed>) = 0 [pid 7223] write(3, "1000", 4 [pid 7222] <... write resumed>) = 4 [pid 7221] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7223] <... write resumed>) = 4 [pid 7222] close(3 [pid 7221] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] unlink("./353/binderfs" [pid 5073] <... openat resumed>) = 3 [pid 7223] close(3 [pid 7222] <... close resumed>) = 0 [pid 7222] symlink("/dev/binderfs", "./binderfs" [pid 7223] <... close resumed>) = 0 [pid 7223] symlink("/dev/binderfs", "./binderfs" [pid 7222] <... symlink resumed>) = 0 [pid 7221] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... unlink resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] <... symlink resumed>) = 0 [pid 5075] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./355/file1", [pid 7221] truncate("./file1", 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7223] memfd_create("syzkaller", 0 [pid 5072] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] <... memfd_create resumed>) = 3 [pid 7222] memfd_create("syzkaller", 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7222] <... memfd_create resumed>) = 3 [pid 7221] <... truncate resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./355/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7221] memfd_create("syzkaller", 0 [pid 5072] <... openat resumed>) = 4 [pid 7223] <... mmap resumed>) = 0x7f943d000000 [pid 7222] <... mmap resumed>) = 0x7f943d000000 [pid 7221] <... memfd_create resumed>) = 4 [pid 5075] <... umount2 resumed>) = 0 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 5075] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7221] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(4 [pid 7221] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./355/file1") = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./355") = 0 [pid 5072] mkdir("./356", 0777 [pid 5075] newfstatat(AT_FDCWD, "./353/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7223] <... write resumed>) = 524288 [pid 7221] <... write resumed>) = 524288 [pid 5075] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7223] munmap(0x7f943d000000, 138412032 [pid 7222] <... write resumed>) = 524288 [pid 7221] munmap(0x7f943d000000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7223] <... munmap resumed>) = 0 [pid 7222] munmap(0x7f943d000000, 138412032 [pid 7221] <... munmap resumed>) = 0 [pid 7223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7222] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./353/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(3 [pid 7222] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7221] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7223] <... openat resumed>) = 4 [pid 7221] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7223] ioctl(4, LOOP_SET_FD, 3 [pid 7221] close(4 [pid 5072] <... openat resumed>) = 3 [pid 7221] <... close resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7221] exit_group(0./strace-static-x86_64: Process 7224 attached [pid 7223] <... ioctl resumed>) = 0 [pid 7222] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 7224] set_robust_list(0x555583d53660, 24 [pid 7223] close(3 [pid 7222] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7224 [pid 7224] <... set_robust_list resumed>) = 0 [pid 7223] <... close resumed>) = 0 [pid 7221] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7224] chdir("./356") = 0 [pid 7221] +++ exited with 0 +++ [pid 7224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7221, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7224] <... prctl resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7223] close(4 [pid 5076] umount2("./350", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 7224] setpgid(0, 0 [pid 7223] <... close resumed>) = 0 [pid 7222] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... ioctl resumed>) = 0 [pid 7223] mkdir("./file1", 0777 [pid 7222] close(3 [pid 5075] getdents64(4, [pid 5076] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7224] <... setpgid resumed>) = 0 [pid 7224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7223] <... mkdir resumed>) = 0 [pid 7222] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7222] close(4 [pid 5075] close(4 [pid 7222] <... close resumed>) = 0 [pid 7222] mkdir("./file1", 0777 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 7224] <... openat resumed>) = 3 [pid 7222] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7222] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7224] write(3, "1000", 4 [pid 7223] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] umount2("./350/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 7224] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7224] close(3 [pid 5076] newfstatat(AT_FDCWD, "./350/binderfs", [pid 7224] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7224] symlink("/dev/binderfs", "./binderfs" [pid 5076] unlink("./350/binderfs" [pid 5072] close(3 [pid 7224] <... symlink resumed>) = 0 [pid 7223] <... mount resumed>) = 0 [pid 7222] <... mount resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] rmdir("./353/file1" [pid 5072] <... close resumed>) = 0 [pid 7223] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7222] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7223] <... openat resumed>) = 3 [ 265.131232][ T7223] loop0: detected capacity change from 0 to 1024 [ 265.149917][ T7222] loop3: detected capacity change from 0 to 1024 [pid 7222] chdir("./file1" [pid 5076] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 7223] chdir("./file1" [pid 7222] <... chdir resumed>) = 0 [pid 7223] <... chdir resumed>) = 0 [pid 7222] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7224] memfd_create("syzkaller", 0 [pid 7223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7222] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7224] <... memfd_create resumed>) = 3 [pid 7223] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7222] truncate("./file1", 0 [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7225 attached [pid 7224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7223] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7225] set_robust_list(0x555583d53660, 24 [pid 7224] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7225 [pid 7222] <... truncate resumed>) = 0 [pid 7222] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 7222] <... memfd_create resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 7225] <... set_robust_list resumed>) = 0 [pid 7224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./353" [pid 7225] chdir("./356" [pid 7222] <... mmap resumed>) = 0x7f943d000000 [pid 7225] <... chdir resumed>) = 0 [pid 7222] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 7225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7225] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7225] setpgid(0, 0 [pid 5076] newfstatat(AT_FDCWD, "./350/file1", [pid 7225] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] mkdir("./354", 0777 [pid 7225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7223] <... truncate resumed>) = 0 [pid 5076] umount2("./350/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7225] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 7223] memfd_create("syzkaller", 0 [pid 7225] write(3, "1000", 4 [pid 7224] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "./350/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7225] <... write resumed>) = 4 [pid 7223] <... memfd_create resumed>) = 4 [pid 7222] <... write resumed>) = 524288 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7225] close(3 [pid 5076] <... openat resumed>) = 4 [pid 7225] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 7225] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7225] <... symlink resumed>) = 0 [pid 5076] getdents64(4, [pid 7223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 7223] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] close(4) = 0 [pid 7225] memfd_create("syzkaller", 0 [pid 5076] rmdir("./350/file1" [pid 7225] <... memfd_create resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 7225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(3, [pid 7225] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7223] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3) = 0 [pid 5076] rmdir("./350") = 0 [pid 7224] munmap(0x7f943d000000, 138412032 [pid 7222] munmap(0x7f943d000000, 138412032 [pid 5076] mkdir("./351", 0777 [pid 7224] <... munmap resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7222] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 7224] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7224] <... openat resumed>) = 4 [pid 7222] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7224] ioctl(4, LOOP_SET_FD, 3 [pid 7222] close(4 [pid 7225] <... write resumed>) = 524288 [pid 7222] <... close resumed>) = 0 [pid 7223] <... write resumed>) = 524288 [pid 7225] munmap(0x7f943d000000, 138412032 [pid 7223] munmap(0x7f943d000000, 138412032 [pid 7225] <... munmap resumed>) = 0 [pid 7225] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7222] exit_group(0 [pid 7225] <... openat resumed>) = 4 [pid 7225] ioctl(4, LOOP_SET_FD, 3 [pid 7222] <... exit_group resumed>) = ? [pid 7224] <... ioctl resumed>) = 0 [pid 7223] <... munmap resumed>) = 0 [pid 7224] close(3 [pid 7223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7224] <... close resumed>) = 0 [pid 7223] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7222] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 7224] close(4 [pid 7223] close(4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7222, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7224] <... close resumed>) = 0 [pid 7223] <... close resumed>) = 0 [pid 5074] umount2("./355", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7224] mkdir("./file1", 0777 [pid 7225] <... ioctl resumed>) = 0 [pid 5076] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 7225] close(3 [pid 7224] <... mkdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7225] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 7225] close(4) = 0 [pid 7224] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7225] mkdir("./file1", 0777) = 0 [pid 5075] close(3 [pid 5074] getdents64(3, [pid 7225] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./355/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 265.253120][ T7224] loop2: detected capacity change from 0 to 1024 [ 265.278195][ T7225] loop1: detected capacity change from 0 to 1024 [pid 5074] unlink("./355/binderfs" [pid 7223] exit_group(0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7226 ./strace-static-x86_64: Process 7226 attached [pid 7225] <... mount resumed>) = 0 [pid 7223] <... exit_group resumed>) = ? [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7227 [pid 7226] set_robust_list(0x555583d53660, 24 [pid 7225] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 7226] <... set_robust_list resumed>) = 0 [pid 7225] <... openat resumed>) = 3 [pid 7226] chdir("./351" [pid 7225] chdir("./file1" [pid 7223] +++ exited with 0 +++ [pid 7226] <... chdir resumed>) = 0 [pid 7225] <... chdir resumed>) = 0 [pid 7226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7225] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7226] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 7227 attached [pid 7226] setpgid(0, 0 [pid 7225] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7224] <... mount resumed>) = 0 [pid 5074] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] set_robust_list(0x555583d53660, 24 [pid 7226] <... setpgid resumed>) = 0 [pid 7224] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7223, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7224] <... openat resumed>) = 3 [pid 5071] umount2("./355", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7224] chdir("./file1" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7227] <... set_robust_list resumed>) = 0 [pid 7224] <... chdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7227] chdir("./354" [pid 7226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7225] truncate("./file1", 0 [pid 7224] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7226] <... openat resumed>) = 3 [pid 7224] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... openat resumed>) = 3 [pid 7226] write(3, "1000", 4 [pid 7224] truncate("./file1", 0 [pid 5071] newfstatat(3, "", [pid 7227] <... chdir resumed>) = 0 [pid 7226] <... write resumed>) = 4 [pid 7225] <... truncate resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7226] close(3 [pid 7225] memfd_create("syzkaller", 0 [pid 5071] getdents64(3, [pid 7227] <... prctl resumed>) = 0 [pid 7226] <... close resumed>) = 0 [pid 7225] <... memfd_create resumed>) = 4 [pid 7224] <... truncate resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7227] setpgid(0, 0 [pid 7226] symlink("/dev/binderfs", "./binderfs" [pid 7224] memfd_create("syzkaller", 0 [pid 5071] umount2("./355/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] <... setpgid resumed>) = 0 [pid 7226] <... symlink resumed>) = 0 [pid 7225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7224] <... memfd_create resumed>) = 4 [pid 5074] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7226] memfd_create("syzkaller", 0 [pid 7225] <... mmap resumed>) = 0x7f943d000000 [pid 5074] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] <... openat resumed>) = 3 [pid 7226] <... memfd_create resumed>) = 3 [pid 7224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] newfstatat(AT_FDCWD, "./355/binderfs", [pid 7227] write(3, "1000", 4 [pid 7226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7227] <... write resumed>) = 4 [pid 7226] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./355/file1", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7227] close(3 [pid 7224] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./355/binderfs" [pid 7227] <... close resumed>) = 0 [pid 7226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7225] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7224] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 7227] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] <... symlink resumed>) = 0 [pid 7227] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7227] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./355/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7226] <... write resumed>) = 524288 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./355/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 7227] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... close resumed>) = 0 [pid 7225] <... write resumed>) = 524288 [pid 5074] rmdir("./355") = 0 [pid 7227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7226] munmap(0x7f943d000000, 138412032 [pid 7225] munmap(0x7f943d000000, 138412032 [pid 7224] <... write resumed>) = 524288 [pid 5071] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7226] <... munmap resumed>) = 0 [pid 7225] <... munmap resumed>) = 0 [pid 7224] munmap(0x7f943d000000, 138412032 [pid 5074] mkdir("./356", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7224] <... munmap resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./355/file1", [pid 7226] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7225] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7224] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7226] ioctl(4, LOOP_SET_FD, 3 [pid 7225] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7225] close(4 [pid 7224] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./355/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7225] <... close resumed>) = 0 [pid 7224] close(4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7224] <... close resumed>) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./355/file1" [pid 7225] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 7225] <... exit_group resumed>) = ? [pid 7227] <... write resumed>) = 524288 [pid 7225] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 7227] munmap(0x7f943d000000, 138412032 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7225, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7227] <... munmap resumed>) = 0 [pid 7224] exit_group(0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 5071] close(3 [pid 7226] <... ioctl resumed>) = 0 [pid 7224] <... exit_group resumed>) = ? [pid 7227] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7226] close(3 [pid 7224] +++ exited with 0 +++ [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7227] <... openat resumed>) = 4 [ 265.427917][ T7226] loop5: detected capacity change from 0 to 1024 [pid 7227] ioctl(4, LOOP_SET_FD, 3 [pid 7226] <... close resumed>) = 0 [pid 5072] umount2("./356", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./355" [pid 7226] close(4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7226] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7226] mkdir("./file1", 0777 [pid 5072] <... openat resumed>) = 3 [pid 7226] <... mkdir resumed>) = 0 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7226] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] umount2("./356/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./356/binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7224, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] mkdir("./356", 0777 [pid 5074] close(3 [pid 5073] umount2("./356", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7226] <... mount resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7226] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7226] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7228 attached [pid 7226] chdir("./file1" [pid 5073] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7228] set_robust_list(0x555583d53660, 24 [pid 7226] <... chdir resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 7228] <... set_robust_list resumed>) = 0 [pid 7226] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7228] chdir("./356" [pid 7226] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7226] truncate("./file1", 0 [pid 5073] getdents64(3, [pid 7228] <... chdir resumed>) = 0 [pid 7227] <... ioctl resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7228 [pid 7228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7227] close(3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7228] <... prctl resumed>) = 0 [pid 7227] <... close resumed>) = 0 [pid 5073] umount2("./356/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7227] close(4 [pid 7228] setpgid(0, 0 [pid 7227] <... close resumed>) = 0 [pid 7226] <... truncate resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7228] <... setpgid resumed>) = 0 [pid 7227] mkdir("./file1", 0777 [pid 7226] memfd_create("syzkaller", 0 [pid 5073] newfstatat(AT_FDCWD, "./356/binderfs", [pid 5072] newfstatat(AT_FDCWD, "./356/file1", [pid 7228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7226] <... memfd_create resumed>) = 4 [pid 7228] <... openat resumed>) = 3 [pid 7227] <... mkdir resumed>) = 0 [pid 7226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7227] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7226] <... mmap resumed>) = 0x7f943d000000 [pid 5073] unlink("./356/binderfs" [pid 7228] write(3, "1000", 4 [pid 5072] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./356/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7228] <... write resumed>) = 4 [pid 7228] close(3) = 0 [pid 7228] symlink("/dev/binderfs", "./binderfs" [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7228] <... symlink resumed>) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7228] memfd_create("syzkaller", 0 [pid 7226] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7228] <... memfd_create resumed>) = 3 [pid 5072] <... close resumed>) = 0 [pid 7228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] rmdir("./356/file1" [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [ 265.471814][ T7227] loop4: detected capacity change from 0 to 1024 [pid 7228] <... mmap resumed>) = 0x7f943d000000 [pid 5073] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] getdents64(3, [pid 5071] <... ioctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5072] close(3 [pid 5071] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] rmdir("./356") = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7229 [pid 5072] mkdir("./357", 0777./strace-static-x86_64: Process 7229 attached ) = 0 [pid 7228] <... write resumed>) = 524288 [pid 7229] set_robust_list(0x555583d53660, 24 [pid 7227] <... mount resumed>) = 0 [pid 7226] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7229] <... set_robust_list resumed>) = 0 [pid 7227] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 7229] chdir("./356" [pid 7227] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7229] <... chdir resumed>) = 0 [pid 7227] chdir("./file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7229] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7227] <... chdir resumed>) = 0 [pid 7229] <... prctl resumed>) = 0 [pid 7227] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] newfstatat(AT_FDCWD, "./356/file1", [pid 7228] munmap(0x7f943d000000, 138412032 [pid 7226] munmap(0x7f943d000000, 138412032 [pid 7229] setpgid(0, 0 [pid 7228] <... munmap resumed>) = 0 [pid 7227] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7226] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7229] <... setpgid resumed>) = 0 [pid 7228] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7227] truncate("./file1", 0 [pid 7226] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7228] <... openat resumed>) = 4 [pid 7229] <... openat resumed>) = 3 [pid 7228] ioctl(4, LOOP_SET_FD, 3 [pid 7226] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7229] write(3, "1000", 4 [pid 7227] <... truncate resumed>) = 0 [pid 7226] close(4 [pid 5073] openat(AT_FDCWD, "./356/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... ioctl resumed>) = 0 [pid 7227] memfd_create("syzkaller", 0 [pid 7229] <... write resumed>) = 4 [pid 7227] <... memfd_create resumed>) = 4 [pid 5073] <... openat resumed>) = 4 [pid 7229] close(3 [pid 7227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] newfstatat(4, "", [pid 7229] <... close resumed>) = 0 [pid 7227] <... mmap resumed>) = 0x7f943d000000 [pid 7229] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7229] <... symlink resumed>) = 0 [pid 7226] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 7229] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7229] <... memfd_create resumed>) = 3 [pid 7227] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(4, [pid 5072] close(3 [pid 7229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5072] <... close resumed>) = 0 [pid 5073] rmdir("./356/file1" [pid 7226] exit_group(0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7226] <... exit_group resumed>) = ? [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7230 ./strace-static-x86_64: Process 7230 attached [pid 7230] set_robust_list(0x555583d53660, 24) = 0 [pid 7230] chdir("./357") = 0 [pid 7228] <... ioctl resumed>) = 0 [pid 7226] +++ exited with 0 +++ [pid 7229] <... mmap resumed>) = 0x7f943d000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7226, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7228] close(3 [pid 7230] <... prctl resumed>) = 0 [pid 7228] <... close resumed>) = 0 [pid 7230] setpgid(0, 0 [ 265.589639][ T7228] loop3: detected capacity change from 0 to 1024 [pid 7228] close(4 [pid 7230] <... setpgid resumed>) = 0 [pid 7228] <... close resumed>) = 0 [pid 7230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7227] <... write resumed>) = 524288 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7230] <... openat resumed>) = 3 [pid 5076] umount2("./351", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(3 [pid 7230] write(3, "1000", 4 [pid 7228] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7230] <... write resumed>) = 4 [pid 7228] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] rmdir("./356" [pid 5076] newfstatat(3, "", [pid 7230] close(3 [pid 7228] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7230] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7230] symlink("/dev/binderfs", "./binderfs" [pid 5076] getdents64(3, [pid 5073] mkdir("./357", 0777 [pid 7230] <... symlink resumed>) = 0 [pid 7227] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... mkdir resumed>) = 0 [pid 7230] memfd_create("syzkaller", 0) = 3 [pid 7228] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7228] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./351/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 7228] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7228] chdir("./file1") = 0 [pid 7228] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7230] <... mmap resumed>) = 0x7f943d000000 [pid 7229] <... write resumed>) = 524288 [pid 7228] truncate("./file1", 0 [pid 7227] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7228] <... truncate resumed>) = 0 [pid 5076] unlink("./351/binderfs" [pid 7228] memfd_create("syzkaller", 0 [pid 5076] <... unlink resumed>) = 0 [pid 7227] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7229] munmap(0x7f943d000000, 138412032 [pid 7228] <... memfd_create resumed>) = 4 [pid 7227] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7227] close(4 [pid 7228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7229] <... munmap resumed>) = 0 [pid 7228] <... mmap resumed>) = 0x7f943d000000 [pid 7228] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7229] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7229] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 7227] <... close resumed>) = 0 [pid 5076] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7229] ioctl(4, LOOP_SET_FD, 3 [pid 7228] <... write resumed>) = 524288 [pid 7227] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./351/file1", [pid 5073] <... ioctl resumed>) = 0 [pid 7227] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./351/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7230] <... write resumed>) = 524288 [pid 7228] munmap(0x7f943d000000, 138412032 [pid 7227] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7230] munmap(0x7f943d000000, 138412032) = 0 [pid 5076] openat(AT_FDCWD, "./351/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7227, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5073] close(3 [pid 7228] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7229] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7230] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7229] close(3 [pid 5076] newfstatat(4, "", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7230] <... openat resumed>) = 4 [pid 7229] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./354", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7230] ioctl(4, LOOP_SET_FD, 3 [pid 7229] close(4 [ 265.709303][ T7229] loop0: detected capacity change from 0 to 1024 [pid 7228] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7231 attached [pid 7229] <... close resumed>) = 0 [pid 7228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7231] set_robust_list(0x555583d53660, 24 [pid 7229] mkdir("./file1", 0777 [pid 7228] close(4 [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7231 [pid 7231] <... set_robust_list resumed>) = 0 [pid 7229] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(3, "", [pid 7231] chdir("./357" [pid 7229] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7231] <... chdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 7231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] rmdir("./351/file1" [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7231] <... prctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./354/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7229] <... mount resumed>) = 0 [pid 7231] setpgid(0, 0 [pid 7229] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7231] <... setpgid resumed>) = 0 [pid 7229] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./354/binderfs", [pid 7231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7229] chdir("./file1" [pid 5076] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7231] <... openat resumed>) = 3 [pid 7229] <... chdir resumed>) = 0 [pid 7228] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] unlink("./354/binderfs" [pid 7231] write(3, "1000", 4 [pid 7229] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] rmdir("./351" [pid 5075] <... unlink resumed>) = 0 [pid 7230] <... ioctl resumed>) = 0 [pid 7231] <... write resumed>) = 4 [pid 7229] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7231] close(3 [pid 7230] close(3 [pid 7229] truncate("./file1", 0 [pid 5076] mkdir("./352", 0777 [pid 5075] <... umount2 resumed>) = 0 [pid 7231] <... close resumed>) = 0 [pid 7230] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7231] symlink("/dev/binderfs", "./binderfs" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7231] <... symlink resumed>) = 0 [pid 7230] close(4 [pid 7228] exit_group(0 [pid 5076] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./354/file1", [pid 7231] memfd_create("syzkaller", 0 [pid 7230] <... close resumed>) = 0 [pid 7229] <... truncate resumed>) = 0 [pid 7228] <... exit_group resumed>) = ? [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7231] <... memfd_create resumed>) = 3 [pid 7230] mkdir("./file1", 0777 [pid 7229] memfd_create("syzkaller", 0 [pid 5075] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7229] <... memfd_create resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7231] <... mmap resumed>) = 0x7f943d000000 [pid 5075] openat(AT_FDCWD, "./354/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 7229] <... mmap resumed>) = 0x7f943d000000 [pid 7228] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", [pid 7230] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7230] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7228, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 265.750192][ T7230] loop1: detected capacity change from 0 to 1024 [pid 7229] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] getdents64(4, [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5074] umount2("./356", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(4 [pid 5074] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] rmdir("./354/file1" [pid 5074] umount2("./356/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 7229] <... write resumed>) = 524288 [pid 5075] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./356/binderfs", [pid 5075] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./354") = 0 [pid 5074] unlink("./356/binderfs" [pid 5075] mkdir("./355", 0777 [pid 7230] <... mount resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7230] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... ioctl resumed>) = 0 [pid 5074] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7230] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7231] <... write resumed>) = 524288 [pid 7230] chdir("./file1" [pid 7229] munmap(0x7f943d000000, 138412032 [pid 7230] <... chdir resumed>) = 0 [pid 7230] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7229] <... munmap resumed>) = 0 [pid 7230] truncate("./file1", 0 [pid 7229] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... umount2 resumed>) = 0 [pid 7229] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7229] close(4) = 0 [pid 5076] close(3 [pid 7231] munmap(0x7f943d000000, 138412032) = 0 [pid 7231] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7231] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7231] ioctl(4, LOOP_SET_FD, 3 [pid 5074] newfstatat(AT_FDCWD, "./356/file1", [pid 7230] <... truncate resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7230] memfd_create("syzkaller", 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7230] <... memfd_create resumed>) = 4 [pid 7229] exit_group(0) = ? ./strace-static-x86_64: Process 7232 attached [pid 7230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7229] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./356/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7230] <... mmap resumed>) = 0x7f943d000000 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7229, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7232 [pid 5071] umount2("./356", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] newfstatat(4, "", [pid 5071] umount2("./356/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./356/binderfs") = 0 [pid 5071] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7232] set_robust_list(0x555583d53660, 24 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] getdents64(4, [pid 7232] <... set_robust_list resumed>) = 0 [pid 7230] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7232] chdir("./352" [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7232] <... chdir resumed>) = 0 [pid 5074] close(4) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] rmdir("./356/file1") = 0 [pid 5071] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7231] <... ioctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./356/file1", [pid 7231] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7231] <... close resumed>) = 0 [pid 5071] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7232] <... prctl resumed>) = 0 [pid 7231] close(4 [pid 5074] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7231] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] openat(AT_FDCWD, "./356/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7232] setpgid(0, 0 [pid 7231] mkdir("./file1", 0777 [pid 5074] close(3 [pid 5071] <... openat resumed>) = 4 [pid 7232] <... setpgid resumed>) = 0 [pid 7231] <... mkdir resumed>) = 0 [pid 7232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] close(3 [pid 5074] <... close resumed>) = 0 [ 265.870502][ T7231] loop2: detected capacity change from 0 to 1024 [pid 5074] rmdir("./356" [pid 7232] <... openat resumed>) = 3 [pid 7230] <... write resumed>) = 524288 [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7231] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./356/file1") = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5074] mkdir("./357", 0777 [pid 5071] rmdir("./356"./strace-static-x86_64: Process 7233 attached [pid 7232] write(3, "1000", 4 [pid 7231] <... mount resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7232] <... write resumed>) = 4 [pid 7233] set_robust_list(0x555583d53660, 24 [pid 7232] close(3 [pid 7231] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7230] munmap(0x7f943d000000, 138412032 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7233 [pid 5074] <... openat resumed>) = 3 [pid 5071] mkdir("./357", 0777 [pid 7232] <... close resumed>) = 0 [pid 7232] symlink("/dev/binderfs", "./binderfs" [pid 7230] <... munmap resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7232] <... symlink resumed>) = 0 [pid 7231] <... openat resumed>) = 3 [pid 7230] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... openat resumed>) = 3 [pid 7233] <... set_robust_list resumed>) = 0 [pid 7231] chdir("./file1" [pid 7230] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7230] close(4 [pid 7233] chdir("./355" [pid 7232] memfd_create("syzkaller", 0 [pid 7231] <... chdir resumed>) = 0 [pid 7230] <... close resumed>) = 0 [pid 7231] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7231] truncate("./file1", 0 [pid 7233] <... chdir resumed>) = 0 [pid 7233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7232] <... memfd_create resumed>) = 3 [pid 7233] <... prctl resumed>) = 0 [pid 7232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7233] setpgid(0, 0 [pid 7232] <... mmap resumed>) = 0x7f943d000000 [pid 7233] <... setpgid resumed>) = 0 [pid 7231] <... truncate resumed>) = 0 [pid 7233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7231] memfd_create("syzkaller", 0 [pid 7233] <... openat resumed>) = 3 [pid 7231] <... memfd_create resumed>) = 4 [pid 7231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7230] exit_group(0 [pid 7233] write(3, "1000", 4 [pid 7232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7231] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7230] <... exit_group resumed>) = ? [pid 7233] <... write resumed>) = 4 [pid 7233] close(3) = 0 [pid 7233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7233] memfd_create("syzkaller", 0) = 3 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7230] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7230, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] umount2("./357", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7232] <... write resumed>) = 524288 [pid 5074] close(3 [pid 5072] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] umount2("./357/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7235 attached [pid 7232] munmap(0x7f943d000000, 138412032 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7235 [pid 5072] newfstatat(AT_FDCWD, "./357/binderfs", [pid 7235] set_robust_list(0x555583d53660, 24) = 0 [pid 7231] <... write resumed>) = 524288 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./357/binderfs"./strace-static-x86_64: Process 7234 attached [pid 7235] chdir("./357" [pid 7232] <... munmap resumed>) = 0 [pid 7231] munmap(0x7f943d000000, 138412032 [pid 5072] <... unlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7234 [pid 7234] set_robust_list(0x555583d53660, 24 [pid 7232] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7234] <... set_robust_list resumed>) = 0 [pid 7232] <... openat resumed>) = 4 [pid 7234] chdir("./357" [pid 7235] <... chdir resumed>) = 0 [pid 7231] <... munmap resumed>) = 0 [pid 7234] <... chdir resumed>) = 0 [pid 7231] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7231] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7234] <... prctl resumed>) = 0 [pid 7231] close(4 [pid 7234] setpgid(0, 0 [pid 7231] <... close resumed>) = 0 [pid 7234] <... setpgid resumed>) = 0 [pid 7234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7233] <... write resumed>) = 524288 [pid 7234] <... openat resumed>) = 3 [pid 7233] munmap(0x7f943d000000, 138412032) = 0 [pid 7234] write(3, "1000", 4) = 4 [pid 7234] close(3 [pid 7235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7234] <... close resumed>) = 0 [pid 7233] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7234] symlink("/dev/binderfs", "./binderfs" [pid 7235] <... prctl resumed>) = 0 [pid 7233] <... openat resumed>) = 4 [pid 7232] ioctl(4, LOOP_SET_FD, 3 [pid 7234] <... symlink resumed>) = 0 [pid 7233] ioctl(4, LOOP_SET_FD, 3 [pid 7234] memfd_create("syzkaller", 0 [pid 7233] <... ioctl resumed>) = 0 [pid 7231] exit_group(0 [pid 7234] <... memfd_create resumed>) = 3 [pid 7234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7235] setpgid(0, 0 [pid 7234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7235] <... setpgid resumed>) = 0 [pid 7231] <... exit_group resumed>) = ? [pid 7235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7231] +++ exited with 0 +++ [pid 7235] <... openat resumed>) = 3 [pid 7235] write(3, "1000", 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7231, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7235] <... write resumed>) = 4 [pid 5073] umount2("./357", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7235] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 7235] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7235] symlink("/dev/binderfs", "./binderfs" [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7235] <... symlink resumed>) = 0 [pid 5073] getdents64(3, [pid 7235] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7235] <... memfd_create resumed>) = 3 [pid 5073] umount2("./357/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7232] <... ioctl resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./357/file1", [pid 7235] <... mmap resumed>) = 0x7f943d000000 [pid 7232] close(3 [pid 5073] newfstatat(AT_FDCWD, "./357/binderfs", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7234] <... write resumed>) = 524288 [pid 7233] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7232] <... close resumed>) = 0 [pid 5073] unlink("./357/binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7233] <... close resumed>) = 0 [pid 7232] close(4 [pid 5073] <... unlink resumed>) = 0 [ 266.056924][ T7233] loop4: detected capacity change from 0 to 1024 [ 266.057029][ T7232] loop5: detected capacity change from 0 to 1024 [pid 5072] openat(AT_FDCWD, "./357/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7233] close(4 [pid 7232] <... close resumed>) = 0 [pid 5073] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7232] mkdir("./file1", 0777 [pid 7233] <... close resumed>) = 0 [pid 7233] mkdir("./file1", 0777 [pid 7232] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7234] munmap(0x7f943d000000, 138412032 [pid 7233] <... mkdir resumed>) = 0 [pid 7232] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7234] <... munmap resumed>) = 0 [pid 7233] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./357/file1") = 0 [pid 7234] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] getdents64(3, [pid 7234] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7234] ioctl(4, LOOP_SET_FD, 3 [pid 5072] close(3 [pid 7232] <... mount resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./357") = 0 [pid 5072] mkdir("./358", 0777) = 0 [pid 7235] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 7232] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7235] munmap(0x7f943d000000, 138412032 [pid 7232] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7232] chdir("./file1" [pid 5073] newfstatat(AT_FDCWD, "./357/file1", [pid 7232] <... chdir resumed>) = 0 [pid 7235] <... munmap resumed>) = 0 [pid 7233] <... mount resumed>) = 0 [pid 7232] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7235] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7232] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7235] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7235] ioctl(4, LOOP_SET_FD, 3 [pid 5073] openat(AT_FDCWD, "./357/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7233] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 7233] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7233] chdir("./file1") = 0 [pid 7233] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7233] truncate("./file1", 0 [pid 7234] <... ioctl resumed>) = 0 [pid 5073] getdents64(4, [pid 7234] close(3 [pid 7232] truncate("./file1", 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7234] <... close resumed>) = 0 [pid 7234] close(4 [pid 5073] getdents64(4, [pid 7233] <... truncate resumed>) = 0 [pid 7233] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7234] <... close resumed>) = 0 [pid 7233] <... memfd_create resumed>) = 4 [pid 7234] mkdir("./file1", 0777 [pid 7233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7234] <... mkdir resumed>) = 0 [pid 7233] <... mmap resumed>) = 0x7f943d000000 [pid 7233] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] close(4 [pid 7235] <... ioctl resumed>) = 0 [pid 7232] <... truncate resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7232] memfd_create("syzkaller", 0 [pid 5073] rmdir("./357/file1" [pid 7234] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7235] close(3 [pid 7232] <... memfd_create resumed>) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 7235] <... close resumed>) = 0 [pid 7232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(3, [pid 7235] close(4 [pid 7232] <... mmap resumed>) = 0x7f943d000000 [pid 7235] <... close resumed>) = 0 [pid 7232] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7235] mkdir("./file1", 0777 [pid 5073] close(3) = 0 [pid 7235] <... mkdir resumed>) = 0 [ 266.133499][ T7234] loop0: detected capacity change from 0 to 1024 [ 266.155456][ T7235] loop3: detected capacity change from 0 to 1024 [pid 5073] rmdir("./357" [pid 7235] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7233] <... write resumed>) = 524288 [pid 7232] <... write resumed>) = 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] close(3 [pid 5073] mkdir("./358", 0777 [pid 5072] <... close resumed>) = 0 [pid 7232] munmap(0x7f943d000000, 138412032 [pid 7234] <... mount resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7234] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7234] chdir("./file1") = 0 [pid 7234] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] <... mkdir resumed>) = 0 [pid 7234] truncate("./file1", 0./strace-static-x86_64: Process 7236 attached [pid 7232] <... munmap resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7236 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7236] set_robust_list(0x555583d53660, 24 [pid 7234] <... truncate resumed>) = 0 [pid 7233] munmap(0x7f943d000000, 138412032 [pid 7232] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... openat resumed>) = 3 [pid 7236] <... set_robust_list resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7236] chdir("./358") = 0 [pid 7234] memfd_create("syzkaller", 0 [pid 7236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7234] <... memfd_create resumed>) = 4 [pid 7234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7233] <... munmap resumed>) = 0 [pid 7234] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7233] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7233] close(4 [pid 7236] <... prctl resumed>) = 0 [pid 7236] setpgid(0, 0) = 0 [pid 7235] <... mount resumed>) = 0 [pid 7232] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7235] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7232] close(4 [pid 7235] <... openat resumed>) = 3 [pid 7235] chdir("./file1") = 0 [pid 7235] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7235] truncate("./file1", 0 [pid 7236] <... openat resumed>) = 3 [pid 7235] <... truncate resumed>) = 0 [pid 7233] <... close resumed>) = 0 [pid 7232] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7235] memfd_create("syzkaller", 0) = 4 [pid 7236] write(3, "1000", 4 [pid 7235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7232] exit_group(0 [pid 5073] close(3 [pid 7235] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... close resumed>) = 0 [pid 7233] exit_group(0 [pid 7235] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7233] <... exit_group resumed>) = ? [pid 7232] <... exit_group resumed>) = ? [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7234] <... write resumed>) = 524288 [pid 7232] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7232, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7236] <... write resumed>) = 4 [pid 7236] close(3 [pid 7234] munmap(0x7f943d000000, 138412032 [pid 7233] +++ exited with 0 +++ [pid 5076] umount2("./352", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7236] <... close resumed>) = 0 [pid 7234] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7233, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7237 [pid 5076] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7236] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 5075] umount2("./355", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7234] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7234] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 5075] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... openat resumed>) = 3 [pid 5076] umount2("./352/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 7234] close(4 [pid 5076] newfstatat(AT_FDCWD, "./352/binderfs", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 7237 attached [pid 7236] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./355/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7237] set_robust_list(0x555583d53660, 24 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7236] memfd_create("syzkaller", 0 [pid 5075] newfstatat(AT_FDCWD, "./355/binderfs", [pid 7237] <... set_robust_list resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./355/binderfs" [pid 7237] chdir("./358" [pid 5075] <... unlink resumed>) = 0 [pid 7237] <... chdir resumed>) = 0 [pid 5076] unlink("./352/binderfs" [pid 5075] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7236] <... memfd_create resumed>) = 3 [pid 7234] <... close resumed>) = 0 [pid 7237] <... prctl resumed>) = 0 [pid 7236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7237] setpgid(0, 0 [pid 7236] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7234] exit_group(0) = ? [pid 7237] <... setpgid resumed>) = 0 [pid 7236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7234] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7234, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7236] <... write resumed>) = 524288 [pid 7235] <... write resumed>) = 524288 [pid 7237] write(3, "1000", 4) = 4 [pid 7237] close(3 [pid 7235] munmap(0x7f943d000000, 138412032 [pid 7237] <... close resumed>) = 0 [pid 5071] umount2("./357", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7237] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7237] <... symlink resumed>) = 0 [pid 7235] <... munmap resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7237] memfd_create("syzkaller", 0 [pid 7236] munmap(0x7f943d000000, 138412032 [pid 7235] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] newfstatat(3, "", [pid 7237] <... memfd_create resumed>) = 3 [pid 7236] <... munmap resumed>) = 0 [pid 7235] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7236] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7235] close(4 [pid 7236] <... openat resumed>) = 4 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./357/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7236] ioctl(4, LOOP_SET_FD, 3 [pid 5075] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./357/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./355/file1", [pid 5071] unlink("./357/binderfs") = 0 [pid 7237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7237] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./355/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./355/file1") = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./355") = 0 [pid 5075] mkdir("./356", 0777 [pid 7237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7235] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5071] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./357/file1", [pid 5075] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./352/file1", [pid 5071] openat(AT_FDCWD, "./357/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... openat resumed>) = 4 [pid 7236] <... ioctl resumed>) = 0 [pid 7235] exit_group(0) = ? [pid 5076] umount2("./352/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5071] newfstatat(4, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./352/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 7236] close(3 [pid 5076] <... openat resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7236] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5071] getdents64(4, [pid 7236] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7236] <... close resumed>) = 0 [pid 7235] +++ exited with 0 +++ [pid 5071] close(4 [pid 5076] getdents64(4, [pid 5071] <... close resumed>) = 0 [pid 7236] mkdir("./file1", 0777 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5071] rmdir("./357/file1" [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7235, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] <... rmdir resumed>) = 0 [pid 7236] <... mkdir resumed>) = 0 [pid 7237] <... write resumed>) = 524288 [pid 5076] close(4 [pid 5071] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./352/file1") = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./357" [pid 5074] umount2("./357", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7236] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5074] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] mkdir("./358", 0777 [pid 7237] munmap(0x7f943d000000, 138412032 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5076] rmdir("./352" [pid 7237] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5076] mkdir("./353", 0777 [pid 7237] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./357/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7237] <... openat resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./357/binderfs", [pid 5071] <... openat resumed>) = 3 [ 266.374921][ T7236] loop1: detected capacity change from 0 to 1024 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7237] ioctl(4, LOOP_SET_FD, 3 [pid 5074] unlink("./357/binderfs" [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7238 ./strace-static-x86_64: Process 7238 attached [pid 7238] set_robust_list(0x555583d53660, 24) = 0 [pid 7238] chdir("./356") = 0 [pid 7238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7238] setpgid(0, 0) = 0 [pid 7238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7236] <... mount resumed>) = 0 [pid 7238] write(3, "1000", 4 [pid 7236] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7238] <... write resumed>) = 4 [pid 7236] <... openat resumed>) = 3 [pid 7238] close(3) = 0 [pid 7238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7236] chdir("./file1") = 0 [pid 7237] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7237] close(3 [pid 7236] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7237] <... close resumed>) = 0 [pid 5074] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7238] memfd_create("syzkaller", 0 [pid 7237] close(4 [pid 7236] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7237] <... close resumed>) = 0 [pid 7236] truncate("./file1", 0 [pid 5074] newfstatat(AT_FDCWD, "./357/file1", [pid 7237] mkdir("./file1", 0777 [pid 7238] <... memfd_create resumed>) = 3 [pid 7238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7237] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7237] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7236] <... truncate resumed>) = 0 [ 266.437243][ T7237] loop2: detected capacity change from 0 to 1024 [pid 7236] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./357/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... ioctl resumed>) = 0 [pid 7236] <... memfd_create resumed>) = 4 [pid 7236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 4 [pid 7238] <... write resumed>) = 524288 [pid 7236] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(4, "", [pid 7236] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(3) = 0 [pid 5074] getdents64(4, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./357/file1" [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7239 [pid 5076] close(3./strace-static-x86_64: Process 7239 attached ) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7236] <... write resumed>) = 524288 [pid 7239] set_robust_list(0x555583d53660, 24 [pid 5074] <... rmdir resumed>) = 0 [pid 7238] munmap(0x7f943d000000, 138412032) = 0 [pid 7239] <... set_robust_list resumed>) = 0 [pid 7238] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7239] chdir("./358" [pid 7238] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7240 [pid 7239] <... chdir resumed>) = 0 [pid 7238] ioctl(4, LOOP_SET_FD, 3 [pid 7239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] getdents64(3, [pid 7239] <... prctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7240 attached [pid 7239] setpgid(0, 0 [pid 7240] set_robust_list(0x555583d53660, 24 [pid 7239] <... setpgid resumed>) = 0 [pid 5074] close(3 [pid 7240] <... set_robust_list resumed>) = 0 [pid 7239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7237] <... mount resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7240] chdir("./353" [pid 7239] <... openat resumed>) = 3 [pid 5074] rmdir("./357" [pid 7239] write(3, "1000", 4) = 4 [pid 7239] close(3) = 0 [pid 7239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./358", 0777 [pid 7240] <... chdir resumed>) = 0 [pid 7239] memfd_create("syzkaller", 0 [pid 7237] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... mkdir resumed>) = 0 [pid 7240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7239] <... memfd_create resumed>) = 3 [pid 7236] munmap(0x7f943d000000, 138412032 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7240] <... prctl resumed>) = 0 [pid 7239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... openat resumed>) = 3 [pid 7240] setpgid(0, 0 [pid 7239] <... mmap resumed>) = 0x7f943d000000 [pid 7240] <... setpgid resumed>) = 0 [pid 7238] <... ioctl resumed>) = 0 [pid 7237] <... openat resumed>) = 3 [pid 7236] <... munmap resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7237] chdir("./file1" [pid 7240] <... openat resumed>) = 3 [pid 7238] close(3 [pid 7237] <... chdir resumed>) = 0 [pid 7236] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7240] write(3, "1000", 4 [pid 7238] <... close resumed>) = 0 [pid 7237] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7236] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7240] <... write resumed>) = 4 [pid 7239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7238] close(4 [pid 7237] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 266.538863][ T7238] loop4: detected capacity change from 0 to 1024 [pid 7236] close(4 [pid 7240] close(3 [pid 7239] <... write resumed>) = 524288 [pid 7238] <... close resumed>) = 0 [pid 7237] truncate("./file1", 0 [pid 7236] <... close resumed>) = 0 [pid 7240] <... close resumed>) = 0 [pid 7236] exit_group(0 [pid 7240] symlink("/dev/binderfs", "./binderfs" [pid 7238] mkdir("./file1", 0777 [pid 7236] <... exit_group resumed>) = ? [pid 7240] <... symlink resumed>) = 0 [pid 7238] <... mkdir resumed>) = 0 [pid 7240] memfd_create("syzkaller", 0) = 3 [pid 7238] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7236] +++ exited with 0 +++ [pid 7240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7236, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7239] munmap(0x7f943d000000, 138412032) = 0 [pid 7237] <... truncate resumed>) = 0 [pid 5072] umount2("./358", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7237] memfd_create("syzkaller", 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7237] <... memfd_create resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 5072] <... openat resumed>) = 3 [pid 7237] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... close resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 7239] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7238] <... mount resumed>) = 0 [pid 7237] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7239] <... openat resumed>) = 4 [pid 7238] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7239] ioctl(4, LOOP_SET_FD, 3 [pid 7238] <... openat resumed>) = 3 [pid 7238] chdir("./file1" [pid 5072] getdents64(3, [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7241 ./strace-static-x86_64: Process 7241 attached [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7241] set_robust_list(0x555583d53660, 24 [pid 5072] umount2("./358/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./358/binderfs", [pid 7238] <... chdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7238] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7237] <... write resumed>) = 524288 [pid 5072] unlink("./358/binderfs" [pid 7241] <... set_robust_list resumed>) = 0 [pid 7240] munmap(0x7f943d000000, 138412032 [pid 7238] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... unlink resumed>) = 0 [pid 7241] chdir("./358" [pid 7240] <... munmap resumed>) = 0 [pid 7238] truncate("./file1", 0 [pid 7241] <... chdir resumed>) = 0 [pid 7237] munmap(0x7f943d000000, 138412032 [pid 5072] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7240] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7238] <... truncate resumed>) = 0 [pid 7237] <... munmap resumed>) = 0 [pid 7241] setpgid(0, 0 [pid 7238] memfd_create("syzkaller", 0) = 4 [pid 7241] <... setpgid resumed>) = 0 [pid 7238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7238] <... mmap resumed>) = 0x7f943d000000 [pid 7241] <... openat resumed>) = 3 [pid 7238] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7237] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7241] write(3, "1000", 4 [pid 7237] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7241] <... write resumed>) = 4 [pid 7241] close(3 [pid 7240] <... openat resumed>) = 4 [pid 7239] <... ioctl resumed>) = 0 [pid 7240] ioctl(4, LOOP_SET_FD, 3 [pid 7239] close(3 [pid 5072] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7241] <... close resumed>) = 0 [pid 7239] <... close resumed>) = 0 [pid 7237] close(4 [pid 7241] symlink("/dev/binderfs", "./binderfs" [pid 7239] close(4 [pid 7237] <... close resumed>) = 0 [pid 7241] <... symlink resumed>) = 0 [pid 7239] <... close resumed>) = 0 [pid 7238] <... write resumed>) = 524288 [pid 7237] exit_group(0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7241] memfd_create("syzkaller", 0 [pid 7239] mkdir("./file1", 0777 [pid 7237] <... exit_group resumed>) = ? [pid 5072] newfstatat(AT_FDCWD, "./358/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7241] <... memfd_create resumed>) = 3 [pid 7239] <... mkdir resumed>) = 0 [pid 7237] +++ exited with 0 +++ [pid 7240] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./358/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./358/file1") = 0 [pid 7239] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] getdents64(3, [pid 7238] munmap(0x7f943d000000, 138412032 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7240] close(3 [pid 7238] <... munmap resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7237, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7240] <... close resumed>) = 0 [pid 7238] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] close(3 [pid 7240] close(4 [pid 7238] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7240] <... close resumed>) = 0 [ 266.642897][ T7239] loop0: detected capacity change from 0 to 1024 [ 266.675691][ T7240] loop5: detected capacity change from 0 to 1024 [pid 7238] close(4 [pid 5072] <... close resumed>) = 0 [pid 7241] <... mmap resumed>) = 0x7f943d000000 [pid 7240] mkdir("./file1", 0777 [pid 7238] <... close resumed>) = 0 [pid 5073] umount2("./358", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./358" [pid 7240] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] mkdir("./359", 0777 [pid 7240] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... openat resumed>) = 3 [pid 5072] <... mkdir resumed>) = 0 [pid 7239] <... mount resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5073] newfstatat(3, "", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7239] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7239] <... openat resumed>) = 3 [pid 7239] chdir("./file1" [pid 7238] exit_group(0 [pid 7239] <... chdir resumed>) = 0 [pid 7238] <... exit_group resumed>) = ? [pid 7239] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7238] +++ exited with 0 +++ [pid 7239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7238, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7239] truncate("./file1", 0 [pid 5075] umount2("./356", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./356/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./356/binderfs") = 0 [pid 5073] getdents64(3, [pid 5075] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7241] <... write resumed>) = 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./358/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7239] <... truncate resumed>) = 0 [pid 5073] unlink("./358/binderfs" [pid 7239] memfd_create("syzkaller", 0) = 4 [pid 7239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... unlink resumed>) = 0 [pid 7239] <... mmap resumed>) = 0x7f943d000000 [pid 7241] munmap(0x7f943d000000, 138412032 [pid 7240] <... mount resumed>) = 0 [pid 5073] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7240] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7241] <... munmap resumed>) = 0 [pid 7240] <... openat resumed>) = 3 [pid 7241] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7240] chdir("./file1") = 0 [pid 7241] <... openat resumed>) = 4 [pid 7240] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7241] ioctl(4, LOOP_SET_FD, 3 [pid 7240] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7239] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7240] truncate("./file1", 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7241] <... ioctl resumed>) = 0 [pid 7239] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 7241] close(3 [pid 5073] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7241] <... close resumed>) = 0 [pid 7241] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7241] <... close resumed>) = 0 [pid 7241] mkdir("./file1", 0777 [pid 5075] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./358/file1", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./356/file1", [pid 7241] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./356/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7241] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7240] <... truncate resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7240] memfd_create("syzkaller", 0 [pid 5075] getdents64(4, [pid 5073] openat(AT_FDCWD, "./358/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7240] <... memfd_create resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(4, [pid 5073] <... openat resumed>) = 4 [pid 7240] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(4, "", [pid 5075] close(4) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7240] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7239] munmap(0x7f943d000000, 138412032 [pid 5075] rmdir("./356/file1" [pid 5073] getdents64(4, [pid 5072] close(3 [pid 7239] <... munmap resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... close resumed>) = 0 [pid 7239] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] getdents64(3, [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, ./strace-static-x86_64: Process 7242 attached [pid 7241] <... mount resumed>) = 0 [pid 7240] <... write resumed>) = 524288 [ 266.776791][ T7241] loop3: detected capacity change from 0 to 1024 [pid 7239] close(4 [pid 5075] close(3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7242 [pid 7242] set_robust_list(0x555583d53660, 24 [pid 7241] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7240] munmap(0x7f943d000000, 138412032 [pid 7239] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] close(4 [pid 7242] <... set_robust_list resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7242] chdir("./359" [pid 7241] <... openat resumed>) = 3 [pid 7240] <... munmap resumed>) = 0 [pid 5075] rmdir("./356" [pid 5073] rmdir("./358/file1" [pid 7242] <... chdir resumed>) = 0 [pid 7241] chdir("./file1" [pid 5073] <... rmdir resumed>) = 0 [pid 7241] <... chdir resumed>) = 0 [pid 5073] getdents64(3, [pid 7242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7241] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7242] <... prctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7242] setpgid(0, 0 [pid 7241] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7240] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5073] close(3 [pid 7242] <... setpgid resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7240] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] rmdir("./358" [pid 7242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7239] exit_group(0 [pid 5075] mkdir("./357", 0777 [pid 5073] <... rmdir resumed>) = 0 [pid 7241] truncate("./file1", 0 [pid 7239] <... exit_group resumed>) = ? [pid 5075] <... mkdir resumed>) = 0 [pid 5073] mkdir("./359", 0777 [pid 7242] <... openat resumed>) = 3 [pid 7239] +++ exited with 0 +++ [pid 5073] <... mkdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7239, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=2 /* 0.02 s */} --- [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7240] close(4 [pid 5073] <... openat resumed>) = 3 [pid 5071] umount2("./358", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7242] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 7242] <... write resumed>) = 4 [pid 7241] <... truncate resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5075] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./358/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./358/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./358/binderfs") = 0 [pid 7240] <... close resumed>) = 0 [pid 5071] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7242] close(3 [pid 7241] memfd_create("syzkaller", 0 [pid 7240] exit_group(0 [pid 7242] <... close resumed>) = 0 [pid 7241] <... memfd_create resumed>) = 4 [pid 7240] <... exit_group resumed>) = ? [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7243 ./strace-static-x86_64: Process 7243 attached [pid 7242] symlink("/dev/binderfs", "./binderfs" [pid 7241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7240] +++ exited with 0 +++ [pid 7241] <... mmap resumed>) = 0x7f943d000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7240, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7243] set_robust_list(0x555583d53660, 24 [pid 7242] <... symlink resumed>) = 0 [pid 7243] <... set_robust_list resumed>) = 0 [pid 7241] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./353", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7243] chdir("./357" [pid 5076] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7243] <... chdir resumed>) = 0 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./353/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./353/binderfs" [pid 5073] <... ioctl resumed>) = 0 [pid 7243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7242] memfd_create("syzkaller", 0 [pid 5076] <... unlink resumed>) = 0 [pid 7243] <... prctl resumed>) = 0 [pid 7243] setpgid(0, 0 [pid 5076] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7243] <... setpgid resumed>) = 0 [pid 7243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7242] <... memfd_create resumed>) = 3 [pid 7242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7243] write(3, "1000", 4 [pid 7242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] close(3 [pid 5071] <... umount2 resumed>) = 0 [pid 7243] <... write resumed>) = 4 [pid 7243] close(3) = 0 [pid 7243] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7242] <... write resumed>) = 524288 [pid 7241] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 5071] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7243] memfd_create("syzkaller", 0 [pid 7242] munmap(0x7f943d000000, 138412032 [pid 7241] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./358/file1", ./strace-static-x86_64: Process 7244 attached [pid 7243] <... memfd_create resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7244 [pid 7244] set_robust_list(0x555583d53660, 24 [pid 5071] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7244] <... set_robust_list resumed>) = 0 [pid 7243] <... mmap resumed>) = 0x7f943d000000 [pid 7241] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7244] chdir("./359" [pid 7242] <... munmap resumed>) = 0 [pid 7241] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./353/file1", [pid 5071] openat(AT_FDCWD, "./358/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7244] <... chdir resumed>) = 0 [pid 7243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7242] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7241] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 4 [pid 7244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7241] close(4 [pid 7242] <... openat resumed>) = 4 [pid 7244] <... prctl resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 5076] umount2("./353/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./353/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7244] setpgid(0, 0 [pid 7242] ioctl(4, LOOP_SET_FD, 3 [pid 7241] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7243] <... write resumed>) = 524288 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7244] <... setpgid resumed>) = 0 [pid 7241] exit_group(0 [pid 5076] close(4 [pid 5071] getdents64(4, [pid 7244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7241] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] rmdir("./353/file1") = 0 [pid 5071] getdents64(4, [pid 7244] <... openat resumed>) = 3 [pid 7241] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7244] write(3, "1000", 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7241, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] close(4 [pid 7244] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] close(3 [pid 7244] close(3 [pid 5076] <... close resumed>) = 0 [pid 5071] rmdir("./358/file1" [pid 7244] <... close resumed>) = 0 [pid 5076] rmdir("./353" [pid 5074] umount2("./358", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7244] symlink("/dev/binderfs", "./binderfs" [pid 7243] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 7242] <... ioctl resumed>) = 0 [pid 7244] <... symlink resumed>) = 0 [pid 7243] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 7244] memfd_create("syzkaller", 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7244] <... memfd_create resumed>) = 3 [pid 5071] close(3 [pid 7244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] newfstatat(3, "", [pid 5071] <... close resumed>) = 0 [pid 7243] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] mkdir("./354", 0777 [pid 5071] rmdir("./358" [pid 7244] <... mmap resumed>) = 0x7f943d000000 [pid 7243] <... openat resumed>) = 4 [pid 7242] close(3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7243] ioctl(4, LOOP_SET_FD, 3 [pid 7242] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [ 267.013019][ T7242] loop1: detected capacity change from 0 to 1024 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] mkdir("./359", 0777 [pid 7242] close(4 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = 0 [pid 5076] close(3 [pid 7242] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] umount2("./358/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 [pid 7242] mkdir("./file1", 0777 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7242] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7242] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] newfstatat(AT_FDCWD, "./358/binderfs", [pid 5071] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7245 [pid 5074] unlink("./358/binderfs"./strace-static-x86_64: Process 7245 attached [pid 7245] set_robust_list(0x555583d53660, 24) = 0 [pid 7243] <... ioctl resumed>) = 0 [pid 7245] chdir("./354" [pid 7243] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 7245] <... chdir resumed>) = 0 [pid 7243] <... close resumed>) = 0 [pid 7245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7243] close(4 [pid 5074] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7245] <... prctl resumed>) = 0 [pid 7244] <... write resumed>) = 524288 [pid 7243] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7245] setpgid(0, 0 [pid 7243] mkdir("./file1", 0777 [pid 7245] <... setpgid resumed>) = 0 [pid 7244] munmap(0x7f943d000000, 138412032 [pid 7243] <... mkdir resumed>) = 0 [pid 7242] <... mount resumed>) = 0 [pid 5074] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7242] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7244] <... munmap resumed>) = 0 [pid 7242] <... openat resumed>) = 3 [pid 7245] <... openat resumed>) = 3 [pid 7244] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7243] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7242] chdir("./file1" [ 267.059611][ T7243] loop4: detected capacity change from 0 to 1024 [pid 5074] newfstatat(AT_FDCWD, "./358/file1", [pid 7244] <... openat resumed>) = 4 [pid 7242] <... chdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7244] ioctl(4, LOOP_SET_FD, 3 [pid 7242] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7242] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7245] write(3, "1000", 4) = 4 [pid 7245] close(3) = 0 [pid 7245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7245] memfd_create("syzkaller", 0) = 3 [pid 7245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7242] truncate("./file1", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./358/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7244] <... ioctl resumed>) = 0 [pid 7242] <... truncate resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5071] <... ioctl resumed>) = 0 [pid 7242] memfd_create("syzkaller", 0 [pid 5074] newfstatat(4, "", [pid 7242] <... memfd_create resumed>) = 4 [pid 5071] close(3 [pid 7242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7244] close(3 [pid 7242] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(4, [pid 5071] <... close resumed>) = 0 [pid 7245] <... write resumed>) = 524288 [pid 7244] <... close resumed>) = 0 [pid 7243] <... mount resumed>) = 0 [pid 7242] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7243] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 7246 attached [pid 7243] <... openat resumed>) = 3 [pid 5074] close(4 [pid 7244] close(4 [pid 7242] <... write resumed>) = 524288 [pid 5074] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7246 [pid 7243] chdir("./file1" [pid 7246] set_robust_list(0x555583d53660, 24) = 0 [pid 7244] <... close resumed>) = 0 [pid 7243] <... chdir resumed>) = 0 [pid 5074] rmdir("./358/file1" [pid 7244] mkdir("./file1", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 7246] chdir("./359" [pid 7244] <... mkdir resumed>) = 0 [ 267.115361][ T7244] loop2: detected capacity change from 0 to 1024 [pid 7243] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7244] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7246] <... chdir resumed>) = 0 [pid 7243] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(3, [pid 7246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7243] truncate("./file1", 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 7245] munmap(0x7f943d000000, 138412032) = 0 [pid 5074] <... close resumed>) = 0 [pid 7246] <... prctl resumed>) = 0 [pid 5074] rmdir("./358" [pid 7246] setpgid(0, 0 [pid 7245] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 7246] <... setpgid resumed>) = 0 [pid 7245] <... openat resumed>) = 4 [pid 7245] ioctl(4, LOOP_SET_FD, 3 [pid 5074] mkdir("./359", 0777 [pid 7246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7243] <... truncate resumed>) = 0 [pid 7243] memfd_create("syzkaller", 0 [pid 7242] munmap(0x7f943d000000, 138412032 [pid 5074] <... mkdir resumed>) = 0 [pid 7246] <... openat resumed>) = 3 [pid 7243] <... memfd_create resumed>) = 4 [pid 7242] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7246] write(3, "1000", 4 [pid 7242] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 7246] <... write resumed>) = 4 [pid 7246] close(3 [pid 7243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7246] <... close resumed>) = 0 [pid 7243] <... mmap resumed>) = 0x7f943d000000 [pid 7242] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7246] symlink("/dev/binderfs", "./binderfs" [pid 7244] <... mount resumed>) = 0 [pid 7243] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7242] close(4 [pid 7246] <... symlink resumed>) = 0 [pid 7244] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7242] <... close resumed>) = 0 [pid 7244] <... openat resumed>) = 3 [pid 7244] chdir("./file1" [pid 7246] memfd_create("syzkaller", 0 [pid 7244] <... chdir resumed>) = 0 [pid 7246] <... memfd_create resumed>) = 3 [pid 7244] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7244] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7246] <... mmap resumed>) = 0x7f943d000000 [pid 7244] truncate("./file1", 0 [pid 7243] <... write resumed>) = 524288 [pid 7245] <... ioctl resumed>) = 0 [pid 7244] <... truncate resumed>) = 0 [pid 7245] close(3 [pid 7244] memfd_create("syzkaller", 0 [pid 7245] <... close resumed>) = 0 [pid 7244] <... memfd_create resumed>) = 4 [pid 7245] close(4 [pid 7242] exit_group(0 [pid 7245] <... close resumed>) = 0 [ 267.191422][ T7245] loop5: detected capacity change from 0 to 1024 [pid 7246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7245] mkdir("./file1", 0777 [pid 7244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7242] <... exit_group resumed>) = ? [pid 7244] <... mmap resumed>) = 0x7f943d000000 [pid 7244] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7243] munmap(0x7f943d000000, 138412032 [pid 5074] <... ioctl resumed>) = 0 [pid 7245] <... mkdir resumed>) = 0 [pid 7242] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7242, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7243] <... munmap resumed>) = 0 [pid 5072] umount2("./359", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7245] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7244] <... write resumed>) = 524288 [pid 7243] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7243] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... openat resumed>) = 3 [pid 7243] close(4 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5074] close(3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... close resumed>) = 0 [pid 5072] umount2("./359/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./359/binderfs") = 0 [pid 5072] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7246] <... write resumed>) = 524288 [pid 7243] <... close resumed>) = 0 [pid 7246] munmap(0x7f943d000000, 138412032) = 0 ./strace-static-x86_64: Process 7247 attached [pid 7246] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7245] <... mount resumed>) = 0 [pid 7243] exit_group(0 [pid 5072] <... umount2 resumed>) = 0 [pid 7247] set_robust_list(0x555583d53660, 24 [pid 7246] <... openat resumed>) = 4 [pid 7245] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7243] <... exit_group resumed>) = ? [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7247 [pid 7247] <... set_robust_list resumed>) = 0 [pid 7246] ioctl(4, LOOP_SET_FD, 3 [pid 7245] <... openat resumed>) = 3 [pid 7244] munmap(0x7f943d000000, 138412032 [pid 7245] chdir("./file1" [pid 5072] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7244] <... munmap resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7244] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] newfstatat(AT_FDCWD, "./359/file1", [pid 7244] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7245] <... chdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7245] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7244] close(4 [pid 7245] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7245] truncate("./file1", 0 [pid 5072] openat(AT_FDCWD, "./359/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7247] chdir("./359" [pid 7243] +++ exited with 0 +++ [pid 5072] getdents64(4, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7243, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5075] umount2("./357", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./359/file1" [pid 7244] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 7245] <... truncate resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7245] memfd_create("syzkaller", 0 [pid 5075] newfstatat(3, "", [pid 5072] close(3 [pid 7245] <... memfd_create resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... close resumed>) = 0 [pid 7245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 5072] rmdir("./359" [pid 7245] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... rmdir resumed>) = 0 [pid 7247] <... chdir resumed>) = 0 [pid 7247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7245] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./357/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] mkdir("./360", 0777 [pid 7247] <... prctl resumed>) = 0 [pid 7244] exit_group(0 [pid 7247] setpgid(0, 0 [pid 7244] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... mkdir resumed>) = 0 [pid 7247] <... setpgid resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./357/binderfs", [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7244] +++ exited with 0 +++ [pid 5075] unlink("./357/binderfs" [pid 7247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7247] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7244, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7247] write(3, "1000", 4 [pid 5075] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7246] <... ioctl resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 7247] <... write resumed>) = 4 [pid 7246] close(3 [pid 7245] <... write resumed>) = 524288 [pid 5073] <... restart_syscall resumed>) = 0 [pid 7247] close(3 [pid 7246] <... close resumed>) = 0 [pid 7247] <... close resumed>) = 0 [pid 7246] close(4 [pid 7247] symlink("/dev/binderfs", "./binderfs" [pid 7246] <... close resumed>) = 0 [pid 7245] munmap(0x7f943d000000, 138412032 [pid 7247] <... symlink resumed>) = 0 [pid 7246] mkdir("./file1", 0777 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./359", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7247] memfd_create("syzkaller", 0 [pid 5075] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 267.338188][ T7246] loop0: detected capacity change from 0 to 1024 [pid 5073] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7246] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./357/file1", [pid 7246] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... openat resumed>) = 3 [pid 7247] <... memfd_create resumed>) = 3 [pid 7247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7245] <... munmap resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(3, "", [pid 7247] <... mmap resumed>) = 0x7f943d000000 [pid 5075] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./357/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7245] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... openat resumed>) = 4 [pid 7245] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(4, "", [pid 7247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7245] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7246] <... mount resumed>) = 0 [pid 7245] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5075] rmdir("./357/file1") = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./357") = 0 [pid 7246] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] mkdir("./358", 0777 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7246] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7247] <... write resumed>) = 524288 [pid 7246] chdir("./file1" [pid 5073] umount2("./359/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7246] <... chdir resumed>) = 0 [pid 7245] exit_group(0) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7247] munmap(0x7f943d000000, 138412032 [pid 7246] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./359/binderfs", [pid 7246] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7246] truncate("./file1", 0 [pid 5073] unlink("./359/binderfs" [pid 5072] close(3 [pid 7247] <... munmap resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7245] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7245, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] umount2("./354", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", [pid 5073] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7247] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7247] <... openat resumed>) = 4 [pid 5076] getdents64(3, [pid 7247] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7248 attached [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] close(3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7248 [pid 7248] set_robust_list(0x555583d53660, 24 [pid 5076] umount2("./354/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 7248] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7248] chdir("./360" [pid 5076] newfstatat(AT_FDCWD, "./354/binderfs", [pid 7248] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7246] <... truncate resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7246] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7249 attached [pid 7248] <... prctl resumed>) = 0 [pid 7246] <... memfd_create resumed>) = 4 [pid 5076] unlink("./354/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./359/file1", [pid 7246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7249] set_robust_list(0x555583d53660, 24 [pid 7248] setpgid(0, 0 [pid 7246] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7249 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7249] <... set_robust_list resumed>) = 0 [pid 7248] <... setpgid resumed>) = 0 [pid 5076] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7249] chdir("./358" [pid 7248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7249] <... chdir resumed>) = 0 [pid 7248] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./359/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7248] write(3, "1000", 4 [pid 5073] <... openat resumed>) = 4 [pid 7249] <... prctl resumed>) = 0 [pid 7248] <... write resumed>) = 4 [pid 7249] setpgid(0, 0 [pid 7248] close(3 [pid 5073] newfstatat(4, "", [pid 7248] <... close resumed>) = 0 [pid 7247] <... ioctl resumed>) = 0 [pid 7248] symlink("/dev/binderfs", "./binderfs" [pid 7249] <... setpgid resumed>) = 0 [pid 7248] <... symlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7248] memfd_create("syzkaller", 0 [pid 7247] close(3 [pid 7246] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(4, [pid 7249] <... openat resumed>) = 3 [pid 7248] <... memfd_create resumed>) = 3 [pid 7249] write(3, "1000", 4 [pid 7248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7249] <... write resumed>) = 4 [pid 7248] <... mmap resumed>) = 0x7f943d000000 [pid 7249] close(3 [pid 7248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7247] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7249] <... close resumed>) = 0 [pid 7247] close(4 [pid 5073] getdents64(4, [pid 7249] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7249] <... symlink resumed>) = 0 [pid 5073] close(4) = 0 [pid 7249] memfd_create("syzkaller", 0 [pid 5073] rmdir("./359/file1" [ 267.470689][ T7247] loop3: detected capacity change from 0 to 1024 [pid 7249] <... memfd_create resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 7248] <... write resumed>) = 524288 [pid 7247] <... close resumed>) = 0 [pid 7246] <... write resumed>) = 524288 [pid 5076] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7247] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5076] newfstatat(AT_FDCWD, "./354/file1", [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 7247] <... mkdir resumed>) = 0 [pid 7249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... close resumed>) = 0 [pid 5076] umount2("./354/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7247] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] rmdir("./359") = 0 [pid 7248] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] mkdir("./360", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./354/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7248] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7247] <... mount resumed>) = 0 [pid 7246] munmap(0x7f943d000000, 138412032 [pid 5076] newfstatat(4, "", [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7248] <... openat resumed>) = 4 [pid 7247] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7246] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7248] ioctl(4, LOOP_SET_FD, 3 [pid 7247] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 7247] chdir("./file1" [pid 7246] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7246] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7246] close(4) = 0 [pid 7249] <... write resumed>) = 524288 [pid 7247] <... chdir resumed>) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7247] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] close(4 [pid 7247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7246] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 7247] truncate("./file1", 0 [pid 5076] rmdir("./354/file1" [pid 7249] munmap(0x7f943d000000, 138412032 [pid 7246] <... exit_group resumed>) = ? [pid 7249] <... munmap resumed>) = 0 [pid 7247] <... truncate resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7248] <... ioctl resumed>) = 0 [ 267.561224][ T7248] loop1: detected capacity change from 0 to 1024 [pid 7247] memfd_create("syzkaller", 0 [pid 7246] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 7249] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7248] close(3 [pid 7247] <... memfd_create resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7246, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7248] <... close resumed>) = 0 [pid 7247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7248] close(4 [pid 5071] umount2("./359", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7247] <... mmap resumed>) = 0x7f943d000000 [pid 7248] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7249] <... openat resumed>) = 4 [pid 7249] ioctl(4, LOOP_SET_FD, 3 [pid 7248] mkdir("./file1", 0777 [pid 7247] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3 [pid 5071] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7248] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./354" [pid 5071] <... openat resumed>) = 3 [pid 7249] <... ioctl resumed>) = 0 [pid 7248] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5076] mkdir("./355", 0777 [pid 7249] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7249] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7249] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5071] umount2("./359/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7249] <... close resumed>) = 0 [pid 7249] mkdir("./file1", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./359/binderfs", [pid 7249] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./359/binderfs" [pid 7249] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7247] <... write resumed>) = 524288 [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7248] <... mount resumed>) = 0 [pid 7248] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7247] munmap(0x7f943d000000, 138412032) = 0 [pid 7248] <... openat resumed>) = 3 [pid 7248] chdir("./file1") = 0 [pid 5073] close(3 [pid 7247] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7248] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7248] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7248] truncate("./file1", 0 [pid 7247] close(4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7249] <... mount resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./359/file1", [pid 7249] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7249] <... openat resumed>) = 3 [pid 7248] <... truncate resumed>) = 0 [pid 7249] chdir("./file1" [pid 7248] memfd_create("syzkaller", 0 [ 267.606357][ T7249] loop4: detected capacity change from 0 to 1024 [pid 5071] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7249] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7249] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] openat(AT_FDCWD, "./359/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7249] truncate("./file1", 0 [pid 7248] <... memfd_create resumed>) = 4 ./strace-static-x86_64: Process 7250 attached [pid 7248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7250 [pid 5071] <... openat resumed>) = 4 [pid 7250] set_robust_list(0x555583d53660, 24 [pid 7248] <... mmap resumed>) = 0x7f943d000000 [pid 5071] newfstatat(4, "", [pid 7250] <... set_robust_list resumed>) = 0 [pid 7250] chdir("./360" [pid 7249] <... truncate resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7249] memfd_create("syzkaller", 0 [pid 5071] getdents64(4, [pid 7249] <... memfd_create resumed>) = 4 [pid 7250] <... chdir resumed>) = 0 [pid 7249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7249] <... mmap resumed>) = 0x7f943d000000 [pid 7249] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] close(4 [pid 7250] setpgid(0, 0 [pid 7247] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7250] <... setpgid resumed>) = 0 [pid 7247] exit_group(0 [pid 5071] rmdir("./359/file1" [pid 7250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7247] <... exit_group resumed>) = ? [pid 5071] <... rmdir resumed>) = 0 [pid 7250] <... openat resumed>) = 3 [pid 7248] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7247] +++ exited with 0 +++ [pid 5076] close(3 [pid 5071] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7247, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... close resumed>) = 0 [pid 7250] write(3, "1000", 4) = 4 [pid 7249] <... write resumed>) = 524288 [pid 7248] <... write resumed>) = 524288 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] close(3 [pid 7250] close(3 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./359") = 0 [pid 7250] <... close resumed>) = 0 [pid 5071] mkdir("./360", 0777 [pid 7250] symlink("/dev/binderfs", "./binderfs" [pid 5074] umount2("./359", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7251 attached [pid 7250] <... symlink resumed>) = 0 [pid 7249] munmap(0x7f943d000000, 138412032 [pid 7248] munmap(0x7f943d000000, 138412032 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7251 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7251] set_robust_list(0x555583d53660, 24 [pid 5074] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7251] <... set_robust_list resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7251] chdir("./355" [pid 5074] newfstatat(3, "", [pid 5071] <... openat resumed>) = 3 [pid 7251] <... chdir resumed>) = 0 [pid 7248] <... munmap resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] getdents64(3, [pid 7251] <... prctl resumed>) = 0 [pid 7251] setpgid(0, 0 [pid 7250] memfd_create("syzkaller", 0 [pid 7249] <... munmap resumed>) = 0 [pid 7248] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7250] <... memfd_create resumed>) = 3 [pid 5074] umount2("./359/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7248] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7251] <... setpgid resumed>) = 0 [pid 7250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7250] <... mmap resumed>) = 0x7f943d000000 [pid 7249] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./359/binderfs", [pid 7251] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7249] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7249] close(4 [pid 7248] close(4 [pid 5074] unlink("./359/binderfs") = 0 [pid 5074] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7249] <... close resumed>) = 0 [pid 7251] write(3, "1000", 4) = 4 [pid 7251] close(3) = 0 [pid 7251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7251] memfd_create("syzkaller", 0 [pid 7250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7251] <... memfd_create resumed>) = 3 [pid 7251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7248] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7249] exit_group(0 [pid 7250] <... write resumed>) = 524288 [pid 7249] <... exit_group resumed>) = ? [pid 7248] exit_group(0 [pid 5071] <... ioctl resumed>) = 0 [pid 5074] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7249] +++ exited with 0 +++ [pid 7248] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7249, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] newfstatat(AT_FDCWD, "./359/file1", [pid 5075] umount2("./358", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 7251] <... write resumed>) = 524288 [pid 7250] munmap(0x7f943d000000, 138412032 [pid 7248] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7248, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./360", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] openat(AT_FDCWD, "./359/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7251] munmap(0x7f943d000000, 138412032 [pid 7250] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... openat resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] umount2("./358/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] newfstatat(4, "", [pid 5072] <... openat resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7252 [pid 7250] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(3, "", ./strace-static-x86_64: Process 7252 attached [pid 7251] <... munmap resumed>) = 0 [pid 7250] ioctl(4, LOOP_SET_FD, 3 [pid 5075] newfstatat(AT_FDCWD, "./358/binderfs", [pid 5074] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(3, [pid 5075] unlink("./358/binderfs" [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... unlink resumed>) = 0 [pid 5072] umount2("./360/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./360/binderfs", [pid 5075] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./360/binderfs") = 0 [pid 5072] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7252] set_robust_list(0x555583d53660, 24 [pid 7251] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7250] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7252] <... set_robust_list resumed>) = 0 [pid 7251] <... openat resumed>) = 4 [pid 7250] close(3 [pid 5074] getdents64(4, [pid 7252] chdir("./360" [pid 7251] ioctl(4, LOOP_SET_FD, 3 [pid 7250] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7252] <... chdir resumed>) = 0 [pid 7251] <... ioctl resumed>) = 0 [pid 7250] close(4 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] close(4 [pid 7252] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./359/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./359") = 0 [pid 7252] <... prctl resumed>) = 0 [pid 7252] setpgid(0, 0 [pid 5074] mkdir("./360", 0777) = 0 [pid 7252] <... setpgid resumed>) = 0 [pid 7251] close(3 [pid 7250] <... close resumed>) = 0 [pid 5075] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 7250] mkdir("./file1", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./358/file1", [pid 7252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7250] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7252] <... openat resumed>) = 3 [pid 7252] write(3, "1000", 4 [pid 7250] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7252] <... write resumed>) = 4 [pid 7251] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7252] close(3 [pid 7251] close(4 [pid 5075] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./360/file1", [pid 7252] <... close resumed>) = 0 [pid 7251] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7252] symlink("/dev/binderfs", "./binderfs" [pid 7251] mkdir("./file1", 0777 [pid 7252] <... symlink resumed>) = 0 [pid 7251] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./358/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7252] memfd_create("syzkaller", 0 [pid 5075] <... openat resumed>) = 4 [pid 5072] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7252] <... memfd_create resumed>) = 3 [pid 7251] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] openat(AT_FDCWD, "./360/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5072] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 267.794106][ T7250] loop2: detected capacity change from 0 to 1024 [ 267.807330][ T7251] loop5: detected capacity change from 0 to 1024 [pid 7252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7251] <... mount resumed>) = 0 [pid 7250] <... mount resumed>) = 0 [pid 5075] close(4 [pid 5072] getdents64(4, [pid 7251] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7250] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7251] <... openat resumed>) = 3 [pid 7250] <... openat resumed>) = 3 [pid 5075] rmdir("./358/file1" [pid 5072] close(4 [pid 7251] chdir("./file1") = 0 [pid 7251] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7251] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7250] chdir("./file1" [pid 7251] truncate("./file1", 0 [pid 7250] <... chdir resumed>) = 0 [pid 7250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] getdents64(3, [pid 5074] <... ioctl resumed>) = 0 [pid 5072] rmdir("./360/file1" [pid 7252] <... write resumed>) = 524288 [pid 7250] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7250] truncate("./file1", 0 [pid 5075] close(3 [pid 5072] getdents64(3, [pid 7251] <... truncate resumed>) = 0 [pid 7251] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./358" [pid 5072] close(3 [pid 7251] <... memfd_create resumed>) = 4 [pid 7251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7251] <... mmap resumed>) = 0x7f943d000000 [pid 5075] mkdir("./359", 0777 [pid 5072] rmdir("./360" [pid 7251] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7252] munmap(0x7f943d000000, 138412032) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5072] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7250] <... truncate resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5072] mkdir("./361", 0777 [pid 7252] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7250] memfd_create("syzkaller", 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7252] <... openat resumed>) = 4 [pid 7250] <... memfd_create resumed>) = 4 [pid 5072] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7253 attached [pid 7252] ioctl(4, LOOP_SET_FD, 3 [pid 7251] <... write resumed>) = 524288 [pid 7250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7253] set_robust_list(0x555583d53660, 24 [pid 7251] munmap(0x7f943d000000, 138412032 [pid 7250] <... mmap resumed>) = 0x7f943d000000 [pid 7253] <... set_robust_list resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7253 [pid 5072] <... openat resumed>) = 3 [pid 7251] <... munmap resumed>) = 0 [pid 7253] chdir("./360" [pid 7252] <... ioctl resumed>) = 0 [pid 7250] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7253] <... chdir resumed>) = 0 [pid 7252] close(3 [pid 7251] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7252] <... close resumed>) = 0 [pid 7251] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7253] <... prctl resumed>) = 0 [pid 7252] close(4 [pid 7251] close(4 [pid 7253] setpgid(0, 0 [pid 7252] <... close resumed>) = 0 [pid 7251] <... close resumed>) = 0 [pid 7252] mkdir("./file1", 0777 [pid 7251] exit_group(0) = ? [pid 5075] <... ioctl resumed>) = 0 [pid 7253] <... setpgid resumed>) = 0 [pid 7252] <... mkdir resumed>) = 0 [pid 7251] +++ exited with 0 +++ [pid 7250] <... write resumed>) = 524288 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7251, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] close(3) = 0 [pid 7253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7252] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7253] <... openat resumed>) = 3 [pid 7250] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./355", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7250] <... munmap resumed>) = 0 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7254 attached [pid 5076] getdents64(3, [pid 7254] set_robust_list(0x555583d53660, 24 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7254 [pid 7253] write(3, "1000", 4 [pid 7250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7254] <... set_robust_list resumed>) = 0 [pid 5076] umount2("./355/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7254] chdir("./359" [pid 7253] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./355/binderfs" [pid 7254] <... chdir resumed>) = 0 [pid 7253] close(3 [pid 7250] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... unlink resumed>) = 0 [pid 7254] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7253] <... close resumed>) = 0 [pid 7250] close(4 [pid 5076] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7254] <... prctl resumed>) = 0 [pid 7254] setpgid(0, 0) = 0 [pid 7254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7250] <... close resumed>) = 0 [ 267.911345][ T7252] loop0: detected capacity change from 0 to 1024 [pid 7253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5076] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7253] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7254] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./355/file1", [pid 7254] write(3, "1000", 4 [pid 7253] <... memfd_create resumed>) = 3 [pid 7252] <... mount resumed>) = 0 [pid 7254] <... write resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7254] close(3 [pid 5076] umount2("./355/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7254] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7254] symlink("/dev/binderfs", "./binderfs" [pid 5076] openat(AT_FDCWD, "./355/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7252] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7254] <... symlink resumed>) = 0 [pid 7250] exit_group(0 [pid 5076] <... openat resumed>) = 4 [pid 5072] close(3 [pid 7252] <... openat resumed>) = 3 [pid 7253] <... mmap resumed>) = 0x7f943d000000 [pid 7250] <... exit_group resumed>) = ? [pid 7254] memfd_create("syzkaller", 0 [pid 7252] chdir("./file1" [pid 5076] newfstatat(4, "", [pid 5072] <... close resumed>) = 0 [pid 7254] <... memfd_create resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(4, [pid 7254] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7252] <... chdir resumed>) = 0 [pid 7250] +++ exited with 0 +++ [pid 5076] getdents64(4, [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7250, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 7252] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] umount2("./360", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7252] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./355/file1" [pid 5073] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7252] truncate("./file1", 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7255 ./strace-static-x86_64: Process 7255 attached [pid 7255] set_robust_list(0x555583d53660, 24 [pid 5073] newfstatat(3, "", [pid 7255] <... set_robust_list resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7255] chdir("./361" [pid 5076] getdents64(3, [pid 5073] getdents64(3, [pid 7255] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7254] <... write resumed>) = 524288 [pid 7252] <... truncate resumed>) = 0 [pid 5076] close(3 [pid 5073] umount2("./360/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7255] <... prctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7255] setpgid(0, 0 [pid 5073] newfstatat(AT_FDCWD, "./360/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7255] <... setpgid resumed>) = 0 [pid 7255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./355" [pid 5073] unlink("./360/binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7255] <... openat resumed>) = 3 [pid 5073] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7255] write(3, "1000", 4) = 4 [pid 7255] close(3 [pid 5076] mkdir("./356", 0777 [pid 7255] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7255] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7253] <... write resumed>) = 524288 [pid 7252] memfd_create("syzkaller", 0 [pid 7254] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7254] <... munmap resumed>) = 0 [pid 7252] <... memfd_create resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 7252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7255] memfd_create("syzkaller", 0 [pid 7252] <... mmap resumed>) = 0x7f943d000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = 0 [pid 7255] <... memfd_create resumed>) = 3 [pid 7254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7254] <... openat resumed>) = 4 [pid 7255] <... mmap resumed>) = 0x7f943d000000 [pid 7254] ioctl(4, LOOP_SET_FD, 3 [pid 7255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7253] munmap(0x7f943d000000, 138412032 [pid 7252] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./360/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./360/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 7253] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7255] <... write resumed>) = 524288 [pid 7253] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./360/file1") = 0 [pid 5073] getdents64(3, [pid 7254] <... ioctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7254] close(3 [pid 5073] close(3 [pid 7254] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7254] close(4) = 0 [pid 5073] rmdir("./360") = 0 [pid 5073] mkdir("./361", 0777) = 0 [pid 7254] mkdir("./file1", 0777) = 0 [pid 7254] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7253] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [ 268.039397][ T7254] loop4: detected capacity change from 0 to 1024 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7255] munmap(0x7f943d000000, 138412032 [pid 7253] ioctl(4, LOOP_SET_FD, 3 [pid 7252] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 7255] <... munmap resumed>) = 0 [pid 7255] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7255] ioctl(4, LOOP_SET_FD, 3 [pid 7253] <... ioctl resumed>) = 0 [pid 7252] munmap(0x7f943d000000, 138412032 [pid 7253] close(3 [pid 7252] <... munmap resumed>) = 0 [pid 7253] <... close resumed>) = 0 [pid 7253] close(4) = 0 [pid 7254] <... mount resumed>) = 0 [pid 7253] mkdir("./file1", 0777 [pid 7252] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] close(3 [pid 7254] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 7253] <... mkdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7252] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7254] <... openat resumed>) = 3 [pid 7253] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7252] close(4 [pid 7254] chdir("./file1" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7256 [pid 7254] <... chdir resumed>) = 0 [pid 7254] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 7256 attached [pid 7256] set_robust_list(0x555583d53660, 24 [pid 7254] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7256] <... set_robust_list resumed>) = 0 [pid 7254] truncate("./file1", 0 [pid 7256] chdir("./356") = 0 [pid 7256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7254] <... truncate resumed>) = 0 [pid 7254] memfd_create("syzkaller", 0) = 4 [pid 7254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7256] setpgid(0, 0 [pid 7254] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7255] <... ioctl resumed>) = 0 [pid 7255] close(3) = 0 [pid 7255] close(4) = 0 [pid 7255] mkdir("./file1", 0777) = 0 [pid 7255] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7256] <... setpgid resumed>) = 0 [pid 7252] <... close resumed>) = 0 [pid 7256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7252] exit_group(0 [pid 7256] write(3, "1000", 4 [pid 7252] <... exit_group resumed>) = ? [pid 7256] <... write resumed>) = 4 [pid 7252] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7252, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7253] <... mount resumed>) = 0 [pid 7256] close(3) = 0 [pid 7253] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 268.081581][ T7253] loop3: detected capacity change from 0 to 1024 [ 268.084208][ T7255] loop1: detected capacity change from 0 to 1024 [pid 7256] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./360", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7256] <... symlink resumed>) = 0 [pid 7255] <... mount resumed>) = 0 [pid 7254] <... write resumed>) = 524288 [pid 7253] <... openat resumed>) = 3 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7255] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7256] memfd_create("syzkaller", 0 [pid 5071] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 7253] chdir("./file1" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7256] <... memfd_create resumed>) = 3 [pid 7255] <... openat resumed>) = 3 [pid 7253] <... chdir resumed>) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7253] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7255] chdir("./file1" [pid 7253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] umount2("./360/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7253] truncate("./file1", 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7255] <... chdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./360/binderfs", [pid 7255] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7255] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(3 [pid 5071] unlink("./360/binderfs" [pid 5073] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 7256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7255] truncate("./file1", 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7257 [pid 7253] <... truncate resumed>) = 0 ./strace-static-x86_64: Process 7257 attached [pid 7253] memfd_create("syzkaller", 0 [pid 7257] set_robust_list(0x555583d53660, 24 [pid 7255] <... truncate resumed>) = 0 [pid 7253] <... memfd_create resumed>) = 4 [pid 7257] <... set_robust_list resumed>) = 0 [pid 7253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7257] chdir("./361" [pid 7253] <... mmap resumed>) = 0x7f943d000000 [pid 7257] <... chdir resumed>) = 0 [pid 7255] memfd_create("syzkaller", 0 [pid 7257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7255] <... memfd_create resumed>) = 4 [pid 7257] <... prctl resumed>) = 0 [pid 7255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7257] setpgid(0, 0 [pid 7255] <... mmap resumed>) = 0x7f943d000000 [pid 7257] <... setpgid resumed>) = 0 [pid 7255] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7254] munmap(0x7f943d000000, 138412032 [pid 7257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7254] <... munmap resumed>) = 0 [pid 7257] write(3, "1000", 4) = 4 [pid 7257] close(3) = 0 [pid 7255] <... write resumed>) = 524288 [pid 7254] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7253] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... umount2 resumed>) = 0 [pid 7257] memfd_create("syzkaller", 0 [pid 7254] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7254] close(4 [pid 7256] <... write resumed>) = 524288 [pid 7257] <... memfd_create resumed>) = 3 [pid 7254] <... close resumed>) = 0 [pid 7257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./360/file1", [pid 7257] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./360/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7255] munmap(0x7f943d000000, 138412032 [pid 5071] newfstatat(4, "", [pid 7255] <... munmap resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, [pid 7255] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7254] exit_group(0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7255] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] close(4) = 0 [pid 7254] <... exit_group resumed>) = ? [pid 5071] rmdir("./360/file1") = 0 [pid 7255] close(4 [pid 5071] getdents64(3, [pid 7253] <... write resumed>) = 524288 [pid 7257] <... write resumed>) = 524288 [pid 7256] munmap(0x7f943d000000, 138412032 [pid 7254] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7254, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... close resumed>) = 0 [pid 7256] <... munmap resumed>) = 0 [pid 7255] <... close resumed>) = 0 [pid 5071] rmdir("./360" [pid 7256] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7253] munmap(0x7f943d000000, 138412032 [pid 5071] <... rmdir resumed>) = 0 [pid 7256] ioctl(4, LOOP_SET_FD, 3 [pid 7253] <... munmap resumed>) = 0 [pid 5075] umount2("./359", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] mkdir("./361", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 7255] exit_group(0 [pid 5075] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7255] <... exit_group resumed>) = ? [pid 5075] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7253] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] getdents64(3, [pid 7253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7253] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./359/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./359/binderfs" [pid 7255] +++ exited with 0 +++ [pid 5075] <... unlink resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7255, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7257] munmap(0x7f943d000000, 138412032) = 0 [pid 5075] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7257] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] umount2("./361", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7257] <... openat resumed>) = 4 [pid 7253] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7257] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... umount2 resumed>) = 0 [pid 7256] <... ioctl resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7256] close(3 [pid 7253] exit_group(0 [pid 5072] newfstatat(3, "", [pid 7253] <... exit_group resumed>) = ? [pid 7256] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7256] close(4 [pid 7253] +++ exited with 0 +++ [pid 5072] getdents64(3, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7253, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7256] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7256] mkdir("./file1", 0777 [pid 5072] umount2("./361/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./360", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./361/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7256] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./359/file1", [pid 5074] <... openat resumed>) = 3 [pid 5072] unlink("./361/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(3, "", [pid 5075] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5072] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7256] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] openat(AT_FDCWD, "./359/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... openat resumed>) = 4 [pid 5074] umount2("./360/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./360/binderfs", [pid 5075] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] unlink("./360/binderfs" [pid 5075] getdents64(4, [pid 5074] <... unlink resumed>) = 0 [pid 7257] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7257] close(3 [pid 5075] close(4 [pid 7257] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7257] close(4 [pid 5075] rmdir("./359/file1" [pid 7257] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7257] mkdir("./file1", 0777 [pid 5075] getdents64(3, [pid 7257] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(3) = 0 [pid 5075] rmdir("./359" [pid 7257] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7256] <... mount resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./361/file1", [pid 5075] mkdir("./360", 0777 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7256] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... mkdir resumed>) = 0 [pid 5072] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7256] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] openat(AT_FDCWD, "./361/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7257] <... mount resumed>) = 0 [pid 7256] chdir("./file1" [pid 5072] <... openat resumed>) = 4 [pid 7257] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7257] chdir("./file1") = 0 [pid 7257] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 268.231037][ T7256] loop5: detected capacity change from 0 to 1024 [ 268.258184][ T7257] loop2: detected capacity change from 0 to 1024 [pid 7257] truncate("./file1", 0 [pid 7256] <... chdir resumed>) = 0 [pid 5074] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 7256] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 7256] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./360/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... close resumed>) = 0 [pid 7256] truncate("./file1", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(4, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 7258 ./strace-static-x86_64: Process 7258 attached [pid 7258] set_robust_list(0x555583d53660, 24) = 0 [pid 7258] chdir("./361") = 0 [pid 7258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7258] setpgid(0, 0) = 0 [pid 7258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7258] write(3, "1000", 4 [pid 5072] getdents64(4, [pid 7258] <... write resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7258] close(3) = 0 [pid 7257] <... truncate resumed>) = 0 [pid 7256] <... truncate resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./360/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7256] memfd_create("syzkaller", 0 [pid 5072] close(4 [pid 5074] newfstatat(4, "", [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./361/file1" [pid 7256] <... memfd_create resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7258] symlink("/dev/binderfs", "./binderfs" [pid 7257] memfd_create("syzkaller", 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] <... rmdir resumed>) = 0 [pid 7256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7258] <... symlink resumed>) = 0 [pid 7257] <... memfd_create resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(3, [pid 7257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7256] <... mmap resumed>) = 0x7f943d000000 [pid 7257] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7258] memfd_create("syzkaller", 0 [pid 7257] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7256] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5074] close(4 [pid 7258] <... memfd_create resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] rmdir("./360/file1" [pid 7258] <... mmap resumed>) = 0x7f943d000000 [pid 7258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] rmdir("./361" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(3, ./strace-static-x86_64: Process 7259 attached 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7257] <... write resumed>) = 524288 [pid 7259] set_robust_list(0x555583d53660, 24 [pid 5074] close(3 [pid 5072] mkdir("./362", 0777 [pid 7259] <... set_robust_list resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7259 [pid 5074] <... close resumed>) = 0 [pid 7259] chdir("./360" [pid 5074] rmdir("./360" [pid 5072] <... mkdir resumed>) = 0 [pid 7259] <... chdir resumed>) = 0 [pid 7258] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] mkdir("./361", 0777 [pid 5072] <... openat resumed>) = 3 [pid 7259] <... prctl resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7259] setpgid(0, 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 5072] <... ioctl resumed>) = 0 [pid 7259] <... setpgid resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] close(3 [pid 7259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7259] <... openat resumed>) = 3 [pid 5074] close(3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7259] write(3, "1000", 4 [pid 5074] <... close resumed>) = 0 [pid 7258] munmap(0x7f943d000000, 138412032 [pid 7257] munmap(0x7f943d000000, 138412032 [pid 7258] <... munmap resumed>) = 0 [pid 7257] <... munmap resumed>) = 0 [pid 7256] <... write resumed>) = 524288 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7256] munmap(0x7f943d000000, 138412032) = 0 [pid 7258] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7257] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7256] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7259] <... write resumed>) = 4 [pid 7257] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7256] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7256] close(4 [pid 7259] close(3 [pid 7258] <... openat resumed>) = 4 [pid 7259] <... close resumed>) = 0 [pid 7257] close(4 [pid 7256] <... close resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7260 ./strace-static-x86_64: Process 7261 attached ./strace-static-x86_64: Process 7260 attached [pid 7259] symlink("/dev/binderfs", "./binderfs" [pid 7258] ioctl(4, LOOP_SET_FD, 3 [pid 7257] <... close resumed>) = 0 [pid 7260] set_robust_list(0x555583d53660, 24 [pid 7259] <... symlink resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7261 [pid 7261] set_robust_list(0x555583d53660, 24 [pid 7260] <... set_robust_list resumed>) = 0 [pid 7259] memfd_create("syzkaller", 0 [pid 7261] <... set_robust_list resumed>) = 0 [pid 7260] chdir("./362" [pid 7259] <... memfd_create resumed>) = 3 [pid 7260] <... chdir resumed>) = 0 [pid 7259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7261] chdir("./361" [pid 7259] <... mmap resumed>) = 0x7f943d000000 [pid 7261] <... chdir resumed>) = 0 [pid 7260] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7261] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7260] <... prctl resumed>) = 0 [pid 7256] exit_group(0 [pid 7261] <... prctl resumed>) = 0 [pid 7260] setpgid(0, 0 [pid 7256] <... exit_group resumed>) = ? [pid 7261] setpgid(0, 0 [pid 7260] <... setpgid resumed>) = 0 [pid 7256] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7256, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7261] <... setpgid resumed>) = 0 [pid 7260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7257] exit_group(0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7257] <... exit_group resumed>) = ? [pid 5076] <... restart_syscall resumed>) = 0 [pid 7257] +++ exited with 0 +++ [pid 7260] <... openat resumed>) = 3 [pid 7261] <... openat resumed>) = 3 [pid 7260] write(3, "1000", 4 [pid 5076] umount2("./356", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7257, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7261] write(3, "1000", 4 [pid 7258] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./361", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7261] <... write resumed>) = 4 [pid 7258] close(3 [pid 5076] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7260] <... write resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7261] close(3 [pid 7258] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7260] close(3 [pid 7261] <... close resumed>) = 0 [pid 7260] <... close resumed>) = 0 [pid 7259] <... write resumed>) = 524288 [pid 7258] close(4 [pid 5076] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 7260] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 5076] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7261] symlink("/dev/binderfs", "./binderfs" [pid 7260] <... symlink resumed>) = 0 [pid 7258] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] getdents64(3, [pid 7258] mkdir("./file1", 0777 [pid 5076] umount2("./356/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7260] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7258] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./361/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7261] <... symlink resumed>) = 0 [pid 7260] <... memfd_create resumed>) = 3 [pid 7258] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] newfstatat(AT_FDCWD, "./356/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7261] memfd_create("syzkaller", 0 [pid 7260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7259] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./361/binderfs", [ 268.444983][ T7258] loop0: detected capacity change from 0 to 1024 [pid 5076] unlink("./356/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7261] <... memfd_create resumed>) = 3 [pid 7260] <... mmap resumed>) = 0x7f943d000000 [pid 7259] <... munmap resumed>) = 0 [pid 7258] <... mount resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] unlink("./361/binderfs") = 0 [pid 5076] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7259] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7258] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7258] <... openat resumed>) = 3 [pid 7258] chdir("./file1") = 0 [pid 7258] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7258] truncate("./file1", 0 [pid 5073] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./361/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./361/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7258] <... truncate resumed>) = 0 [pid 5076] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 7258] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7258] <... memfd_create resumed>) = 4 [pid 5073] getdents64(4, [pid 7258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7258] <... mmap resumed>) = 0x7f943d000000 [pid 5076] newfstatat(AT_FDCWD, "./356/file1", [pid 5073] getdents64(4, [pid 7258] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./356/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./356/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] rmdir("./361/file1" [pid 7261] <... write resumed>) = 524288 [pid 7259] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 7260] <... write resumed>) = 524288 [pid 7259] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5073] getdents64(3, [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5073] close(3 [pid 5076] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] rmdir("./356/file1" [pid 5073] rmdir("./361" [pid 7260] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 7260] <... munmap resumed>) = 0 [pid 7261] munmap(0x7f943d000000, 138412032 [pid 7260] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7259] <... ioctl resumed>) = 0 [pid 7258] <... write resumed>) = 524288 [pid 5076] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 7259] close(3 [pid 7260] <... openat resumed>) = 4 [pid 7259] <... close resumed>) = 0 [pid 7261] <... munmap resumed>) = 0 [pid 7260] ioctl(4, LOOP_SET_FD, 3 [pid 7259] close(4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7259] <... close resumed>) = 0 [pid 7259] mkdir("./file1", 0777 [pid 5076] close(3 [pid 5073] mkdir("./362", 0777) = 0 [pid 7261] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 7261] <... openat resumed>) = 4 [pid 5076] rmdir("./356" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7259] <... mkdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7261] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... ioctl resumed>) = 0 [pid 7259] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] close(3 [pid 5076] mkdir("./357", 0777 [pid 5073] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7258] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7262 ./strace-static-x86_64: Process 7262 attached [pid 7258] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7262] set_robust_list(0x555583d53660, 24 [pid 7258] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7262] <... set_robust_list resumed>) = 0 [pid 7258] close(4 [pid 5076] <... openat resumed>) = 3 [pid 7262] chdir("./362" [pid 7258] <... close resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7262] <... chdir resumed>) = 0 [pid 7262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7262] setpgid(0, 0) = 0 [pid 7262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7260] <... ioctl resumed>) = 0 [pid 7262] write(3, "1000", 4 [pid 7261] <... ioctl resumed>) = 0 [pid 7260] close(3 [pid 7258] exit_group(0) = ? [pid 7260] <... close resumed>) = 0 [pid 7260] close(4 [pid 7259] <... mount resumed>) = 0 [pid 7258] +++ exited with 0 +++ [pid 7261] close(3 [pid 7260] <... close resumed>) = 0 [pid 7259] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7262] <... write resumed>) = 4 [pid 7261] <... close resumed>) = 0 [pid 7259] <... openat resumed>) = 3 [ 268.587486][ T7259] loop4: detected capacity change from 0 to 1024 [ 268.615668][ T7260] loop1: detected capacity change from 0 to 1024 [ 268.630172][ T7261] loop3: detected capacity change from 0 to 1024 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7258, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7260] mkdir("./file1", 0777 [pid 7262] close(3 [pid 7261] close(4 [pid 7259] chdir("./file1" [pid 5071] umount2("./361", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7262] <... close resumed>) = 0 [pid 7260] <... mkdir resumed>) = 0 [pid 7262] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7260] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7262] <... symlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7262] memfd_create("syzkaller", 0 [pid 5071] <... openat resumed>) = 3 [pid 7262] <... memfd_create resumed>) = 3 [pid 7261] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 7262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7261] mkdir("./file1", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7262] <... mmap resumed>) = 0x7f943d000000 [pid 7261] <... mkdir resumed>) = 0 [pid 7262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7261] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7259] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 7260] <... mount resumed>) = 0 [pid 7259] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7260] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7259] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7260] chdir("./file1" [pid 7259] truncate("./file1", 0 [pid 7260] <... chdir resumed>) = 0 [pid 7260] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] umount2("./361/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7260] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7260] truncate("./file1", 0 [pid 5071] newfstatat(AT_FDCWD, "./361/binderfs", [pid 7262] <... write resumed>) = 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./361/binderfs") = 0 [pid 5071] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7261] <... mount resumed>) = 0 [pid 7259] <... truncate resumed>) = 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7260] <... truncate resumed>) = 0 [pid 7259] memfd_create("syzkaller", 0 [pid 7260] memfd_create("syzkaller", 0 [pid 7259] <... memfd_create resumed>) = 4 [pid 7261] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7260] <... memfd_create resumed>) = 4 [pid 7259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7263 attached [pid 7261] <... openat resumed>) = 3 [pid 7263] set_robust_list(0x555583d53660, 24 [pid 7261] chdir("./file1" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7263 [pid 7263] <... set_robust_list resumed>) = 0 [pid 7261] <... chdir resumed>) = 0 [pid 7263] chdir("./357" [pid 7261] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7263] <... chdir resumed>) = 0 [pid 7261] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7261] truncate("./file1", 0 [pid 7263] <... prctl resumed>) = 0 [pid 7262] munmap(0x7f943d000000, 138412032 [pid 7259] <... mmap resumed>) = 0x7f943d000000 [pid 7263] setpgid(0, 0 [pid 7260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7263] <... setpgid resumed>) = 0 [pid 7262] <... munmap resumed>) = 0 [pid 7263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7262] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7260] <... mmap resumed>) = 0x7f943d000000 [pid 7263] <... openat resumed>) = 3 [pid 7262] <... openat resumed>) = 4 [pid 7263] write(3, "1000", 4 [pid 7262] ioctl(4, LOOP_SET_FD, 3 [pid 7263] <... write resumed>) = 4 [pid 7261] <... truncate resumed>) = 0 [pid 7260] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7263] close(3 [pid 7261] memfd_create("syzkaller", 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7263] <... close resumed>) = 0 [pid 7261] <... memfd_create resumed>) = 4 [pid 7263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7263] memfd_create("syzkaller", 0 [pid 7261] <... mmap resumed>) = 0x7f943d000000 [pid 7263] <... memfd_create resumed>) = 3 [pid 7261] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7259] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7262] <... ioctl resumed>) = 0 [pid 5071] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7263] <... mmap resumed>) = 0x7f943d000000 [pid 7262] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7262] <... close resumed>) = 0 [pid 7262] close(4) = 0 [pid 7262] mkdir("./file1", 0777) = 0 [pid 5071] newfstatat(AT_FDCWD, "./361/file1", [pid 7262] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 268.746043][ T7262] loop2: detected capacity change from 0 to 1024 [pid 7263] <... write resumed>) = 524288 [pid 7260] <... write resumed>) = 524288 [pid 7259] <... write resumed>) = 524288 [pid 5071] openat(AT_FDCWD, "./361/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7260] munmap(0x7f943d000000, 138412032 [pid 7261] <... write resumed>) = 524288 [pid 5071] <... openat resumed>) = 4 [pid 7260] <... munmap resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7260] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7261] munmap(0x7f943d000000, 138412032 [pid 5071] getdents64(4, [pid 7261] <... munmap resumed>) = 0 [pid 7260] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, [pid 7263] munmap(0x7f943d000000, 138412032 [pid 7261] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7263] <... munmap resumed>) = 0 [pid 7262] <... mount resumed>) = 0 [pid 7261] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7262] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7261] close(4 [pid 7262] <... openat resumed>) = 3 [pid 7261] <... close resumed>) = 0 [pid 7260] close(4 [pid 5071] close(4 [pid 7262] chdir("./file1" [pid 7263] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7262] <... chdir resumed>) = 0 [pid 7263] <... openat resumed>) = 4 [pid 7262] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7263] ioctl(4, LOOP_SET_FD, 3 [pid 7262] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... close resumed>) = 0 [pid 7262] truncate("./file1", 0 [pid 7260] <... close resumed>) = 0 [pid 7259] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] rmdir("./361/file1" [pid 7262] <... truncate resumed>) = 0 [pid 7261] exit_group(0 [pid 7259] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7262] memfd_create("syzkaller", 0 [pid 7261] <... exit_group resumed>) = ? [pid 7262] <... memfd_create resumed>) = 4 [pid 7261] +++ exited with 0 +++ [pid 7259] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... rmdir resumed>) = 0 [pid 7262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7259] close(4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7261, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7262] <... mmap resumed>) = 0x7f943d000000 [pid 7259] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 7262] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7260] exit_group(0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7260] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 5074] umount2("./361", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7263] <... ioctl resumed>) = 0 [pid 7263] close(3) = 0 [pid 7260] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7260, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] rmdir("./361" [pid 5074] <... openat resumed>) = 3 [pid 5072] umount2("./362", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7263] close(4 [pid 5074] newfstatat(3, "", [pid 5071] <... rmdir resumed>) = 0 [pid 7263] <... close resumed>) = 0 [pid 7259] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7263] mkdir("./file1", 0777 [pid 7259] <... exit_group resumed>) = ? [pid 5074] getdents64(3, [pid 5072] newfstatat(3, "", [pid 5071] mkdir("./362", 0777 [pid 7263] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7263] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7259] +++ exited with 0 +++ [pid 5074] umount2("./361/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7259, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./361/binderfs", [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./362/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5075] umount2("./360", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] unlink("./361/binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./362/binderfs", [pid 5075] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [ 268.826913][ T7263] loop5: detected capacity change from 0 to 1024 [pid 5074] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] unlink("./362/binderfs" [pid 7263] <... mount resumed>) = 0 [pid 7262] <... write resumed>) = 524288 [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 7263] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7263] <... openat resumed>) = 3 [pid 7262] munmap(0x7f943d000000, 138412032 [pid 5075] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7262] <... munmap resumed>) = 0 [pid 5075] umount2("./360/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./361/file1", [pid 5072] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./360/binderfs", [pid 5074] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7262] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./360/binderfs" [pid 5074] openat(AT_FDCWD, "./361/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7263] chdir("./file1" [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7263] <... chdir resumed>) = 0 [pid 7262] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7263] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] newfstatat(4, "", [pid 7263] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7262] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7263] truncate("./file1", 0 [pid 5074] getdents64(4, [pid 7263] <... truncate resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7263] memfd_create("syzkaller", 0 [pid 5074] getdents64(4, [pid 5072] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7263] <... memfd_create resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7263] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./362/file1", [pid 5074] rmdir("./361/file1" [pid 7263] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7262] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5072] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 7263] <... write resumed>) = 524288 [pid 5075] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./362/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./361" [pid 5072] <... openat resumed>) = 4 [pid 7262] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] newfstatat(AT_FDCWD, "./360/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5074] mkdir("./362", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7262] <... exit_group resumed>) = ? [pid 5074] <... mkdir resumed>) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5075] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./362/file1" [pid 7262] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7264 ./strace-static-x86_64: Process 7264 attached [pid 5075] openat(AT_FDCWD, "./360/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] getdents64(3, [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7262, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7264] set_robust_list(0x555583d53660, 24) = 0 [pid 5075] newfstatat(4, "", [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] close(3 [pid 7264] chdir("./362" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5075] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] rmdir("./362" [pid 5075] getdents64(4, [pid 5072] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] mkdir("./363", 0777 [pid 7264] <... chdir resumed>) = 0 [pid 5075] close(4 [pid 7264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... close resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7264] <... prctl resumed>) = 0 [pid 5075] rmdir("./360/file1" [pid 7264] setpgid(0, 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7264] <... setpgid resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] umount2("./362", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 7264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7263] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7264] <... openat resumed>) = 3 [pid 7263] <... munmap resumed>) = 0 [pid 5075] close(3 [pid 5073] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7264] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 7264] <... write resumed>) = 4 [pid 7263] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] rmdir("./360" [pid 7264] close(3 [pid 7263] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7264] <... close resumed>) = 0 [pid 5075] mkdir("./361", 0777 [pid 7264] symlink("/dev/binderfs", "./binderfs" [pid 7263] close(4 [pid 7264] <... symlink resumed>) = 0 [pid 7263] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7263] exit_group(0 [pid 7264] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 7264] <... memfd_create resumed>) = 3 [pid 7264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7264] <... mmap resumed>) = 0x7f943d000000 [pid 5073] umount2("./362/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7263] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7263] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7263, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./357", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./357/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./357/binderfs") = 0 [pid 5076] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./362/binderfs", [pid 7264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5073] unlink("./362/binderfs") = 0 [pid 5072] close(3 [pid 7264] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7265 attached [pid 5075] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7266 attached [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7265 [pid 7266] set_robust_list(0x555583d53660, 24 [pid 5075] close(3 [pid 7265] set_robust_list(0x555583d53660, 24 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7266 [pid 7265] <... set_robust_list resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7266] <... set_robust_list resumed>) = 0 [pid 7265] chdir("./363" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7266] chdir("./362" [pid 7264] munmap(0x7f943d000000, 138412032 [pid 7265] <... chdir resumed>) = 0 [pid 7265] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 7267 attached [pid 7266] <... chdir resumed>) = 0 [pid 7265] <... prctl resumed>) = 0 [pid 7264] <... munmap resumed>) = 0 [pid 7267] set_robust_list(0x555583d53660, 24 [pid 7265] setpgid(0, 0 [pid 5073] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7264] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7266] setpgid(0, 0 [pid 7267] <... set_robust_list resumed>) = 0 [pid 7266] <... setpgid resumed>) = 0 [pid 7265] <... setpgid resumed>) = 0 [pid 7264] <... openat resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7267 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7267] chdir("./361" [pid 7266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7264] ioctl(4, LOOP_SET_FD, 3 [pid 5073] newfstatat(AT_FDCWD, "./362/file1", [pid 7267] <... chdir resumed>) = 0 [pid 7266] <... openat resumed>) = 3 [pid 7265] <... openat resumed>) = 3 [pid 5076] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7267] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7265] write(3, "1000", 4 [pid 5073] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7267] <... prctl resumed>) = 0 [pid 7265] <... write resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7267] setpgid(0, 0 [pid 7265] close(3 [pid 5073] openat(AT_FDCWD, "./362/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7267] <... setpgid resumed>) = 0 [pid 7266] write(3, "1000", 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 7267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7266] <... write resumed>) = 4 [pid 7265] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./357/file1", [pid 7265] symlink("/dev/binderfs", "./binderfs" [pid 7267] <... openat resumed>) = 3 [pid 7266] close(3 [pid 7265] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7267] write(3, "1000", 4 [pid 7266] <... close resumed>) = 0 [pid 7265] memfd_create("syzkaller", 0 [pid 5073] newfstatat(4, "", [pid 7267] <... write resumed>) = 4 [pid 7266] symlink("/dev/binderfs", "./binderfs" [pid 5076] umount2("./357/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7267] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7267] <... close resumed>) = 0 [pid 7266] <... symlink resumed>) = 0 [pid 7265] <... memfd_create resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./357/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 7267] symlink("/dev/binderfs", "./binderfs" [pid 7265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7266] memfd_create("syzkaller", 0 [pid 7267] <... symlink resumed>) = 0 [pid 7265] <... mmap resumed>) = 0x7f943d000000 [pid 5076] newfstatat(4, "", [pid 7267] memfd_create("syzkaller", 0 [pid 7266] <... memfd_create resumed>) = 3 [pid 7265] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7264] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7264] close(3 [pid 5076] getdents64(4, [pid 7267] <... memfd_create resumed>) = 3 [pid 7266] <... mmap resumed>) = 0x7f943d000000 [pid 7264] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7264] close(4 [pid 5076] getdents64(4, [pid 5073] close(4 [pid 7267] <... mmap resumed>) = 0x7f943d000000 [pid 7264] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 7267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] rmdir("./362/file1" [pid 7264] mkdir("./file1", 0777 [pid 5076] close(4 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5076] rmdir("./357/file1" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7265] <... write resumed>) = 524288 [pid 5076] getdents64(3, [ 269.068470][ T7264] loop0: detected capacity change from 0 to 1024 [pid 5073] rmdir("./362" [pid 7267] <... write resumed>) = 524288 [pid 7266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7264] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] close(3 [pid 7264] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... close resumed>) = 0 [pid 5073] mkdir("./363", 0777 [pid 5076] rmdir("./357") = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5076] mkdir("./358", 0777 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7265] munmap(0x7f943d000000, 138412032) = 0 [pid 7267] munmap(0x7f943d000000, 138412032 [pid 7265] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7267] <... munmap resumed>) = 0 [pid 7265] <... openat resumed>) = 4 [pid 7265] ioctl(4, LOOP_SET_FD, 3 [pid 7267] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7264] <... mount resumed>) = 0 [pid 7267] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7268 attached [pid 7267] ioctl(4, LOOP_SET_FD, 3 [pid 7268] set_robust_list(0x555583d53660, 24 [pid 7264] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7268 [pid 7268] <... set_robust_list resumed>) = 0 [pid 7264] <... openat resumed>) = 3 [pid 7266] <... write resumed>) = 524288 [pid 7264] chdir("./file1") = 0 [pid 7264] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7268] chdir("./358" [pid 7266] munmap(0x7f943d000000, 138412032 [pid 7264] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7264] truncate("./file1", 0 [pid 7268] <... chdir resumed>) = 0 [pid 7268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7266] <... munmap resumed>) = 0 [pid 7268] <... prctl resumed>) = 0 [pid 7268] setpgid(0, 0 [pid 7266] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7264] <... truncate resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7268] <... setpgid resumed>) = 0 [pid 7266] <... openat resumed>) = 4 [pid 7264] memfd_create("syzkaller", 0 [pid 7268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7266] ioctl(4, LOOP_SET_FD, 3 [pid 7264] <... memfd_create resumed>) = 4 [pid 7268] <... openat resumed>) = 3 [pid 7264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7268] write(3, "1000", 4 [pid 7265] <... ioctl resumed>) = 0 [pid 7268] <... write resumed>) = 4 [pid 7265] close(3 [pid 7268] close(3 [pid 7265] <... close resumed>) = 0 [pid 7268] <... close resumed>) = 0 [pid 7265] close(4 [pid 7268] symlink("/dev/binderfs", "./binderfs" [pid 7265] <... close resumed>) = 0 [pid 7268] <... symlink resumed>) = 0 [pid 7264] <... mmap resumed>) = 0x7f943d000000 [pid 7268] memfd_create("syzkaller", 0 [pid 7267] <... ioctl resumed>) = 0 [pid 7265] mkdir("./file1", 0777 [pid 7268] <... memfd_create resumed>) = 3 [pid 7267] close(3 [pid 7265] <... mkdir resumed>) = 0 [pid 7268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7267] <... close resumed>) = 0 [pid 7265] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7268] <... mmap resumed>) = 0x7f943d000000 [pid 7267] close(4 [pid 5073] close(3 [pid 7267] <... close resumed>) = 0 [pid 7267] mkdir("./file1", 0777) = 0 [pid 5073] <... close resumed>) = 0 [pid 7267] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7264] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7265] <... mount resumed>) = 0 [pid 7265] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7266] <... ioctl resumed>) = 0 [pid 7267] <... mount resumed>) = 0 [ 269.150812][ T7265] loop1: detected capacity change from 0 to 1024 [ 269.160293][ T7267] loop4: detected capacity change from 0 to 1024 [ 269.183354][ T7266] loop3: detected capacity change from 0 to 1024 [pid 7265] chdir("./file1"./strace-static-x86_64: Process 7269 attached [pid 7267] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7266] close(3 [pid 7265] <... chdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7269 [pid 7269] set_robust_list(0x555583d53660, 24 [pid 7267] <... openat resumed>) = 3 [pid 7266] <... close resumed>) = 0 [pid 7269] <... set_robust_list resumed>) = 0 [pid 7267] chdir("./file1" [pid 7266] close(4 [pid 7269] chdir("./363" [pid 7267] <... chdir resumed>) = 0 [pid 7265] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7264] <... write resumed>) = 524288 [pid 7266] <... close resumed>) = 0 [pid 7269] <... chdir resumed>) = 0 [pid 7267] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7266] mkdir("./file1", 0777 [pid 7265] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7269] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7267] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7265] truncate("./file1", 0 [pid 7269] <... prctl resumed>) = 0 [pid 7268] <... write resumed>) = 524288 [pid 7267] truncate("./file1", 0 [pid 7266] <... mkdir resumed>) = 0 [pid 7269] setpgid(0, 0 [pid 7264] munmap(0x7f943d000000, 138412032 [pid 7269] <... setpgid resumed>) = 0 [pid 7269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7264] <... munmap resumed>) = 0 [pid 7269] <... openat resumed>) = 3 [pid 7268] munmap(0x7f943d000000, 138412032 [pid 7266] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7269] write(3, "1000", 4) = 4 [pid 7265] <... truncate resumed>) = 0 [pid 7264] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7268] <... munmap resumed>) = 0 [pid 7269] close(3 [pid 7267] <... truncate resumed>) = 0 [pid 7265] memfd_create("syzkaller", 0 [pid 7264] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7269] <... close resumed>) = 0 [pid 7268] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7267] memfd_create("syzkaller", 0 [pid 7265] <... memfd_create resumed>) = 4 [pid 7269] symlink("/dev/binderfs", "./binderfs" [pid 7268] <... openat resumed>) = 4 [pid 7267] <... memfd_create resumed>) = 4 [pid 7265] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7268] ioctl(4, LOOP_SET_FD, 3 [pid 7267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7265] <... mmap resumed>) = 0x7f943d000000 [pid 7269] <... symlink resumed>) = 0 [pid 7266] <... mount resumed>) = 0 [pid 7264] close(4 [pid 7266] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7269] memfd_create("syzkaller", 0 [pid 7267] <... mmap resumed>) = 0x7f943d000000 [pid 7266] <... openat resumed>) = 3 [pid 7265] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7267] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7266] chdir("./file1" [pid 7264] <... close resumed>) = 0 [pid 7266] <... chdir resumed>) = 0 [pid 7266] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7269] <... memfd_create resumed>) = 3 [pid 7266] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7264] exit_group(0 [pid 7266] truncate("./file1", 0 [pid 7264] <... exit_group resumed>) = ? [pid 7269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7264] +++ exited with 0 +++ [pid 7266] <... truncate resumed>) = 0 [pid 7266] memfd_create("syzkaller", 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7264, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7266] <... memfd_create resumed>) = 4 [pid 7266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7265] <... write resumed>) = 524288 [pid 7268] <... ioctl resumed>) = 0 [pid 7269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7268] close(3 [pid 7267] <... write resumed>) = 524288 [pid 7266] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] umount2("./362", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7268] <... close resumed>) = 0 [pid 7268] close(4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7268] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7268] mkdir("./file1", 0777 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 269.278091][ T7268] loop5: detected capacity change from 0 to 1024 [pid 7269] <... write resumed>) = 524288 [pid 7268] <... mkdir resumed>) = 0 [pid 7266] <... write resumed>) = 524288 [pid 5071] getdents64(3, [pid 7265] munmap(0x7f943d000000, 138412032) = 0 [pid 7265] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7265] close(4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7268] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7265] <... close resumed>) = 0 [pid 5071] umount2("./362/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7267] munmap(0x7f943d000000, 138412032 [pid 7266] munmap(0x7f943d000000, 138412032 [pid 7267] <... munmap resumed>) = 0 [pid 7266] <... munmap resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7266] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] newfstatat(AT_FDCWD, "./362/binderfs", [pid 7267] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7266] close(4 [pid 7268] <... mount resumed>) = 0 [pid 7267] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7265] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7268] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7267] close(4 [pid 7269] munmap(0x7f943d000000, 138412032 [pid 7268] <... openat resumed>) = 3 [pid 7267] <... close resumed>) = 0 [pid 7266] <... close resumed>) = 0 [pid 7265] <... exit_group resumed>) = ? [pid 5071] unlink("./362/binderfs" [pid 7269] <... munmap resumed>) = 0 [pid 7268] chdir("./file1" [pid 7266] exit_group(0 [pid 7268] <... chdir resumed>) = 0 [pid 7268] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7266] <... exit_group resumed>) = ? [pid 5071] <... unlink resumed>) = 0 [pid 7268] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7269] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7268] truncate("./file1", 0 [pid 7265] +++ exited with 0 +++ [pid 7266] +++ exited with 0 +++ [pid 5071] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7269] <... openat resumed>) = 4 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7265, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7269] ioctl(4, LOOP_SET_FD, 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7266, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7268] <... truncate resumed>) = 0 [pid 7267] exit_group(0 [pid 5074] umount2("./362", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 7268] memfd_create("syzkaller", 0 [pid 7267] <... exit_group resumed>) = ? [pid 5072] <... restart_syscall resumed>) = 0 [pid 5071] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7269] <... ioctl resumed>) = 0 [pid 7268] <... memfd_create resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7269] close(3 [pid 7268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./362/file1", [pid 7269] <... close resumed>) = 0 [pid 7268] <... mmap resumed>) = 0x7f943d000000 [pid 7267] +++ exited with 0 +++ [pid 5074] <... openat resumed>) = 3 [pid 5072] umount2("./363", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7269] close(4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7267, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7269] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7269] mkdir("./file1", 0777 [pid 5074] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 7269] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] newfstatat(3, "", [pid 5074] umount2("./362/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7268] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7269] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] umount2("./361", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./362/binderfs", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./363/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./362/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] unlink("./362/binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./363/binderfs", [pid 5071] <... openat resumed>) = 4 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(4, "", [pid 5075] <... openat resumed>) = 3 [pid 5074] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] unlink("./363/binderfs" [pid 5075] newfstatat(3, "", [pid 5072] <... unlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./361/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./361/binderfs", [pid 5074] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(4 [pid 7269] <... mount resumed>) = 0 [pid 7268] <... write resumed>) = 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7269] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7268] munmap(0x7f943d000000, 138412032 [pid 5075] unlink("./361/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7269] <... openat resumed>) = 3 [pid 7268] <... munmap resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./362/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] rmdir("./362/file1" [pid 7269] chdir("./file1" [pid 5075] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./363/file1", [pid 7269] <... chdir resumed>) = 0 [pid 7269] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7269] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7268] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7268] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7269] truncate("./file1", 0 [pid 5074] openat(AT_FDCWD, "./362/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7268] close(4 [pid 5074] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./363/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 269.380537][ T7269] loop2: detected capacity change from 0 to 1024 [pid 5074] newfstatat(4, "", [pid 5071] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5072] <... openat resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] newfstatat(4, "", [pid 5071] rmdir("./362" [pid 7269] <... truncate resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7269] memfd_create("syzkaller", 0 [pid 5075] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 7269] <... memfd_create resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, [pid 7269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] newfstatat(AT_FDCWD, "./361/file1", [pid 7268] <... close resumed>) = 0 [pid 5074] close(4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7269] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] mkdir("./363", 0777 [pid 7268] exit_group(0 [pid 5074] rmdir("./362/file1") = 0 [pid 5075] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7268] <... exit_group resumed>) = ? [pid 5075] openat(AT_FDCWD, "./361/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 5072] close(4 [pid 5071] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./363/file1" [pid 7268] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./362" [pid 5072] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7268, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] close(4 [pid 7269] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 5071] <... openat resumed>) = 3 [pid 7269] <... write resumed>) = 524288 [pid 5075] rmdir("./361/file1" [pid 5074] mkdir("./363", 0777 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./363" [pid 5076] umount2("./358", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] mkdir("./364", 0777 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5072] <... mkdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] close(3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./358/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./361" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7269] munmap(0x7f943d000000, 138412032 [pid 5076] newfstatat(AT_FDCWD, "./358/binderfs", [pid 5075] <... rmdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] mkdir("./362", 0777 [pid 7269] <... munmap resumed>) = 0 [pid 5076] unlink("./358/binderfs" [pid 7269] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 7269] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... unlink resumed>) = 0 [pid 7269] close(4 [pid 5076] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7269] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7269] exit_group(0 [pid 5076] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7269] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7269] +++ exited with 0 +++ [pid 5076] newfstatat(AT_FDCWD, "./358/file1", [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./358/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7269, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] close(3 [pid 5071] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "./358/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... restart_syscall resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./363", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(3, "", [pid 5076] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5076] rmdir("./358/file1" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] umount2("./363/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7270 ./strace-static-x86_64: Process 7270 attached [pid 5076] getdents64(3, [pid 5074] close(3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./358") = 0 [pid 5076] mkdir("./359", 0777) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7272 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./363/binderfs", [pid 7270] set_robust_list(0x555583d53660, 24) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7271 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7270] chdir("./363" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] unlink("./363/binderfs"./strace-static-x86_64: Process 7271 attached [pid 7270] <... chdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... unlink resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7272 attached [pid 7272] set_robust_list(0x555583d53660, 24 [pid 7271] set_robust_list(0x555583d53660, 24 [pid 7270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7271] <... set_robust_list resumed>) = 0 [pid 7272] <... set_robust_list resumed>) = 0 [pid 7270] <... prctl resumed>) = 0 [pid 7272] chdir("./363" [pid 7270] setpgid(0, 0 [pid 7271] chdir("./364" [pid 7270] <... setpgid resumed>) = 0 [pid 7272] <... chdir resumed>) = 0 [pid 7270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7271] <... chdir resumed>) = 0 [pid 7272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7270] <... openat resumed>) = 3 [pid 7271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7272] setpgid(0, 0 [pid 7271] setpgid(0, 0) = 0 [pid 5075] close(3 [pid 7272] <... setpgid resumed>) = 0 [pid 7272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7270] write(3, "1000", 4 [pid 5075] <... close resumed>) = 0 [pid 7271] <... openat resumed>) = 3 [pid 7272] <... openat resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7272] write(3, "1000", 4) = 4 [pid 7272] close(3) = 0 [pid 7272] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7272] memfd_create("syzkaller", 0 [pid 7271] write(3, "1000", 4 [pid 7270] <... write resumed>) = 4 [pid 7270] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7273 [pid 7271] <... write resumed>) = 4 [pid 7270] <... close resumed>) = 0 ./strace-static-x86_64: Process 7273 attached [pid 7271] close(3 [pid 7272] <... memfd_create resumed>) = 3 [pid 7270] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... umount2 resumed>) = 0 [pid 7273] set_robust_list(0x555583d53660, 24 [pid 7271] <... close resumed>) = 0 [pid 7272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7270] <... symlink resumed>) = 0 [pid 5073] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./363/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7271] symlink("/dev/binderfs", "./binderfs" [pid 7270] memfd_create("syzkaller", 0 [pid 5073] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7273] <... set_robust_list resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7273] chdir("./362" [pid 7271] <... symlink resumed>) = 0 [pid 7272] <... mmap resumed>) = 0x7f943d000000 [pid 5073] openat(AT_FDCWD, "./363/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7273] <... chdir resumed>) = 0 [pid 7272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7270] <... memfd_create resumed>) = 3 [pid 5073] <... openat resumed>) = 4 [pid 7273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7271] memfd_create("syzkaller", 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7273] <... prctl resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7273] setpgid(0, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7271] <... memfd_create resumed>) = 3 [pid 7270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7273] <... setpgid resumed>) = 0 [pid 7270] <... mmap resumed>) = 0x7f943d000000 [pid 5073] getdents64(4, [pid 7271] <... mmap resumed>) = 0x7f943d000000 [pid 7273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7273] write(3, "1000", 4 [pid 5073] getdents64(4, [pid 7273] <... write resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7273] close(3 [pid 5076] close(3 [pid 5073] close(4 [pid 7273] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7273] symlink("/dev/binderfs", "./binderfs" [pid 7271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] rmdir("./363/file1" [pid 7273] <... symlink resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7273] memfd_create("syzkaller", 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7273] <... memfd_create resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(3 [pid 7273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 7273] <... mmap resumed>) = 0x7f943d000000 [pid 5073] rmdir("./363") = 0 [pid 5073] mkdir("./364", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7274 [pid 5073] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7274 attached [pid 7274] set_robust_list(0x555583d53660, 24) = 0 [pid 7274] chdir("./359") = 0 [pid 7274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7274] setpgid(0, 0) = 0 [pid 7274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7272] <... write resumed>) = 524288 [pid 7273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7274] <... openat resumed>) = 3 [pid 7272] munmap(0x7f943d000000, 138412032) = 0 [pid 7274] write(3, "1000", 4) = 4 [pid 7274] close(3) = 0 [pid 7274] symlink("/dev/binderfs", "./binderfs" [pid 7272] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7274] <... symlink resumed>) = 0 [pid 7273] <... write resumed>) = 524288 [pid 7272] <... openat resumed>) = 4 [pid 7270] <... write resumed>) = 524288 [pid 7274] memfd_create("syzkaller", 0 [pid 7272] ioctl(4, LOOP_SET_FD, 3 [pid 7274] <... memfd_create resumed>) = 3 [pid 7271] <... write resumed>) = 524288 [pid 7270] munmap(0x7f943d000000, 138412032 [pid 7274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7271] munmap(0x7f943d000000, 138412032 [pid 7270] <... munmap resumed>) = 0 [pid 7274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7271] <... munmap resumed>) = 0 [pid 7270] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7271] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7273] munmap(0x7f943d000000, 138412032 [pid 7271] <... openat resumed>) = 4 [pid 7271] ioctl(4, LOOP_SET_FD, 3 [pid 7273] <... munmap resumed>) = 0 [pid 7273] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7273] ioctl(4, LOOP_SET_FD, 3 [pid 7271] <... ioctl resumed>) = 0 [pid 7272] <... ioctl resumed>) = 0 [pid 7270] ioctl(4, LOOP_SET_FD, 3 [pid 7274] <... write resumed>) = 524288 [pid 7274] munmap(0x7f943d000000, 138412032 [pid 7273] <... ioctl resumed>) = 0 [pid 7271] close(3 [pid 7272] close(3 [pid 7270] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7274] <... munmap resumed>) = 0 [pid 7273] close(3 [pid 7271] <... close resumed>) = 0 [pid 7272] <... close resumed>) = 0 [pid 7270] close(3 [pid 5073] close(3 [pid 7273] <... close resumed>) = 0 [pid 7271] close(4 [pid 7272] close(4 [pid 7270] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7274] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7273] close(4 [pid 7271] <... close resumed>) = 0 [pid 7272] <... close resumed>) = 0 [pid 7270] close(4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7274] <... openat resumed>) = 4 [pid 7273] <... close resumed>) = 0 [pid 7271] mkdir("./file1", 0777 [pid 7272] mkdir("./file1", 0777 [pid 7270] <... close resumed>) = 0 [ 269.661047][ T7272] loop3: detected capacity change from 0 to 1024 [ 269.680782][ T7271] loop1: detected capacity change from 0 to 1024 [ 269.682826][ T7273] loop4: detected capacity change from 0 to 1024 [ 269.695240][ T7270] loop0: detected capacity change from 0 to 1024 [pid 7274] ioctl(4, LOOP_SET_FD, 3 [pid 7273] mkdir("./file1", 0777 [pid 7272] <... mkdir resumed>) = 0 [pid 7270] mkdir("./file1", 0777 [pid 7274] <... ioctl resumed>) = 0 [pid 7273] <... mkdir resumed>) = 0 [pid 7271] <... mkdir resumed>) = 0 [pid 7270] <... mkdir resumed>) = 0 [pid 7270] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7271] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7272] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, ""./strace-static-x86_64: Process 7275 attached [pid 7273] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7275 [pid 7275] set_robust_list(0x555583d53660, 24 [pid 7270] <... mount resumed>) = 0 [pid 7275] <... set_robust_list resumed>) = 0 [pid 7270] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7275] chdir("./364" [pid 7270] chdir("./file1" [pid 7275] <... chdir resumed>) = 0 [pid 7273] <... mount resumed>) = 0 [pid 7270] <... chdir resumed>) = 0 [pid 7275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7273] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7270] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7275] <... prctl resumed>) = 0 [pid 7273] <... openat resumed>) = 3 [pid 7271] <... mount resumed>) = 0 [pid 7270] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7275] setpgid(0, 0 [pid 7273] chdir("./file1" [pid 7271] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7272] <... mount resumed>) = 0 [pid 7270] truncate("./file1", 0 [pid 7275] <... setpgid resumed>) = 0 [pid 7274] close(3 [pid 7273] <... chdir resumed>) = 0 [pid 7271] <... openat resumed>) = 3 [pid 7272] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7274] <... close resumed>) = 0 [pid 7273] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7271] chdir("./file1" [pid 7272] <... openat resumed>) = 3 [pid 7275] <... openat resumed>) = 3 [pid 7274] close(4 [pid 7273] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7271] <... chdir resumed>) = 0 [pid 7272] chdir("./file1" [pid 7275] write(3, "1000", 4 [pid 7274] <... close resumed>) = 0 [pid 7273] truncate("./file1", 0 [pid 7271] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7272] <... chdir resumed>) = 0 [pid 7270] <... truncate resumed>) = 0 [pid 7275] <... write resumed>) = 4 [pid 7274] mkdir("./file1", 0777 [pid 7271] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7272] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7270] memfd_create("syzkaller", 0 [pid 7275] close(3 [pid 7274] <... mkdir resumed>) = 0 [pid 7273] <... truncate resumed>) = 0 [pid 7271] truncate("./file1", 0 [pid 7272] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7270] <... memfd_create resumed>) = 4 [pid 7275] <... close resumed>) = 0 [pid 7273] memfd_create("syzkaller", 0 [pid 7270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7275] symlink("/dev/binderfs", "./binderfs" [pid 7273] <... memfd_create resumed>) = 4 [pid 7272] truncate("./file1", 0 [pid 7270] <... mmap resumed>) = 0x7f943d000000 [pid 7275] <... symlink resumed>) = 0 [pid 7274] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7271] <... truncate resumed>) = 0 [pid 7275] memfd_create("syzkaller", 0 [pid 7271] memfd_create("syzkaller", 0 [pid 7275] <... memfd_create resumed>) = 3 [pid 7271] <... memfd_create resumed>) = 4 [pid 7272] <... truncate resumed>) = 0 [pid 7275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7272] memfd_create("syzkaller", 0 [pid 7275] <... mmap resumed>) = 0x7f943d000000 [pid 7271] <... mmap resumed>) = 0x7f943d000000 [pid 7272] <... memfd_create resumed>) = 4 [ 269.725458][ T7274] loop5: detected capacity change from 0 to 1024 [pid 7272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7273] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7274] <... mount resumed>) = 0 [pid 7271] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7272] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7270] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7274] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7274] chdir("./file1") = 0 [pid 7274] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7273] <... write resumed>) = 524288 [pid 7274] truncate("./file1", 0 [pid 7270] <... write resumed>) = 524288 [pid 7275] <... write resumed>) = 524288 [pid 7274] <... truncate resumed>) = 0 [pid 7272] <... write resumed>) = 524288 [pid 7275] munmap(0x7f943d000000, 138412032 [pid 7274] memfd_create("syzkaller", 0 [pid 7273] munmap(0x7f943d000000, 138412032 [pid 7271] <... write resumed>) = 524288 [pid 7270] munmap(0x7f943d000000, 138412032 [pid 7274] <... memfd_create resumed>) = 4 [pid 7273] <... munmap resumed>) = 0 [pid 7270] <... munmap resumed>) = 0 [pid 7273] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7272] munmap(0x7f943d000000, 138412032 [pid 7275] <... munmap resumed>) = 0 [pid 7274] <... mmap resumed>) = 0x7f943d000000 [pid 7273] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7271] munmap(0x7f943d000000, 138412032 [pid 7272] <... munmap resumed>) = 0 [pid 7270] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7275] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7274] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7273] close(4 [pid 7271] <... munmap resumed>) = 0 [pid 7270] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7272] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7272] close(4 [pid 7275] <... openat resumed>) = 4 [pid 7273] <... close resumed>) = 0 [pid 7271] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7272] <... close resumed>) = 0 [pid 7270] close(4 [pid 7275] ioctl(4, LOOP_SET_FD, 3 [pid 7270] <... close resumed>) = 0 [pid 7274] <... write resumed>) = 524288 [pid 7272] exit_group(0 [pid 7271] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7272] <... exit_group resumed>) = ? [pid 7271] close(4 [pid 7273] exit_group(0) = ? [pid 7271] <... close resumed>) = 0 [pid 7270] exit_group(0 [pid 7272] +++ exited with 0 +++ [pid 7274] munmap(0x7f943d000000, 138412032 [pid 7273] +++ exited with 0 +++ [pid 7270] <... exit_group resumed>) = ? [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7272, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7274] <... munmap resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7273, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] umount2("./363", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7270] +++ exited with 0 +++ [pid 5074] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7271] exit_group(0 [pid 5074] <... openat resumed>) = 3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7270, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7275] <... ioctl resumed>) = 0 [pid 7274] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7271] <... exit_group resumed>) = ? [pid 5074] newfstatat(3, "", [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7275] close(3 [pid 7274] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 7274] close(4 [pid 7271] +++ exited with 0 +++ [pid 5075] umount2("./362", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7275] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 7275] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7275] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7275] mkdir("./file1", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5074] umount2("./363/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7271, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7275] <... mkdir resumed>) = 0 [pid 7275] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5071] umount2("./363", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7274] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./363/binderfs", [pid 5072] <... restart_syscall resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] unlink("./363/binderfs" [pid 5071] <... openat resumed>) = 3 [pid 7275] <... mount resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] umount2("./364", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 5074] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5072] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 7275] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./362/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7275] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./363/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7275] chdir("./file1" [pid 7274] exit_group(0 [pid 5075] newfstatat(AT_FDCWD, "./362/binderfs", [pid 5072] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7275] <... chdir resumed>) = 0 [pid 7274] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] newfstatat(AT_FDCWD, "./363/binderfs", [pid 7275] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7274] +++ exited with 0 +++ [pid 5075] unlink("./362/binderfs" [pid 5072] umount2("./364/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7275] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7274, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./363/binderfs" [pid 7275] truncate("./file1", 0 [pid 5075] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./364/binderfs", [pid 5071] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./359", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] unlink("./364/binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... unlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7275] <... truncate resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7275] memfd_create("syzkaller", 0 [ 269.853307][ T7275] loop2: detected capacity change from 0 to 1024 [pid 5076] newfstatat(3, "", [pid 7275] <... memfd_create resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(3, [pid 7275] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./359/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./359/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./359/binderfs" [pid 7275] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./362/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 5071] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./363/file1", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./363/file1", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./363/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./363/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", [pid 5075] openat(AT_FDCWD, "./362/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5072] newfstatat(AT_FDCWD, "./364/file1", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5072] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5072] openat(AT_FDCWD, "./364/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5075] close(4 [pid 5072] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5075] rmdir("./362/file1" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5072] getdents64(4, [pid 5071] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] newfstatat(AT_FDCWD, "./359/file1", [pid 5075] getdents64(3, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, [pid 5072] close(4 [pid 5076] umount2("./359/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5074] getdents64(4, [pid 5072] rmdir("./364/file1" [pid 5071] getdents64(4, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] openat(AT_FDCWD, "./359/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5074] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] close(4 [pid 5076] <... openat resumed>) = 4 [pid 5075] rmdir("./362" [pid 5074] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] rmdir("./363/file1" [pid 5071] rmdir("./363/file1" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] mkdir("./363", 0777 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 5076] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 5074] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 7275] <... write resumed>) = 524288 [pid 5071] getdents64(3, [pid 7275] munmap(0x7f943d000000, 138412032 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5076] getdents64(4, [pid 5072] close(3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7275] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5072] rmdir("./364" [pid 5076] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] <... rmdir resumed>) = 0 [pid 5076] rmdir("./359/file1" [pid 5075] <... ioctl resumed>) = 0 [pid 5072] mkdir("./365", 0777 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 7275] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./363" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(3, [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7276 [pid 5076] close(3) = 0 [pid 5076] rmdir("./359"./strace-static-x86_64: Process 7276 attached ) = 0 [pid 7276] set_robust_list(0x555583d53660, 24 [pid 5076] mkdir("./360", 0777 [pid 7276] <... set_robust_list resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7276] chdir("./363") = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7275] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] close(3 [pid 7276] <... prctl resumed>) = 0 [pid 7275] close(4 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] mkdir("./364", 0777 [pid 7276] setpgid(0, 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] rmdir("./363" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7276] <... setpgid resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5076] close(3 [pid 5074] mkdir("./364", 0777 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7276] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7276] write(3, "1000", 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7276] <... write resumed>) = 4 [pid 7275] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7276] close(3 [pid 7275] exit_group(0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... ioctl resumed>) = 0 [pid 7275] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 7276] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7276] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7277 [pid 7276] <... symlink resumed>) = 0 [pid 7275] +++ exited with 0 +++ [pid 5074] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7277 attached [pid 7277] set_robust_list(0x555583d53660, 24) = 0 [pid 7277] chdir("./360" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7275, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./364", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7277] <... chdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7278 [pid 7277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7277] <... prctl resumed>) = 0 [pid 7276] memfd_create("syzkaller", 0 [pid 5073] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7278 attached [pid 7277] setpgid(0, 0 [pid 7276] <... memfd_create resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 7278] set_robust_list(0x555583d53660, 24 [pid 7277] <... setpgid resumed>) = 0 [pid 7276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7279 attached [pid 7278] <... set_robust_list resumed>) = 0 [pid 7277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7276] <... mmap resumed>) = 0x7f943d000000 [pid 5073] getdents64(3, [pid 5072] <... ioctl resumed>) = 0 [pid 7276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7279] set_robust_list(0x555583d53660, 24 [pid 7278] chdir("./364" [pid 7277] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7279 [pid 5073] umount2("./364/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7277] write(3, "1000", 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7279] <... set_robust_list resumed>) = 0 [pid 7278] <... chdir resumed>) = 0 [pid 7277] <... write resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./364/binderfs", [pid 7279] chdir("./364" [pid 7278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7277] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7277] <... close resumed>) = 0 [pid 7277] symlink("/dev/binderfs", "./binderfs" [pid 5073] unlink("./364/binderfs" [pid 7277] <... symlink resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7279] <... chdir resumed>) = 0 [pid 7278] <... prctl resumed>) = 0 [pid 7277] memfd_create("syzkaller", 0 [pid 5072] close(3 [pid 7279] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7278] setpgid(0, 0) = 0 [pid 7279] <... prctl resumed>) = 0 [pid 7278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7276] <... write resumed>) = 524288 [pid 5073] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 7279] setpgid(0, 0) = 0 [pid 7278] <... openat resumed>) = 3 [pid 7277] <... memfd_create resumed>) = 3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7278] write(3, "1000", 4 [pid 7277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7279] <... openat resumed>) = 3 [pid 7278] <... write resumed>) = 4 [pid 7277] <... mmap resumed>) = 0x7f943d000000 [pid 7279] write(3, "1000", 4 [pid 7278] close(3 [pid 7279] <... write resumed>) = 4 [pid 7278] <... close resumed>) = 0 [pid 7277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7280 [pid 7278] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 7280 attached [pid 7280] set_robust_list(0x555583d53660, 24 [pid 7278] <... symlink resumed>) = 0 [pid 7280] <... set_robust_list resumed>) = 0 [pid 7278] memfd_create("syzkaller", 0 [pid 7279] close(3 [pid 7280] chdir("./365" [pid 7279] <... close resumed>) = 0 [pid 7278] <... memfd_create resumed>) = 3 [pid 7279] symlink("/dev/binderfs", "./binderfs" [pid 7278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7280] <... chdir resumed>) = 0 [pid 7276] munmap(0x7f943d000000, 138412032 [pid 7280] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7279] <... symlink resumed>) = 0 [pid 7278] <... mmap resumed>) = 0x7f943d000000 [pid 7276] <... munmap resumed>) = 0 [pid 7280] <... prctl resumed>) = 0 [pid 7277] <... write resumed>) = 524288 [pid 7280] setpgid(0, 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7280] <... setpgid resumed>) = 0 [pid 7280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7280] write(3, "1000", 4) = 4 [pid 5073] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7280] close(3 [pid 7276] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7280] <... close resumed>) = 0 [pid 7278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7276] <... openat resumed>) = 4 [pid 7280] symlink("/dev/binderfs", "./binderfs" [pid 7276] ioctl(4, LOOP_SET_FD, 3 [pid 5073] newfstatat(AT_FDCWD, "./364/file1", [pid 7280] <... symlink resumed>) = 0 [pid 7279] memfd_create("syzkaller", 0 [pid 7280] memfd_create("syzkaller", 0) = 3 [pid 7279] <... memfd_create resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7280] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] openat(AT_FDCWD, "./364/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7277] munmap(0x7f943d000000, 138412032 [pid 5073] <... openat resumed>) = 4 [pid 7277] <... munmap resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7278] <... write resumed>) = 524288 [pid 7277] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7277] <... openat resumed>) = 4 [pid 5073] close(4 [pid 7279] <... mmap resumed>) = 0x7f943d000000 [pid 7277] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... close resumed>) = 0 [pid 7280] <... write resumed>) = 524288 [pid 7279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7277] <... ioctl resumed>) = 0 [pid 7276] <... ioctl resumed>) = 0 [pid 5073] rmdir("./364/file1") = 0 [pid 5073] getdents64(3, [pid 7276] close(3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7276] <... close resumed>) = 0 [pid 5073] close(3 [pid 7276] close(4 [pid 5073] <... close resumed>) = 0 [pid 7280] munmap(0x7f943d000000, 138412032 [pid 7279] <... write resumed>) = 524288 [pid 7278] munmap(0x7f943d000000, 138412032 [pid 7277] close(3 [pid 7276] <... close resumed>) = 0 [pid 5073] rmdir("./364" [pid 7280] <... munmap resumed>) = 0 [pid 7279] munmap(0x7f943d000000, 138412032 [pid 7278] <... munmap resumed>) = 0 [pid 7277] <... close resumed>) = 0 [pid 7276] mkdir("./file1", 0777) = 0 [pid 7280] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7278] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7280] <... openat resumed>) = 4 [ 270.118911][ T7276] loop4: detected capacity change from 0 to 1024 [ 270.155303][ T7277] loop5: detected capacity change from 0 to 1024 [pid 7280] ioctl(4, LOOP_SET_FD, 3 [pid 7279] <... munmap resumed>) = 0 [pid 7278] <... openat resumed>) = 4 [pid 7277] close(4 [pid 7276] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... rmdir resumed>) = 0 [pid 7278] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 7277] <... close resumed>) = 0 [pid 7277] mkdir("./file1", 0777) = 0 [pid 7279] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] mkdir("./365", 0777 [pid 7279] <... openat resumed>) = 4 [pid 5073] <... mkdir resumed>) = 0 [pid 7279] ioctl(4, LOOP_SET_FD, 3 [pid 7277] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7280] <... ioctl resumed>) = 0 [pid 7279] <... ioctl resumed>) = 0 [pid 7278] close(3 [pid 7280] close(3 [pid 7279] close(3 [pid 7278] <... close resumed>) = 0 [pid 7280] <... close resumed>) = 0 [pid 7279] <... close resumed>) = 0 [pid 7277] <... mount resumed>) = 0 [pid 7278] close(4 [pid 7276] <... mount resumed>) = 0 [pid 7280] close(4 [pid 7279] close(4 [pid 7278] <... close resumed>) = 0 [pid 7277] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7280] <... close resumed>) = 0 [pid 7279] <... close resumed>) = 0 [pid 7280] mkdir("./file1", 0777 [pid 7277] <... openat resumed>) = 3 [pid 7280] <... mkdir resumed>) = 0 [pid 7279] mkdir("./file1", 0777 [pid 7277] chdir("./file1" [pid 7276] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7277] <... chdir resumed>) = 0 [pid 7276] chdir("./file1") = 0 [pid 7276] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7277] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7276] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 270.207061][ T7278] loop0: detected capacity change from 0 to 1024 [ 270.217593][ T7280] loop1: detected capacity change from 0 to 1024 [ 270.232468][ T7279] loop3: detected capacity change from 0 to 1024 [pid 7280] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7279] <... mkdir resumed>) = 0 [pid 7278] mkdir("./file1", 0777 [pid 7277] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7276] truncate("./file1", 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7277] truncate("./file1", 0 [pid 7278] <... mkdir resumed>) = 0 [pid 7276] <... truncate resumed>) = 0 [pid 7279] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7278] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7276] memfd_create("syzkaller", 0 [pid 5073] close(3 [pid 7276] <... memfd_create resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 7276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7276] <... mmap resumed>) = 0x7f943d000000 [pid 7276] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7277] <... truncate resumed>) = 0 [pid 7277] memfd_create("syzkaller", 0) = 4 [pid 7277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7281 attached [pid 7278] <... mount resumed>) = 0 [pid 7278] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7281] set_robust_list(0x555583d53660, 24 [pid 7277] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7281 [pid 7281] <... set_robust_list resumed>) = 0 [pid 7278] chdir("./file1") = 0 [pid 7281] chdir("./365" [pid 7278] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7281] <... chdir resumed>) = 0 [pid 7278] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7278] truncate("./file1", 0 [pid 7276] <... write resumed>) = 524288 [pid 7280] <... mount resumed>) = 0 [pid 7281] <... prctl resumed>) = 0 [pid 7280] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7276] munmap(0x7f943d000000, 138412032 [pid 7281] setpgid(0, 0) = 0 [pid 7280] <... openat resumed>) = 3 [pid 7280] chdir("./file1") = 0 [pid 7281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7280] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7278] <... truncate resumed>) = 0 [pid 7276] <... munmap resumed>) = 0 [pid 7280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7278] memfd_create("syzkaller", 0 [pid 7276] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7281] <... openat resumed>) = 3 [pid 7276] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7276] close(4 [pid 7281] write(3, "1000", 4 [pid 7280] truncate("./file1", 0 [pid 7278] <... memfd_create resumed>) = 4 [pid 7277] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7276] <... close resumed>) = 0 [pid 7278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7281] <... write resumed>) = 4 [pid 7278] <... mmap resumed>) = 0x7f943d000000 [pid 7281] close(3 [pid 7278] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7281] <... close resumed>) = 0 [pid 7281] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7279] <... mount resumed>) = 0 [pid 7279] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7281] memfd_create("syzkaller", 0 [pid 7279] <... openat resumed>) = 3 [pid 7281] <... memfd_create resumed>) = 3 [pid 7279] chdir("./file1" [pid 7281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7280] <... truncate resumed>) = 0 [pid 7279] <... chdir resumed>) = 0 [pid 7278] <... write resumed>) = 524288 [pid 7277] <... write resumed>) = 524288 [pid 7276] exit_group(0 [pid 7281] <... mmap resumed>) = 0x7f943d000000 [pid 7280] memfd_create("syzkaller", 0 [pid 7279] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7277] munmap(0x7f943d000000, 138412032 [pid 7280] <... memfd_create resumed>) = 4 [pid 7279] truncate("./file1", 0 [pid 7277] <... munmap resumed>) = 0 [pid 7280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7277] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7280] <... mmap resumed>) = 0x7f943d000000 [pid 7277] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7277] close(4 [pid 7276] <... exit_group resumed>) = ? [pid 7281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7280] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7276] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7276, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7279] <... truncate resumed>) = 0 [pid 7278] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./363", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7279] memfd_create("syzkaller", 0 [pid 7278] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7279] <... memfd_create resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7278] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7277] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7279] <... mmap resumed>) = 0x7f943d000000 [pid 7278] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7277] exit_group(0 [pid 5075] newfstatat(3, "", [pid 7278] close(4 [pid 7279] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7277] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7277] +++ exited with 0 +++ [pid 5075] getdents64(3, [pid 7278] <... close resumed>) = 0 [pid 7281] <... write resumed>) = 524288 [pid 7280] <... write resumed>) = 524288 [pid 7279] <... write resumed>) = 524288 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7277, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] umount2("./363/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7279] munmap(0x7f943d000000, 138412032 [pid 7278] exit_group(0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7279] <... munmap resumed>) = 0 [pid 7278] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./363/binderfs", [pid 7280] munmap(0x7f943d000000, 138412032 [pid 7278] +++ exited with 0 +++ [pid 5076] umount2("./360", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7279] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./363/binderfs" [pid 7279] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7278, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7279] close(4 [pid 5076] openat(AT_FDCWD, "./360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 7281] munmap(0x7f943d000000, 138412032 [pid 7280] <... munmap resumed>) = 0 [pid 7279] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7280] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] newfstatat(3, "", [pid 7281] <... munmap resumed>) = 0 [pid 7280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./364", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7281] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7280] close(4 [pid 7279] exit_group(0 [pid 5076] umount2("./360/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7281] <... openat resumed>) = 4 [pid 7279] <... exit_group resumed>) = ? [pid 5071] newfstatat(3, "", [pid 7281] ioctl(4, LOOP_SET_FD, 3 [pid 7279] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7281] <... ioctl resumed>) = 0 [pid 5075] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7279, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] newfstatat(AT_FDCWD, "./363/file1", [pid 5071] umount2("./364/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./360/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./364", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./364/binderfs", [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./363/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 5071] unlink("./364/binderfs" [pid 7281] close(3 [pid 7280] <... close resumed>) = 0 [pid 5076] unlink("./360/binderfs" [pid 5074] newfstatat(3, "", [pid 5071] <... unlink resumed>) = 0 [pid 7280] exit_group(0 [pid 5075] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7281] <... close resumed>) = 0 [pid 7280] <... exit_group resumed>) = ? [pid 5076] <... unlink resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] getdents64(3, [pid 7281] close(4 [pid 7280] +++ exited with 0 +++ [pid 5076] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7281] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] umount2("./364/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7280, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7281] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] newfstatat(AT_FDCWD, "./364/binderfs", [pid 5072] <... restart_syscall resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5072] umount2("./365", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 5074] unlink("./364/binderfs" [pid 5072] newfstatat(3, "", [pid 5071] newfstatat(AT_FDCWD, "./364/file1", [pid 5075] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./363/file1" [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./365/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7281] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7281] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./365/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] unlink("./365/binderfs" [pid 5071] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5072] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] rmdir("./363" [pid 5074] <... umount2 resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./364/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] mkdir("./364", 0777 [pid 5071] <... openat resumed>) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 5074] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 7281] <... mount resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./360/file1", [pid 5074] newfstatat(AT_FDCWD, "./364/file1", [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(4 [ 270.457438][ T7281] loop2: detected capacity change from 0 to 1024 [pid 7281] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5076] umount2("./360/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./364/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./364/file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 7281] chdir("./file1" [pid 5076] openat(AT_FDCWD, "./360/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 7281] <... chdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 7281] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(AT_FDCWD, "./365/file1", [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7281] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7281] truncate("./file1", 0 [pid 5076] getdents64(4, [pid 5072] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] close(3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5072] openat(AT_FDCWD, "./365/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] rmdir("./364" [pid 7281] <... truncate resumed>) = 0 [pid 5076] close(4 [pid 5074] getdents64(4, [pid 7281] memfd_create("syzkaller", 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7281] <... memfd_create resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5074] close(4 [pid 5072] newfstatat(4, "", [pid 5071] <... rmdir resumed>) = 0 [pid 7281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] rmdir("./360/file1" [pid 5074] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7281] <... mmap resumed>) = 0x7f943d000000 [pid 5074] rmdir("./364/file1" [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] getdents64(4, [pid 5071] mkdir("./365", 0777 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... mkdir resumed>) = 0 [pid 5076] getdents64(3, [pid 5072] getdents64(4, [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 5076] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 5076] <... close resumed>) = 0 [pid 5074] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7281] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] rmdir("./360" [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./365/file1" [pid 5071] <... openat resumed>) = 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] rmdir("./364" [pid 5072] <... rmdir resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] mkdir("./361", 0777) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./365" [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./366", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7281] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] mkdir("./365", 0777 [pid 7281] munmap(0x7f943d000000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7281] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7281] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] close(3 [pid 7281] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7281] close(4) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7282 ./strace-static-x86_64: Process 7282 attached [pid 7282] set_robust_list(0x555583d53660, 24) = 0 [pid 7282] chdir("./364") = 0 [pid 7282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7282] setpgid(0, 0) = 0 [pid 7281] exit_group(0) = ? [pid 7282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7281] +++ exited with 0 +++ [pid 7282] write(3, "1000", 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7281, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7282] <... write resumed>) = 4 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 7282] close(3) = 0 [pid 7282] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./365", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 7282] <... symlink resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7282] memfd_create("syzkaller", 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] getdents64(3, [pid 7282] <... memfd_create resumed>) = 3 [pid 7282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... ioctl resumed>) = 0 [pid 7282] <... mmap resumed>) = 0x7f943d000000 [pid 5071] close(3 [pid 7282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7283 attached [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7283 [pid 5073] umount2("./365/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 7283] set_robust_list(0x555583d53660, 24 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7284 attached [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7284] set_robust_list(0x555583d53660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7284 [pid 7284] <... set_robust_list resumed>) = 0 [pid 7284] chdir("./365") = 0 [pid 7284] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 7285 attached [pid 7284] setpgid(0, 0 [pid 7283] <... set_robust_list resumed>) = 0 [pid 7282] <... write resumed>) = 524288 [pid 5073] newfstatat(AT_FDCWD, "./365/binderfs", [pid 5072] close(3 [pid 7284] <... setpgid resumed>) = 0 [pid 7283] chdir("./361" [pid 7285] set_robust_list(0x555583d53660, 24 [pid 7283] <... chdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 7283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] unlink("./365/binderfs" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7283] <... prctl resumed>) = 0 [pid 7285] <... set_robust_list resumed>) = 0 [pid 7284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7283] setpgid(0, 0 [pid 5073] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 7286 attached [pid 7285] chdir("./365" [pid 7284] <... openat resumed>) = 3 [pid 7283] <... setpgid resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7285 [pid 5073] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7286] set_robust_list(0x555583d53660, 24 [pid 7283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7286 [pid 7286] <... set_robust_list resumed>) = 0 [pid 7285] <... chdir resumed>) = 0 [pid 7284] write(3, "1000", 4 [pid 7283] <... openat resumed>) = 3 [pid 7286] chdir("./366" [pid 7285] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7284] <... write resumed>) = 4 [pid 7283] write(3, "1000", 4 [pid 7285] <... prctl resumed>) = 0 [pid 7284] close(3 [pid 7285] setpgid(0, 0 [pid 7284] <... close resumed>) = 0 [pid 7285] <... setpgid resumed>) = 0 [pid 7284] symlink("/dev/binderfs", "./binderfs" [pid 7285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7284] <... symlink resumed>) = 0 [pid 7286] <... chdir resumed>) = 0 [pid 7285] <... openat resumed>) = 3 [pid 7284] memfd_create("syzkaller", 0 [pid 7283] <... write resumed>) = 4 [pid 5073] <... umount2 resumed>) = 0 [pid 7286] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7285] write(3, "1000", 4 [pid 7284] <... memfd_create resumed>) = 3 [pid 7285] <... write resumed>) = 4 [pid 7284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7282] munmap(0x7f943d000000, 138412032 [pid 7285] close(3 [pid 7284] <... mmap resumed>) = 0x7f943d000000 [pid 7282] <... munmap resumed>) = 0 [pid 7285] <... close resumed>) = 0 [pid 7284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7285] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7286] <... prctl resumed>) = 0 [pid 7283] close(3 [pid 5073] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7286] setpgid(0, 0 [pid 7283] <... close resumed>) = 0 [pid 7285] memfd_create("syzkaller", 0 [pid 7282] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7283] symlink("/dev/binderfs", "./binderfs" [pid 7286] <... setpgid resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./365/file1", [pid 7286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7285] <... memfd_create resumed>) = 3 [pid 7283] <... symlink resumed>) = 0 [pid 7282] <... openat resumed>) = 4 [pid 7285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7286] <... openat resumed>) = 3 [pid 7285] <... mmap resumed>) = 0x7f943d000000 [pid 7284] <... write resumed>) = 524288 [pid 7283] memfd_create("syzkaller", 0 [pid 7282] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7286] write(3, "1000", 4 [pid 7283] <... memfd_create resumed>) = 3 [pid 5073] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7286] <... write resumed>) = 4 [pid 7283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7286] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7286] <... close resumed>) = 0 [pid 7283] <... mmap resumed>) = 0x7f943d000000 [pid 5073] openat(AT_FDCWD, "./365/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7286] symlink("/dev/binderfs", "./binderfs" [pid 7285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... openat resumed>) = 4 [pid 7286] <... symlink resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7286] memfd_create("syzkaller", 0 [pid 7285] <... write resumed>) = 524288 [pid 7283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7286] <... memfd_create resumed>) = 3 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(4, [pid 7286] <... mmap resumed>) = 0x7f943d000000 [pid 7284] munmap(0x7f943d000000, 138412032 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7284] <... munmap resumed>) = 0 [pid 7284] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7284] <... openat resumed>) = 4 [pid 5073] close(4) = 0 [pid 7284] ioctl(4, LOOP_SET_FD, 3 [pid 5073] rmdir("./365/file1" [pid 7282] <... ioctl resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7285] munmap(0x7f943d000000, 138412032 [pid 7282] close(3 [pid 7285] <... munmap resumed>) = 0 [pid 7282] <... close resumed>) = 0 [pid 7282] close(4) = 0 [pid 7282] mkdir("./file1", 0777) = 0 [pid 7283] <... write resumed>) = 524288 [ 270.684390][ T7282] loop4: detected capacity change from 0 to 1024 [ 270.712375][ T7284] loop0: detected capacity change from 0 to 1024 [pid 7285] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7282] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7285] <... openat resumed>) = 4 [pid 7285] ioctl(4, LOOP_SET_FD, 3 [pid 7284] <... ioctl resumed>) = 0 [pid 7284] close(3 [pid 5073] getdents64(3, [pid 7284] <... close resumed>) = 0 [pid 7284] close(4) = 0 [pid 7282] <... mount resumed>) = 0 [pid 7284] mkdir("./file1", 0777 [pid 7282] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7284] <... mkdir resumed>) = 0 [pid 7282] <... openat resumed>) = 3 [pid 7283] munmap(0x7f943d000000, 138412032 [pid 5073] close(3 [pid 7282] chdir("./file1") = 0 [pid 7282] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7284] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7282] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7286] <... write resumed>) = 524288 [pid 7283] <... munmap resumed>) = 0 [pid 7282] truncate("./file1", 0 [pid 5073] <... close resumed>) = 0 [pid 7286] munmap(0x7f943d000000, 138412032 [pid 7283] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] rmdir("./365" [pid 7286] <... munmap resumed>) = 0 [pid 7284] <... mount resumed>) = 0 [pid 7283] <... openat resumed>) = 4 [pid 7282] <... truncate resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7286] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7284] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7283] ioctl(4, LOOP_SET_FD, 3 [pid 7282] memfd_create("syzkaller", 0 [pid 5073] mkdir("./366", 0777 [pid 7286] <... openat resumed>) = 4 [pid 7284] <... openat resumed>) = 3 [pid 7282] <... memfd_create resumed>) = 4 [pid 7285] <... ioctl resumed>) = 0 [pid 7284] chdir("./file1" [pid 7282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7285] close(3 [pid 7284] <... chdir resumed>) = 0 [pid 7282] <... mmap resumed>) = 0x7f943d000000 [pid 7284] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7282] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7286] ioctl(4, LOOP_SET_FD, 3 [pid 7285] <... close resumed>) = 0 [pid 7284] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7283] <... ioctl resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 7285] close(4) = 0 [pid 7285] mkdir("./file1", 0777) = 0 [pid 7285] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7284] truncate("./file1", 0 [pid 7283] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7283] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7284] <... truncate resumed>) = 0 [pid 7283] close(4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7286] <... ioctl resumed>) = 0 [pid 7284] memfd_create("syzkaller", 0 [pid 7283] <... close resumed>) = 0 [pid 7282] <... write resumed>) = 524288 [pid 7286] close(3 [pid 7283] mkdir("./file1", 0777 [pid 7284] <... memfd_create resumed>) = 4 [pid 7286] <... close resumed>) = 0 [pid 7283] <... mkdir resumed>) = 0 [pid 7286] close(4 [pid 7284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7283] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7286] <... close resumed>) = 0 [pid 7284] <... mmap resumed>) = 0x7f943d000000 [pid 7286] mkdir("./file1", 0777) = 0 [pid 7285] <... mount resumed>) = 0 [pid 7285] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 270.735411][ T7285] loop3: detected capacity change from 0 to 1024 [ 270.764535][ T7283] loop5: detected capacity change from 0 to 1024 [ 270.774403][ T7286] loop1: detected capacity change from 0 to 1024 [pid 7284] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7286] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7285] <... openat resumed>) = 3 [pid 7284] <... write resumed>) = 524288 [pid 7285] chdir("./file1") = 0 [pid 7285] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7283] <... mount resumed>) = 0 [pid 7285] truncate("./file1", 0 [pid 7282] munmap(0x7f943d000000, 138412032) = 0 [pid 7285] <... truncate resumed>) = 0 [pid 7285] memfd_create("syzkaller", 0) = 4 [pid 7282] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7282] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7282] close(4) = 0 [pid 7285] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7284] munmap(0x7f943d000000, 138412032 [pid 7283] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... ioctl resumed>) = 0 [pid 7283] <... openat resumed>) = 3 [pid 7283] chdir("./file1" [pid 7284] <... munmap resumed>) = 0 [pid 7283] <... chdir resumed>) = 0 [pid 7283] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] close(3 [pid 7283] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... close resumed>) = 0 [pid 7284] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7284] close(4 [pid 7286] <... mount resumed>) = 0 [pid 7284] <... close resumed>) = 0 [pid 7283] truncate("./file1", 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7286] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7285] <... write resumed>) = 524288 [pid 7283] <... truncate resumed>) = 0 [pid 7282] exit_group(0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7287 [pid 7286] chdir("./file1" [pid 7283] memfd_create("syzkaller", 0 [pid 7286] <... chdir resumed>) = 0 [pid 7286] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7283] <... memfd_create resumed>) = 4 [pid 7282] <... exit_group resumed>) = ? [pid 7286] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7282] +++ exited with 0 +++ [pid 7286] truncate("./file1", 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7282, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- ./strace-static-x86_64: Process 7287 attached [pid 7283] <... mmap resumed>) = 0x7f943d000000 [pid 7287] set_robust_list(0x555583d53660, 24) = 0 [pid 7284] exit_group(0 [pid 7287] chdir("./366") = 0 [pid 7284] <... exit_group resumed>) = ? [pid 7283] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7286] <... truncate resumed>) = 0 [pid 7285] munmap(0x7f943d000000, 138412032 [pid 7284] +++ exited with 0 +++ [pid 7287] <... prctl resumed>) = 0 [pid 7286] memfd_create("syzkaller", 0 [pid 5075] umount2("./364", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7284, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7287] setpgid(0, 0 [pid 7286] <... memfd_create resumed>) = 4 [pid 7285] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7287] <... setpgid resumed>) = 0 [pid 7286] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... openat resumed>) = 3 [pid 7287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7285] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] newfstatat(3, "", [pid 7287] <... openat resumed>) = 3 [pid 7285] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5071] umount2("./365", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7287] write(3, "1000", 4 [pid 7285] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7287] <... write resumed>) = 4 [pid 7285] <... close resumed>) = 0 [pid 5075] umount2("./364/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7287] close(3 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7287] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./364/binderfs", [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./365/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] unlink("./364/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... unlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./365/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7287] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] unlink("./365/binderfs" [pid 7287] memfd_create("syzkaller", 0 [pid 5071] <... unlink resumed>) = 0 [pid 7287] <... memfd_create resumed>) = 3 [pid 7286] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7283] <... write resumed>) = 524288 [pid 7287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7287] <... mmap resumed>) = 0x7f943d000000 [pid 7285] exit_group(0 [pid 7287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7285] <... exit_group resumed>) = ? [pid 7286] <... write resumed>) = 524288 [pid 7286] munmap(0x7f943d000000, 138412032) = 0 [pid 5075] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = 0 [pid 7286] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./364/file1", [pid 7286] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7286] close(4 [pid 5075] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7285] +++ exited with 0 +++ [pid 7283] munmap(0x7f943d000000, 138412032 [pid 5075] openat(AT_FDCWD, "./364/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7286] <... close resumed>) = 0 [pid 7283] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5071] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7285, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7286] exit_group(0 [pid 7287] <... write resumed>) = 524288 [pid 7286] <... exit_group resumed>) = ? [pid 7283] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5074] <... restart_syscall resumed>) = 0 [pid 7283] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] newfstatat(AT_FDCWD, "./365/file1", [pid 7283] close(4 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7287] munmap(0x7f943d000000, 138412032 [pid 7286] +++ exited with 0 +++ [pid 7283] <... close resumed>) = 0 [pid 5074] umount2("./365", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7287] <... munmap resumed>) = 0 [pid 7283] exit_group(0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7286, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./365/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 5074] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 4 [pid 5072] umount2("./366", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7287] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7283] <... exit_group resumed>) = ? [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 7287] <... openat resumed>) = 4 [pid 7283] +++ exited with 0 +++ [pid 5075] rmdir("./364/file1" [pid 5072] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7287] ioctl(4, LOOP_SET_FD, 3 [pid 5072] newfstatat(3, "", [pid 5071] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7283, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5076] umount2("./361", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5076] openat(AT_FDCWD, "./361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] newfstatat(3, "", [pid 5075] close(3 [pid 5074] umount2("./365/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] rmdir("./364" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7287] <... ioctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./365/binderfs", [pid 5072] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7287] close(3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] close(4 [pid 7287] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] umount2("./366/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7287] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] rmdir("./365/file1" [pid 7287] <... close resumed>) = 0 [pid 5076] umount2("./361/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./366/binderfs", [pid 5071] <... rmdir resumed>) = 0 [pid 7287] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] unlink("./365/binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(3, [pid 7287] <... mkdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./361/binderfs", [pid 5075] mkdir("./365", 0777 [pid 5072] unlink("./366/binderfs" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5071] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7287] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] unlink("./361/binderfs" [pid 5074] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./365") = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5071] mkdir("./366", 0777) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7287] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... umount2 resumed>) = 0 [pid 7287] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7287] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7287] chdir("./file1") = 0 [pid 7287] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7287] truncate("./file1", 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./366/file1", [pid 7287] <... truncate resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7287] memfd_create("syzkaller", 0) = 4 [pid 7287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7287] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./365/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./365/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5072] openat(AT_FDCWD, "./366/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] rmdir("./365/file1" [pid 5072] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 5076] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./361/file1", [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(4, [pid 5076] umount2("./361/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7287] <... write resumed>) = 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [ 270.982662][ T7287] loop2: detected capacity change from 0 to 1024 [pid 5072] close(4 [pid 7287] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "./361/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./365") = 0 [pid 7287] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5074] mkdir("./366", 0777 [pid 5072] <... close resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] rmdir("./366/file1" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 7287] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... rmdir resumed>) = 0 [pid 7287] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 3 [pid 7287] close(4 [pid 5074] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 7288 attached [pid 7287] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5072] getdents64(3, [pid 5071] close(3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7288] set_robust_list(0x555583d53660, 24 [pid 5076] close(4 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7288 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] rmdir("./361/file1" [pid 5072] close(3 [pid 7288] <... set_robust_list resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 7288] chdir("./365" [pid 5072] rmdir("./366" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7288] <... chdir resumed>) = 0 [pid 7287] exit_group(0) = ? [pid 7288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7287] +++ exited with 0 +++ [pid 5076] close(3 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7289 [pid 7288] <... prctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5072] mkdir("./367", 0777 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7287, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] umount2("./366", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... mkdir resumed>) = 0 [pid 7288] setpgid(0, 0 [pid 5076] rmdir("./361" [pid 7288] <... setpgid resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 7289 attached [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7289] set_robust_list(0x555583d53660, 24 [pid 7288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7289] <... set_robust_list resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... openat resumed>) = 3 [pid 7289] chdir("./366" [pid 7288] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7288] write(3, "1000", 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7288] <... write resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 7288] close(3 [pid 5076] mkdir("./362", 0777 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7289] <... chdir resumed>) = 0 [pid 7288] <... close resumed>) = 0 [pid 5073] umount2("./366/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7289] <... prctl resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./366/binderfs", [pid 7289] setpgid(0, 0 [pid 7288] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7289] <... setpgid resumed>) = 0 [pid 5073] unlink("./366/binderfs" [pid 7289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7288] <... symlink resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7289] <... openat resumed>) = 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7289] write(3, "1000", 4) = 4 [pid 7289] close(3) = 0 [pid 7289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7288] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7289] memfd_create("syzkaller", 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7289] <... memfd_create resumed>) = 3 [pid 7288] <... memfd_create resumed>) = 3 [pid 5073] <... umount2 resumed>) = 0 [pid 7289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./366/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7288] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./366/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./366/file1") = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./366") = 0 [pid 7289] <... write resumed>) = 524288 [pid 7288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(3 [pid 7288] <... write resumed>) = 524288 [pid 5072] close(3 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 5073] mkdir("./367", 0777 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 7289] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7290 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7289] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7289] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7291 attached ./strace-static-x86_64: Process 7290 attached [pid 7290] set_robust_list(0x555583d53660, 24) = 0 [pid 7290] chdir("./366" [pid 7291] set_robust_list(0x555583d53660, 24 [pid 7288] munmap(0x7f943d000000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7291 [pid 7290] <... chdir resumed>) = 0 [pid 7290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7290] setpgid(0, 0) = 0 [pid 7290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7288] <... munmap resumed>) = 0 [pid 7291] <... set_robust_list resumed>) = 0 [pid 7290] <... openat resumed>) = 3 [pid 7288] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] close(3) = 0 [pid 7288] <... openat resumed>) = 4 [pid 7290] write(3, "1000", 4 [pid 7291] chdir("./367" [pid 7290] <... write resumed>) = 4 [pid 7288] ioctl(4, LOOP_SET_FD, 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7291] <... chdir resumed>) = 0 [pid 7290] close(3) = 0 [pid 7290] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7290] memfd_create("syzkaller", 0) = 3 [pid 7290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7289] <... ioctl resumed>) = 0 [pid 7289] close(3) = 0 [pid 7289] close(4) = 0 [pid 7289] mkdir("./file1", 0777) = 0 [pid 7289] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, ""./strace-static-x86_64: Process 7292 attached [pid 7291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7290] <... write resumed>) = 524288 [pid 7288] <... ioctl resumed>) = 0 [pid 7292] set_robust_list(0x555583d53660, 24 [pid 7291] <... prctl resumed>) = 0 [pid 7288] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7292 [pid 7292] <... set_robust_list resumed>) = 0 [pid 7292] chdir("./362" [pid 7291] setpgid(0, 0 [pid 7288] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7292] <... chdir resumed>) = 0 [pid 7291] <... setpgid resumed>) = 0 [pid 7288] close(4 [pid 7292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7288] <... close resumed>) = 0 [pid 7292] <... prctl resumed>) = 0 [pid 7292] setpgid(0, 0 [pid 7291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7288] mkdir("./file1", 0777 [pid 7292] <... setpgid resumed>) = 0 [pid 7289] <... mount resumed>) = 0 [pid 7288] <... mkdir resumed>) = 0 [pid 7292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7289] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7292] <... openat resumed>) = 3 [pid 7291] <... openat resumed>) = 3 [pid 7290] munmap(0x7f943d000000, 138412032 [pid 7288] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] close(3 [pid 7292] write(3, "1000", 4) = 4 [pid 7292] close(3) = 0 [pid 7291] write(3, "1000", 4 [pid 7292] symlink("/dev/binderfs", "./binderfs" [pid 7290] <... munmap resumed>) = 0 [pid 7289] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 7291] <... write resumed>) = 4 [pid 7291] close(3 [pid 7292] <... symlink resumed>) = 0 [pid 7289] chdir("./file1" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7289] <... chdir resumed>) = 0 [ 271.161288][ T7289] loop0: detected capacity change from 0 to 1024 [ 271.184418][ T7288] loop4: detected capacity change from 0 to 1024 [pid 7291] <... close resumed>) = 0 [pid 7289] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7291] symlink("/dev/binderfs", "./binderfs" [pid 7289] truncate("./file1", 0 [pid 7292] memfd_create("syzkaller", 0 [pid 7291] <... symlink resumed>) = 0 [pid 7290] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 7293 attached [pid 7292] <... memfd_create resumed>) = 3 [pid 7291] memfd_create("syzkaller", 0 [pid 7290] <... openat resumed>) = 4 [pid 7289] <... truncate resumed>) = 0 [pid 7292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7291] <... memfd_create resumed>) = 3 [pid 7290] ioctl(4, LOOP_SET_FD, 3 [pid 7289] memfd_create("syzkaller", 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7293 [pid 7293] set_robust_list(0x555583d53660, 24 [pid 7292] <... mmap resumed>) = 0x7f943d000000 [pid 7291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7288] <... mount resumed>) = 0 [pid 7293] <... set_robust_list resumed>) = 0 [pid 7292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7291] <... mmap resumed>) = 0x7f943d000000 [pid 7288] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7293] chdir("./367" [pid 7289] <... memfd_create resumed>) = 4 [pid 7293] <... chdir resumed>) = 0 [pid 7289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7289] <... mmap resumed>) = 0x7f943d000000 [pid 7293] <... prctl resumed>) = 0 [pid 7291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7289] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7288] <... openat resumed>) = 3 [pid 7293] setpgid(0, 0) = 0 [pid 7293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7288] chdir("./file1" [pid 7293] write(3, "1000", 4 [pid 7290] <... ioctl resumed>) = 0 [pid 7293] <... write resumed>) = 4 [pid 7290] close(3 [pid 7293] close(3) = 0 [pid 7290] <... close resumed>) = 0 [pid 7293] symlink("/dev/binderfs", "./binderfs" [pid 7290] close(4 [pid 7293] <... symlink resumed>) = 0 [pid 7290] <... close resumed>) = 0 [pid 7293] memfd_create("syzkaller", 0 [pid 7288] <... chdir resumed>) = 0 [pid 7288] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7293] <... memfd_create resumed>) = 3 [pid 7292] <... write resumed>) = 524288 [pid 7290] mkdir("./file1", 0777 [pid 7288] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7290] <... mkdir resumed>) = 0 [pid 7288] truncate("./file1", 0 [pid 7293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7290] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7292] munmap(0x7f943d000000, 138412032 [pid 7291] <... write resumed>) = 524288 [pid 7288] <... truncate resumed>) = 0 [pid 7288] memfd_create("syzkaller", 0) = 4 [pid 7288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [ 271.249150][ T7290] loop3: detected capacity change from 0 to 1024 [pid 7288] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7292] <... munmap resumed>) = 0 [pid 7291] munmap(0x7f943d000000, 138412032 [pid 7289] <... write resumed>) = 524288 [pid 7292] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7289] munmap(0x7f943d000000, 138412032) = 0 [pid 7292] <... openat resumed>) = 4 [pid 7292] ioctl(4, LOOP_SET_FD, 3 [pid 7293] <... write resumed>) = 524288 [pid 7291] <... munmap resumed>) = 0 [pid 7289] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7288] <... write resumed>) = 524288 [pid 7289] close(4 [pid 7291] <... openat resumed>) = 4 [pid 7291] ioctl(4, LOOP_SET_FD, 3 [pid 7290] <... mount resumed>) = 0 [pid 7290] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7290] chdir("./file1") = 0 [pid 7290] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7290] truncate("./file1", 0 [pid 7289] <... close resumed>) = 0 [pid 7292] <... ioctl resumed>) = 0 [pid 7291] <... ioctl resumed>) = 0 [pid 7292] close(3 [pid 7293] munmap(0x7f943d000000, 138412032 [pid 7292] <... close resumed>) = 0 [pid 7292] close(4 [pid 7293] <... munmap resumed>) = 0 [pid 7292] <... close resumed>) = 0 [pid 7292] mkdir("./file1", 0777 [pid 7291] close(3 [pid 7290] <... truncate resumed>) = 0 [pid 7289] exit_group(0 [pid 7293] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7292] <... mkdir resumed>) = 0 [pid 7290] memfd_create("syzkaller", 0 [pid 7289] <... exit_group resumed>) = ? [pid 7288] munmap(0x7f943d000000, 138412032 [pid 7293] <... openat resumed>) = 4 [pid 7291] <... close resumed>) = 0 [pid 7290] <... memfd_create resumed>) = 4 [pid 7288] <... munmap resumed>) = 0 [pid 7291] close(4 [ 271.319355][ T7292] loop5: detected capacity change from 0 to 1024 [ 271.340893][ T7291] loop1: detected capacity change from 0 to 1024 [pid 7290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7293] ioctl(4, LOOP_SET_FD, 3 [pid 7292] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7291] <... close resumed>) = 0 [pid 7290] <... mmap resumed>) = 0x7f943d000000 [pid 7289] +++ exited with 0 +++ [pid 7293] <... ioctl resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7289, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7288] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7288] close(4 [pid 5071] umount2("./366", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7291] mkdir("./file1", 0777 [pid 7292] <... mount resumed>) = 0 [pid 7290] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7291] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7292] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7292] chdir("./file1") = 0 [pid 7292] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7292] truncate("./file1", 0 [pid 7291] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... openat resumed>) = 3 [pid 7288] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 7292] <... truncate resumed>) = 0 [pid 7292] memfd_create("syzkaller", 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7292] <... memfd_create resumed>) = 4 [pid 7292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] getdents64(3, [pid 7292] <... mmap resumed>) = 0x7f943d000000 [pid 7288] exit_group(0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7288] <... exit_group resumed>) = ? [pid 5071] umount2("./366/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7291] <... mount resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7291] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./366/binderfs", [pid 7291] <... openat resumed>) = 3 [ 271.366847][ T7293] loop2: detected capacity change from 0 to 1024 [pid 7293] close(3 [pid 7292] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7291] chdir("./file1" [pid 7288] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7293] <... close resumed>) = 0 [pid 7290] <... write resumed>) = 524288 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7288, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] unlink("./366/binderfs" [pid 7293] close(4 [pid 5071] <... unlink resumed>) = 0 [pid 5075] umount2("./365", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7291] <... chdir resumed>) = 0 [pid 7291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7293] <... close resumed>) = 0 [pid 7291] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... openat resumed>) = 3 [pid 7293] mkdir("./file1", 0777 [pid 7291] truncate("./file1", 0 [pid 5075] newfstatat(3, "", [pid 7293] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7293] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] getdents64(3, [pid 7293] <... mount resumed>) = 0 [pid 7291] <... truncate resumed>) = 0 [pid 7290] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = 0 [pid 7293] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7292] <... write resumed>) = 524288 [pid 5075] umount2("./365/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7293] <... openat resumed>) = 3 [pid 7291] memfd_create("syzkaller", 0 [pid 7290] <... munmap resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./365/binderfs", [pid 7293] chdir("./file1" [pid 5071] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7293] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7293] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./366/file1", [pid 7293] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] openat(AT_FDCWD, "./366/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7293] truncate("./file1", 0 [pid 5071] getdents64(4, [pid 7293] <... truncate resumed>) = 0 [pid 7291] <... memfd_create resumed>) = 4 [pid 7290] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] unlink("./365/binderfs" [pid 7293] memfd_create("syzkaller", 0) = 4 [pid 5075] <... unlink resumed>) = 0 [pid 7293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7290] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7293] <... mmap resumed>) = 0x7f943d000000 [pid 7292] munmap(0x7f943d000000, 138412032 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7293] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7292] <... munmap resumed>) = 0 [pid 7291] <... mmap resumed>) = 0x7f943d000000 [pid 7290] close(4 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./366/file1") = 0 [pid 7292] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7292] close(4 [pid 5071] getdents64(3, [pid 7292] <... close resumed>) = 0 [pid 7290] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./366") = 0 [pid 5071] mkdir("./367", 0777) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7291] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7293] <... write resumed>) = 524288 [pid 7292] exit_group(0 [pid 7291] <... write resumed>) = 524288 [pid 7290] exit_group(0 [pid 5075] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7292] <... exit_group resumed>) = ? [pid 7292] +++ exited with 0 +++ [pid 7290] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7293] munmap(0x7f943d000000, 138412032 [pid 5075] newfstatat(AT_FDCWD, "./365/file1", [pid 7293] <... munmap resumed>) = 0 [pid 7293] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7290] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7290, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7292, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5076] umount2("./362", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 7293] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./365/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7293] <... close resumed>) = 0 [pid 7291] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "./362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 7291] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5074] umount2("./366", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... ioctl resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5075] rmdir("./365/file1" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./366/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./366/binderfs", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7291] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./362/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5074] unlink("./366/binderfs" [pid 5071] close(3 [pid 7293] exit_group(0 [pid 7291] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7291] close(4 [pid 5076] newfstatat(AT_FDCWD, "./362/binderfs", [pid 5075] rmdir("./365" [pid 5074] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7293] <... exit_group resumed>) = ? [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7294 attached [pid 7293] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7294] set_robust_list(0x555583d53660, 24 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7293, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7294] <... set_robust_list resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7294 [pid 7294] chdir("./367" [pid 5073] umount2("./367", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7294] <... chdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7294] <... prctl resumed>) = 0 [pid 5076] unlink("./362/binderfs" [pid 5075] mkdir("./366", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 7294] setpgid(0, 0 [pid 7291] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./366/file1", [pid 5073] newfstatat(3, "", [pid 7294] <... setpgid resumed>) = 0 [pid 5076] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... openat resumed>) = 3 [pid 5074] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 7294] <... openat resumed>) = 3 [pid 7291] exit_group(0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7294] write(3, "1000", 4 [pid 5074] openat(AT_FDCWD, "./366/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./367/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7294] <... write resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7294] close(3 [pid 5073] newfstatat(AT_FDCWD, "./367/binderfs", [pid 7294] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7294] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./367/binderfs" [pid 7294] <... symlink resumed>) = 0 [pid 7291] <... exit_group resumed>) = ? [pid 5074] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 7294] memfd_create("syzkaller", 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7294] <... memfd_create resumed>) = 3 [pid 7294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(4, [pid 7294] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7291] +++ exited with 0 +++ [pid 5074] close(4 [pid 7294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7291, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] rmdir("./366/file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./367/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./367", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./367/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5076] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(3, [pid 5073] newfstatat(4, "", [pid 5072] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(3, "", [pid 7294] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5073] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./367/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] newfstatat(AT_FDCWD, "./367/binderfs", [pid 5073] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./362/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./362/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] close(4 [pid 5076] openat(AT_FDCWD, "./362/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./367/file1" [pid 5076] <... openat resumed>) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5074] rmdir("./366" [pid 5073] getdents64(3, [pid 5072] unlink("./367/binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5076] getdents64(4, [pid 5073] close(3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5072] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5073] rmdir("./367" [pid 7294] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] mkdir("./367", 0777 [pid 5072] <... umount2 resumed>) = 0 [pid 7294] <... munmap resumed>) = 0 [pid 5076] close(4 [pid 5075] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7294] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] mkdir("./368", 0777 [pid 7294] <... openat resumed>) = 4 [pid 5076] rmdir("./362/file1" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7294] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... mkdir resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./367/file1", ./strace-static-x86_64: Process 7295 attached [pid 5076] getdents64(3, [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7295] set_robust_list(0x555583d53660, 24 [pid 7294] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7295] <... set_robust_list resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7295 [pid 5073] <... openat resumed>) = 3 [pid 7295] chdir("./366" [pid 7294] close(3 [pid 5076] close(3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7295] <... chdir resumed>) = 0 [pid 7294] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7294] close(4 [pid 5076] rmdir("./362" [pid 7295] <... prctl resumed>) = 0 [pid 7294] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./367/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7294] mkdir("./file1", 0777 [pid 5076] mkdir("./363", 0777 [pid 7295] setpgid(0, 0 [pid 5072] <... openat resumed>) = 4 [pid 7295] <... setpgid resumed>) = 0 [pid 7294] <... mkdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 7294] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 7295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7295] <... openat resumed>) = 3 [pid 7294] <... mount resumed>) = 0 [pid 5072] getdents64(4, [pid 7294] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7295] write(3, "1000", 4 [pid 7294] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7295] <... write resumed>) = 4 [pid 5072] getdents64(4, [pid 7295] close(3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7295] <... close resumed>) = 0 [pid 5072] close(4 [pid 7295] symlink("/dev/binderfs", "./binderfs" [pid 7294] chdir("./file1") = 0 [pid 7294] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 7294] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7295] <... symlink resumed>) = 0 [pid 7294] truncate("./file1", 0 [pid 5072] rmdir("./367/file1" [pid 7295] memfd_create("syzkaller", 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7295] <... memfd_create resumed>) = 3 [pid 7295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7294] <... truncate resumed>) = 0 [ 271.616374][ T7294] loop0: detected capacity change from 0 to 1024 [pid 5072] getdents64(3, [pid 7295] <... mmap resumed>) = 0x7f943d000000 [pid 7294] memfd_create("syzkaller", 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7294] <... memfd_create resumed>) = 4 [pid 5074] close(3 [pid 5072] close(3 [pid 5074] <... close resumed>) = 0 [pid 7294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 7294] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7296 attached [pid 7295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] rmdir("./367" [pid 7296] set_robust_list(0x555583d53660, 24 [pid 5073] close(3 [pid 7296] <... set_robust_list resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7296] chdir("./367" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7296] <... chdir resumed>) = 0 [pid 7294] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7296] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 7297 attached ) = 0 [pid 7296] setpgid(0, 0 [pid 7297] set_robust_list(0x555583d53660, 24 [pid 7296] <... setpgid resumed>) = 0 [pid 7297] <... set_robust_list resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7297 [pid 7297] chdir("./368" [pid 7296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7297] <... chdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7296] <... openat resumed>) = 3 [pid 7297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7297] setpgid(0, 0 [pid 7296] write(3, "1000", 4 [pid 7295] <... write resumed>) = 524288 [pid 5076] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7296 [pid 5072] mkdir("./368", 0777 [pid 7297] <... setpgid resumed>) = 0 [pid 7296] <... write resumed>) = 4 [pid 7297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7296] close(3 [pid 5076] <... close resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7296] <... close resumed>) = 0 [pid 7296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7295] munmap(0x7f943d000000, 138412032 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7297] <... openat resumed>) = 3 [pid 7296] memfd_create("syzkaller", 0 [pid 7295] <... munmap resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7297] write(3, "1000", 4 [pid 7296] <... memfd_create resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7297] <... write resumed>) = 4 [pid 7296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7297] close(3) = 0 [pid 7296] <... mmap resumed>) = 0x7f943d000000 [pid 7295] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 7298 attached [pid 7297] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7295] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7298 [pid 7298] set_robust_list(0x555583d53660, 24 [pid 7295] ioctl(4, LOOP_SET_FD, 3 [pid 7298] <... set_robust_list resumed>) = 0 [pid 7297] memfd_create("syzkaller", 0 [pid 7296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7295] <... ioctl resumed>) = 0 [pid 7294] <... write resumed>) = 524288 [pid 7294] munmap(0x7f943d000000, 138412032) = 0 [pid 7294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7294] close(4) = 0 [pid 7298] chdir("./363" [pid 7297] <... memfd_create resumed>) = 3 [pid 7298] <... chdir resumed>) = 0 [pid 7297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7294] exit_group(0 [pid 7298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7295] close(3 [pid 7298] <... prctl resumed>) = 0 [pid 7298] setpgid(0, 0 [pid 7297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7295] <... close resumed>) = 0 [pid 7298] <... setpgid resumed>) = 0 [pid 7295] close(4 [pid 7294] <... exit_group resumed>) = ? [pid 7298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7295] <... close resumed>) = 0 [pid 7294] +++ exited with 0 +++ [pid 7295] mkdir("./file1", 0777 [pid 7298] <... openat resumed>) = 3 [pid 7296] <... write resumed>) = 524288 [pid 7295] <... mkdir resumed>) = 0 [pid 7298] write(3, "1000", 4 [pid 7297] <... write resumed>) = 524288 [pid 7296] munmap(0x7f943d000000, 138412032 [pid 7295] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7294, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7298] <... write resumed>) = 4 [pid 7297] munmap(0x7f943d000000, 138412032 [pid 7296] <... munmap resumed>) = 0 [pid 5071] umount2("./367", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7298] close(3) = 0 [pid 7297] <... munmap resumed>) = 0 [pid 7296] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7295] <... mount resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7298] symlink("/dev/binderfs", "./binderfs" [pid 7297] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7296] <... openat resumed>) = 4 [pid 7295] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7298] <... symlink resumed>) = 0 [pid 7297] <... openat resumed>) = 4 [pid 7296] ioctl(4, LOOP_SET_FD, 3 [pid 7295] <... openat resumed>) = 3 [ 271.756865][ T7295] loop4: detected capacity change from 0 to 1024 [pid 7295] chdir("./file1" [pid 5071] <... openat resumed>) = 3 [pid 7295] <... chdir resumed>) = 0 [pid 7295] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7295] truncate("./file1", 0 [pid 7296] <... ioctl resumed>) = 0 [pid 7297] ioctl(4, LOOP_SET_FD, 3 [pid 5071] newfstatat(3, "", [pid 7298] memfd_create("syzkaller", 0 [pid 7295] <... truncate resumed>) = 0 [pid 7295] memfd_create("syzkaller", 0 [pid 7298] <... memfd_create resumed>) = 3 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7297] <... ioctl resumed>) = 0 [pid 7296] close(3 [pid 5071] getdents64(3, [pid 7298] <... mmap resumed>) = 0x7f943d000000 [pid 7297] close(3 [pid 7296] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7295] <... memfd_create resumed>) = 4 [pid 5071] umount2("./367/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7295] <... mmap resumed>) = 0x7f943d000000 [pid 5071] newfstatat(AT_FDCWD, "./367/binderfs", [pid 7298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7297] <... close resumed>) = 0 [pid 7296] close(4 [pid 7295] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7297] close(4 [pid 7296] <... close resumed>) = 0 [pid 5071] unlink("./367/binderfs" [pid 7297] <... close resumed>) = 0 [pid 7296] mkdir("./file1", 0777 [pid 5071] <... unlink resumed>) = 0 [pid 7297] mkdir("./file1", 0777 [pid 7296] <... mkdir resumed>) = 0 [pid 7297] <... mkdir resumed>) = 0 [pid 7296] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] close(3 [pid 5071] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7297] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7299 attached [pid 7299] set_robust_list(0x555583d53660, 24) = 0 [pid 7299] chdir("./368" [pid 7296] <... mount resumed>) = 0 [pid 7295] <... write resumed>) = 524288 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7299 [pid 7299] <... chdir resumed>) = 0 [pid 7298] <... write resumed>) = 524288 [pid 7296] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... umount2 resumed>) = 0 [pid 7296] <... openat resumed>) = 3 [pid 7299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7298] munmap(0x7f943d000000, 138412032 [pid 7296] chdir("./file1" [pid 7299] <... prctl resumed>) = 0 [pid 7299] setpgid(0, 0 [pid 7296] <... chdir resumed>) = 0 [pid 7299] <... setpgid resumed>) = 0 [pid 7299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7298] <... munmap resumed>) = 0 [pid 7296] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7298] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7297] <... mount resumed>) = 0 [pid 7296] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7299] write(3, "1000", 4 [pid 7298] <... openat resumed>) = 4 [pid 7297] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7296] truncate("./file1", 0 [ 271.814426][ T7296] loop3: detected capacity change from 0 to 1024 [ 271.821966][ T7297] loop2: detected capacity change from 0 to 1024 [pid 5071] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7299] <... write resumed>) = 4 [pid 7295] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7299] close(3 [pid 7295] <... munmap resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./367/file1", [pid 7299] <... close resumed>) = 0 [pid 7297] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7299] symlink("/dev/binderfs", "./binderfs" [pid 7298] ioctl(4, LOOP_SET_FD, 3 [pid 7297] chdir("./file1" [pid 7296] <... truncate resumed>) = 0 [pid 5071] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7299] <... symlink resumed>) = 0 [pid 7295] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7299] memfd_create("syzkaller", 0 [pid 7295] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] openat(AT_FDCWD, "./367/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7299] <... memfd_create resumed>) = 3 [pid 7295] close(4 [pid 5071] <... openat resumed>) = 4 [pid 7299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7297] <... chdir resumed>) = 0 [pid 7296] memfd_create("syzkaller", 0 [pid 5071] newfstatat(4, "", [pid 7299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7297] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7296] <... memfd_create resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7297] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7296] <... mmap resumed>) = 0x7f943d000000 [pid 7295] <... close resumed>) = 0 [pid 5071] getdents64(4, [pid 7297] truncate("./file1", 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7296] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./367/file1" [pid 7297] <... truncate resumed>) = 0 [pid 7297] memfd_create("syzkaller", 0) = 4 [pid 7297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... rmdir resumed>) = 0 [pid 7299] <... write resumed>) = 524288 [pid 5071] getdents64(3, [pid 7295] exit_group(0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7295] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 7298] <... ioctl resumed>) = 0 [pid 7297] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7295] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 7298] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7295, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7298] <... close resumed>) = 0 [pid 5071] rmdir("./367" [pid 7298] close(4 [pid 5071] <... rmdir resumed>) = 0 [pid 7298] <... close resumed>) = 0 [pid 7296] <... write resumed>) = 524288 [pid 5075] umount2("./366", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7298] mkdir("./file1", 0777 [pid 7296] munmap(0x7f943d000000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7298] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] mkdir("./368", 0777 [pid 7298] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7296] <... munmap resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5071] <... mkdir resumed>) = 0 [pid 7299] munmap(0x7f943d000000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7299] <... munmap resumed>) = 0 [pid 7296] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] getdents64(3, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7296] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./366/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 7296] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7298] <... mount resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./366/binderfs", [pid 7299] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 271.880871][ T7298] loop5: detected capacity change from 0 to 1024 [pid 5075] unlink("./366/binderfs" [pid 7299] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... unlink resumed>) = 0 [pid 7298] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7299] <... ioctl resumed>) = 0 [pid 7298] <... openat resumed>) = 3 [pid 7297] <... write resumed>) = 524288 [pid 7296] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./366/file1", [pid 7298] chdir("./file1" [pid 7297] munmap(0x7f943d000000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7298] <... chdir resumed>) = 0 [pid 7297] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7299] close(3 [pid 7298] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7297] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7296] exit_group(0 [pid 7299] <... close resumed>) = 0 [pid 7298] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "./366/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7297] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7296] <... exit_group resumed>) = ? [pid 7299] close(4 [pid 7298] truncate("./file1", 0 [pid 7297] close(4 [pid 5075] <... openat resumed>) = 4 [pid 7299] <... close resumed>) = 0 [pid 7298] <... truncate resumed>) = 0 [pid 7296] +++ exited with 0 +++ [pid 7299] mkdir("./file1", 0777 [pid 7298] memfd_create("syzkaller", 0 [pid 5075] newfstatat(4, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7296, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7299] <... mkdir resumed>) = 0 [pid 7298] <... memfd_create resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 7298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... ioctl resumed>) = 0 [pid 7298] <... mmap resumed>) = 0x7f943d000000 [pid 7299] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] getdents64(4, [pid 5071] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] umount2("./367", MNT_FORCE|UMOUNT_NOFOLLOW [ 271.939471][ T7299] loop1: detected capacity change from 0 to 1024 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7300 attached [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7300] set_robust_list(0x555583d53660, 24 [pid 5075] rmdir("./366/file1" [pid 5074] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7297] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] newfstatat(3, "", [pid 7297] exit_group(0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7297] <... exit_group resumed>) = ? [pid 5075] close(3 [pid 5074] getdents64(3, [pid 7300] <... set_robust_list resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7300] chdir("./368" [pid 5075] rmdir("./366" [pid 5074] umount2("./367/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7300 [pid 7300] <... chdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] mkdir("./367", 0777 [pid 5074] newfstatat(AT_FDCWD, "./367/binderfs", [pid 7300] <... prctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7300] setpgid(0, 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] unlink("./367/binderfs" [pid 7300] <... setpgid resumed>) = 0 [pid 7298] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7298] <... write resumed>) = 524288 [pid 7297] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5074] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7297, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7300] <... openat resumed>) = 3 [pid 7300] write(3, "1000", 4) = 4 [pid 7300] close(3) = 0 [pid 7300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7299] <... mount resumed>) = 0 [pid 7300] memfd_create("syzkaller", 0 [pid 7299] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7300] <... memfd_create resumed>) = 3 [pid 7299] <... openat resumed>) = 3 [pid 7300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7299] chdir("./file1" [pid 7300] <... mmap resumed>) = 0x7f943d000000 [pid 7299] <... chdir resumed>) = 0 [pid 7300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7299] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7299] truncate("./file1", 0 [pid 5073] umount2("./368", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7298] munmap(0x7f943d000000, 138412032 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7299] <... truncate resumed>) = 0 [pid 7298] <... munmap resumed>) = 0 [pid 7299] memfd_create("syzkaller", 0 [pid 7298] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./368/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7299] <... memfd_create resumed>) = 4 [pid 5074] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./367/file1", [pid 7299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7299] <... mmap resumed>) = 0x7f943d000000 [pid 5074] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./367/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7299] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7298] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(4, "", [pid 5073] newfstatat(AT_FDCWD, "./368/binderfs", [pid 7298] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 7300] <... write resumed>) = 524288 [pid 7298] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] unlink("./368/binderfs" [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(4 [pid 5073] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./367/file1") = 0 [pid 5073] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 7300] munmap(0x7f943d000000, 138412032 [pid 5074] rmdir("./367") = 0 [pid 7298] exit_group(0 [pid 5075] close(3 [pid 7298] <... exit_group resumed>) = ? [pid 7300] <... munmap resumed>) = 0 [pid 5074] mkdir("./368", 0777) = 0 [pid 7298] +++ exited with 0 +++ [pid 7300] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7300] <... openat resumed>) = 4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7298, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7300] ioctl(4, LOOP_SET_FD, 3 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7301 attached ) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7301 [pid 5073] newfstatat(AT_FDCWD, "./368/file1", [pid 7301] set_robust_list(0x555583d53660, 24 [pid 7300] <... ioctl resumed>) = 0 [pid 7299] <... write resumed>) = 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7301] <... set_robust_list resumed>) = 0 [pid 7300] close(3 [pid 7299] munmap(0x7f943d000000, 138412032 [pid 5073] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7301] chdir("./367" [pid 7300] <... close resumed>) = 0 [pid 7299] <... munmap resumed>) = 0 [pid 5076] umount2("./363", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7301] <... chdir resumed>) = 0 [pid 7300] close(4 [pid 7299] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./368/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7300] <... close resumed>) = 0 [pid 7299] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 4 [pid 7301] <... prctl resumed>) = 0 [pid 7300] mkdir("./file1", 0777 [pid 7299] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 7301] setpgid(0, 0 [pid 7300] <... mkdir resumed>) = 0 [pid 7299] <... close resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 7301] <... setpgid resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./363/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] getdents64(4, [pid 7300] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7301] <... openat resumed>) = 3 [pid 7301] write(3, "1000", 4 [pid 5076] newfstatat(AT_FDCWD, "./363/binderfs", [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7301] <... write resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(4 [pid 7301] close(3 [pid 5073] <... close resumed>) = 0 [pid 7301] <... close resumed>) = 0 [pid 5073] rmdir("./368/file1" [pid 7301] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] unlink("./363/binderfs" [pid 7301] memfd_create("syzkaller", 0 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 7301] <... memfd_create resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [ 272.109501][ T7300] loop0: detected capacity change from 0 to 1024 [pid 5073] close(3 [pid 7301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7299] exit_group(0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 5073] <... close resumed>) = 0 [pid 7299] <... exit_group resumed>) = ? [pid 5074] <... close resumed>) = 0 [pid 7301] <... mmap resumed>) = 0x7f943d000000 [pid 7299] +++ exited with 0 +++ [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] rmdir("./368" [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7299, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7300] <... mount resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7300] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... restart_syscall resumed>) = 0 [pid 7300] <... openat resumed>) = 3 [pid 7300] chdir("./file1") = 0 [pid 5076] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./368", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7300] truncate("./file1", 0 [pid 5076] newfstatat(AT_FDCWD, "./363/file1", [pid 5073] mkdir("./369", 0777 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7302 attached [pid 7300] <... truncate resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7302 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7302] set_robust_list(0x555583d53660, 24 [pid 7300] memfd_create("syzkaller", 0 [pid 5076] umount2("./363/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7300] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 7302] <... set_robust_list resumed>) = 0 [pid 7300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "./363/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7302] chdir("./368" [pid 7300] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 4 [pid 7302] <... chdir resumed>) = 0 [pid 7300] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(4, "", [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] newfstatat(3, "", [pid 7302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7302] <... prctl resumed>) = 0 [pid 5076] getdents64(4, [pid 7302] setpgid(0, 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7302] <... setpgid resumed>) = 0 [pid 5076] getdents64(4, [pid 7302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./363/file1") = 0 [pid 7302] <... openat resumed>) = 3 [pid 7301] <... write resumed>) = 524288 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7302] write(3, "1000", 4 [pid 5076] getdents64(3, [pid 7302] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7302] close(3 [pid 5076] close(3 [pid 7302] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7302] symlink("/dev/binderfs", "./binderfs" [pid 5076] rmdir("./363" [pid 5072] getdents64(3, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7302] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7302] memfd_create("syzkaller", 0 [pid 7300] <... write resumed>) = 524288 [pid 7302] <... memfd_create resumed>) = 3 [pid 5076] mkdir("./364", 0777 [pid 7302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7302] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7301] munmap(0x7f943d000000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 5072] umount2("./368/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./368/binderfs", [pid 7301] <... munmap resumed>) = 0 [pid 7302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7300] munmap(0x7f943d000000, 138412032 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7302] <... write resumed>) = 524288 [pid 7301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... ioctl resumed>) = 0 [pid 5072] unlink("./368/binderfs" [pid 7301] <... openat resumed>) = 4 [pid 7300] <... munmap resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 7301] ioctl(4, LOOP_SET_FD, 3 [pid 5072] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7300] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7300] close(4) = 0 [pid 7301] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5073] close(3 [pid 5072] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./368/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./368/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, ./strace-static-x86_64: Process 7303 attached [pid 7302] munmap(0x7f943d000000, 138412032 [pid 7301] close(3 [pid 7300] exit_group(0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7303] set_robust_list(0x555583d53660, 24 [pid 7302] <... munmap resumed>) = 0 [pid 7301] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7303 [pid 5072] getdents64(4, [pid 7303] <... set_robust_list resumed>) = 0 [pid 7301] close(4 [pid 7300] <... exit_group resumed>) = ? [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7302] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7301] <... close resumed>) = 0 [pid 5072] close(4 [pid 7303] chdir("./369" [pid 7302] <... openat resumed>) = 4 [pid 7301] mkdir("./file1", 0777 [pid 5072] <... close resumed>) = 0 [pid 7303] <... chdir resumed>) = 0 [pid 7300] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 7303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7301] <... mkdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7300, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7303] setpgid(0, 0) = 0 [ 272.256370][ T7301] loop4: detected capacity change from 0 to 1024 [pid 7301] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7302] ioctl(4, LOOP_SET_FD, 3 [pid 5072] rmdir("./368/file1" [pid 7303] <... openat resumed>) = 3 [pid 7301] <... mount resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7303] write(3, "1000", 4 [pid 7301] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7303] <... write resumed>) = 4 [pid 7303] close(3 [pid 7301] <... openat resumed>) = 3 [pid 5071] umount2("./368", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7303] <... close resumed>) = 0 [pid 7301] chdir("./file1" [pid 7303] symlink("/dev/binderfs", "./binderfs" [pid 7301] <... chdir resumed>) = 0 [pid 7303] <... symlink resumed>) = 0 [pid 7301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] close(3 [pid 5072] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7301] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7303] memfd_create("syzkaller", 0 [pid 7302] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7303] <... memfd_create resumed>) = 3 [pid 7302] close(3 [pid 7301] truncate("./file1", 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] close(3 [pid 5071] <... openat resumed>) = 3 ./strace-static-x86_64: Process 7304 attached [pid 7303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7302] <... close resumed>) = 0 [pid 7301] <... truncate resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 7304] set_robust_list(0x555583d53660, 24 [pid 7303] <... mmap resumed>) = 0x7f943d000000 [pid 7302] close(4 [pid 7301] memfd_create("syzkaller", 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7304 [pid 5072] rmdir("./368" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7304] <... set_robust_list resumed>) = 0 [pid 7302] <... close resumed>) = 0 [pid 7301] <... memfd_create resumed>) = 4 [pid 5072] <... rmdir resumed>) = 0 [pid 7304] chdir("./364" [ 272.298791][ T7302] loop3: detected capacity change from 0 to 1024 [pid 7303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7302] mkdir("./file1", 0777 [pid 7301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] mkdir("./369", 0777 [pid 5071] getdents64(3, [pid 7304] <... chdir resumed>) = 0 [pid 7302] <... mkdir resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7302] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] umount2("./368/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7304] <... prctl resumed>) = 0 [pid 7302] <... mount resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7304] setpgid(0, 0 [pid 7302] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7301] <... mmap resumed>) = 0x7f943d000000 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] newfstatat(AT_FDCWD, "./368/binderfs", [pid 7304] <... setpgid resumed>) = 0 [pid 7302] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7302] chdir("./file1" [pid 5071] unlink("./368/binderfs" [pid 7304] <... openat resumed>) = 3 [pid 7302] <... chdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 7304] write(3, "1000", 4 [pid 7302] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7304] <... write resumed>) = 4 [pid 7302] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7304] close(3 [pid 7302] truncate("./file1", 0 [pid 7304] <... close resumed>) = 0 [pid 7304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7304] memfd_create("syzkaller", 0) = 3 [pid 7303] <... write resumed>) = 524288 [pid 7302] <... truncate resumed>) = 0 [pid 7301] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... umount2 resumed>) = 0 [pid 7302] memfd_create("syzkaller", 0 [pid 7304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7302] <... memfd_create resumed>) = 4 [pid 5071] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7304] <... mmap resumed>) = 0x7f943d000000 [pid 7302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7303] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7303] <... munmap resumed>) = 0 [pid 7302] <... mmap resumed>) = 0x7f943d000000 [pid 5071] newfstatat(AT_FDCWD, "./368/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7303] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] openat(AT_FDCWD, "./368/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7303] <... openat resumed>) = 4 [pid 5071] getdents64(4, [pid 7303] ioctl(4, LOOP_SET_FD, 3 [pid 7301] <... write resumed>) = 524288 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7302] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7301] munmap(0x7f943d000000, 138412032 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7301] <... munmap resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./368/file1") = 0 [pid 5071] getdents64(3, [pid 7304] <... write resumed>) = 524288 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./368") = 0 [pid 7302] <... write resumed>) = 524288 [pid 7301] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] mkdir("./369", 0777) = 0 [pid 7303] <... ioctl resumed>) = 0 [pid 7303] close(3) = 0 [pid 7301] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(3 [pid 7303] close(4 [pid 5072] <... close resumed>) = 0 [pid 7303] <... close resumed>) = 0 [pid 7302] munmap(0x7f943d000000, 138412032 [pid 7301] close(4 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7304] munmap(0x7f943d000000, 138412032 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7302] <... munmap resumed>) = 0 [pid 7304] <... munmap resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7302] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7305 [pid 7304] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7302] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 7305 attached [pid 7304] <... openat resumed>) = 4 [ 272.419315][ T7303] loop2: detected capacity change from 0 to 1024 [pid 7302] close(4 [pid 7305] set_robust_list(0x555583d53660, 24 [pid 7304] ioctl(4, LOOP_SET_FD, 3 [pid 7305] <... set_robust_list resumed>) = 0 [pid 7305] chdir("./369" [pid 7303] mkdir("./file1", 0777 [pid 7305] <... chdir resumed>) = 0 [pid 7305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7305] setpgid(0, 0) = 0 [pid 7302] <... close resumed>) = 0 [pid 7305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7304] <... ioctl resumed>) = 0 [pid 7303] <... mkdir resumed>) = 0 [pid 7301] <... close resumed>) = 0 [pid 7305] <... openat resumed>) = 3 [pid 7304] close(3 [pid 7302] exit_group(0 [pid 7305] write(3, "1000", 4) = 4 [pid 7305] close(3) = 0 [pid 7305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7305] memfd_create("syzkaller", 0) = 3 [pid 7304] <... close resumed>) = 0 [pid 7303] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7302] <... exit_group resumed>) = ? [pid 7301] exit_group(0 [pid 5071] <... ioctl resumed>) = 0 [pid 7305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7304] close(4 [pid 7302] +++ exited with 0 +++ [pid 7301] <... exit_group resumed>) = ? [pid 7304] <... close resumed>) = 0 [pid 7305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7304] mkdir("./file1", 0777 [pid 7303] <... mount resumed>) = 0 [pid 7301] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7301, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7302, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7303] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 272.462634][ T7304] loop5: detected capacity change from 0 to 1024 [pid 5074] umount2("./368", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7304] <... mkdir resumed>) = 0 [pid 7305] <... write resumed>) = 524288 [pid 7303] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7304] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] close(3 [pid 5074] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 7303] chdir("./file1" [pid 5075] umount2("./367", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7303] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 7303] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7305] munmap(0x7f943d000000, 138412032 [pid 7303] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... openat resumed>) = 3 [pid 7305] <... munmap resumed>) = 0 [pid 7303] truncate("./file1", 0 [pid 5075] newfstatat(3, "", [pid 5074] umount2("./368/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./368/binderfs", ./strace-static-x86_64: Process 7306 attached [pid 7305] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7304] <... mount resumed>) = 0 [pid 7303] <... truncate resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./368/binderfs" [pid 7303] memfd_create("syzkaller", 0 [pid 5075] umount2("./367/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7306] set_robust_list(0x555583d53660, 24 [pid 7305] <... openat resumed>) = 4 [pid 7304] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7303] <... memfd_create resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./367/binderfs", [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7306 [pid 7303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7303] <... mmap resumed>) = 0x7f943d000000 [pid 5075] unlink("./367/binderfs" [pid 7306] <... set_robust_list resumed>) = 0 [pid 7305] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... unlink resumed>) = 0 [pid 7306] chdir("./369" [pid 7304] <... openat resumed>) = 3 [pid 7303] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7304] chdir("./file1" [pid 7306] <... chdir resumed>) = 0 [pid 7306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7304] <... chdir resumed>) = 0 [pid 7306] <... prctl resumed>) = 0 [pid 7306] setpgid(0, 0) = 0 [pid 7304] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7304] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7306] <... openat resumed>) = 3 [pid 7304] truncate("./file1", 0 [pid 7306] write(3, "1000", 4) = 4 [pid 7306] close(3) = 0 [pid 7306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7304] <... truncate resumed>) = 0 [pid 7306] memfd_create("syzkaller", 0) = 3 [pid 7304] memfd_create("syzkaller", 0 [pid 7306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7304] <... memfd_create resumed>) = 4 [pid 7306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7305] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7305] close(3) = 0 [pid 7304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7305] close(4 [pid 7304] <... mmap resumed>) = 0x7f943d000000 [pid 7305] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7305] mkdir("./file1", 0777 [pid 7306] <... write resumed>) = 524288 [pid 7305] <... mkdir resumed>) = 0 [pid 7303] <... write resumed>) = 524288 [pid 5075] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7304] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./368/file1", [pid 7303] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7305] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7303] <... munmap resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./367/file1", [pid 5074] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7303] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./368/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7303] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "./367/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 7303] close(4 [pid 5075] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 7305] <... mount resumed>) = 0 [pid 7306] munmap(0x7f943d000000, 138412032 [pid 7304] <... write resumed>) = 524288 [pid 7303] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [ 272.562260][ T7305] loop1: detected capacity change from 0 to 1024 [pid 7305] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7306] <... munmap resumed>) = 0 [pid 7305] chdir("./file1" [pid 7304] munmap(0x7f943d000000, 138412032 [pid 5074] getdents64(4, [pid 7305] <... chdir resumed>) = 0 [pid 7305] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7305] truncate("./file1", 0 [pid 5074] close(4 [pid 7306] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7304] <... munmap resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 7306] <... openat resumed>) = 4 [pid 7304] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7303] exit_group(0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./368/file1" [pid 7306] ioctl(4, LOOP_SET_FD, 3 [pid 7304] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7303] <... exit_group resumed>) = ? [pid 5075] close(4 [pid 5074] <... rmdir resumed>) = 0 [pid 7305] <... truncate resumed>) = 0 [pid 7305] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./367/file1" [pid 5074] getdents64(3, [pid 7305] <... memfd_create resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7304] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 7305] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7304] <... close resumed>) = 0 [pid 7303] +++ exited with 0 +++ [pid 5075] getdents64(3, [pid 5074] close(3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7303, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] umount2("./369", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./368" [pid 5073] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7306] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./367" [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./369/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7306] close(3 [pid 5074] mkdir("./369", 0777 [pid 5073] newfstatat(AT_FDCWD, "./369/binderfs", [pid 5074] <... mkdir resumed>) = 0 [pid 7306] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7306] close(4 [pid 5073] unlink("./369/binderfs" [pid 5075] mkdir("./368", 0777 [pid 7306] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... unlink resumed>) = 0 [pid 7306] mkdir("./file1", 0777 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7306] <... mkdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7304] exit_group(0 [pid 7306] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7305] <... write resumed>) = 524288 [pid 7304] <... exit_group resumed>) = ? [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... umount2 resumed>) = 0 [pid 7304] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7304, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./369/file1", [pid 5076] <... restart_syscall resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5076] umount2("./364", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] openat(AT_FDCWD, "./364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7305] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] openat(AT_FDCWD, "./369/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 7305] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(3, [pid 5073] getdents64(4, [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./364/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 7305] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./364/binderfs", [pid 7305] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 272.631909][ T7306] loop0: detected capacity change from 0 to 1024 [pid 5076] unlink("./364/binderfs" [pid 7306] <... mount resumed>) = 0 [pid 7305] close(4 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] rmdir("./369/file1") = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 7305] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7306] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = 0 [pid 5073] rmdir("./369" [pid 7306] <... openat resumed>) = 3 [pid 7305] exit_group(0 [pid 5076] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 7306] chdir("./file1") = 0 [pid 7305] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./370", 0777 [pid 7306] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./364/file1", [pid 7306] truncate("./file1", 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7306] <... truncate resumed>) = 0 [pid 5076] umount2("./364/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7306] memfd_create("syzkaller", 0 [pid 7305] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7306] <... memfd_create resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./364/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7305, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] <... ioctl resumed>) = 0 [pid 7306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 7306] <... mmap resumed>) = 0x7f943d000000 [pid 5072] umount2("./369", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./364/file1") = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 7306] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] rmdir("./364" [pid 5072] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5076] mkdir("./365", 0777 [pid 5074] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 5076] <... mkdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./369/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] close(3./strace-static-x86_64: Process 7307 attached [pid 7306] <... write resumed>) = 524288 [pid 5072] newfstatat(AT_FDCWD, "./369/binderfs", [pid 7307] set_robust_list(0x555583d53660, 24) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7307 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7306] munmap(0x7f943d000000, 138412032 [pid 7307] chdir("./369" [pid 7306] <... munmap resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] unlink("./369/binderfs" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7308 attached [pid 7307] <... chdir resumed>) = 0 [pid 7306] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... unlink resumed>) = 0 [pid 7308] set_robust_list(0x555583d53660, 24 [pid 7307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7308] <... set_robust_list resumed>) = 0 [pid 7307] <... prctl resumed>) = 0 [pid 7306] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7308 [pid 5072] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] chdir("./368" [pid 7307] setpgid(0, 0) = 0 [pid 7307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7308] <... chdir resumed>) = 0 [pid 7306] close(4 [pid 7308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7307] <... openat resumed>) = 3 [pid 7306] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7308] <... prctl resumed>) = 0 [pid 7308] setpgid(0, 0 [pid 7307] write(3, "1000", 4 [pid 7306] exit_group(0 [pid 7308] <... setpgid resumed>) = 0 [pid 7307] <... write resumed>) = 4 [pid 7308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7307] close(3) = 0 [pid 7306] <... exit_group resumed>) = ? [pid 7308] <... openat resumed>) = 3 [pid 7307] symlink("/dev/binderfs", "./binderfs" [pid 5072] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] write(3, "1000", 4 [pid 7307] <... symlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7308] <... write resumed>) = 4 [pid 7307] memfd_create("syzkaller", 0 [pid 7306] +++ exited with 0 +++ [pid 5073] <... ioctl resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./369/file1", [pid 7308] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7306, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7308] <... close resumed>) = 0 [pid 7307] <... memfd_create resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7308] symlink("/dev/binderfs", "./binderfs" [pid 7307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./369", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7308] <... symlink resumed>) = 0 [pid 7307] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./369/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 5071] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5071] newfstatat(3, "", [pid 7308] memfd_create("syzkaller", 0 [pid 7307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7308] <... memfd_create resumed>) = 3 [pid 5072] getdents64(4, [pid 5071] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] close(3 [pid 5072] close(4 [pid 5071] umount2("./369/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7309 attached [pid 7308] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7309 [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7309] set_robust_list(0x555583d53660, 24 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] rmdir("./369/file1" [pid 5071] newfstatat(AT_FDCWD, "./369/binderfs", [pid 7308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7309] <... set_robust_list resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7309] chdir("./370" [pid 5071] unlink("./369/binderfs" [pid 7309] <... chdir resumed>) = 0 [pid 5072] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 7309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7309] setpgid(0, 0 [pid 5072] close(3 [pid 7309] <... setpgid resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7310 [pid 5072] <... close resumed>) = 0 [pid 7309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] rmdir("./369"./strace-static-x86_64: Process 7310 attached [pid 7309] <... openat resumed>) = 3 [pid 7310] set_robust_list(0x555583d53660, 24 [pid 7309] write(3, "1000", 4 [pid 5072] <... rmdir resumed>) = 0 [pid 7310] <... set_robust_list resumed>) = 0 [pid 7309] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = 0 [pid 7309] close(3 [pid 5072] mkdir("./370", 0777 [pid 7309] <... close resumed>) = 0 [pid 7309] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7310] chdir("./365" [pid 5072] <... mkdir resumed>) = 0 [pid 7310] <... chdir resumed>) = 0 [pid 7309] memfd_create("syzkaller", 0 [pid 7310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7309] <... memfd_create resumed>) = 3 [pid 7307] <... write resumed>) = 524288 [pid 7310] <... prctl resumed>) = 0 [pid 7309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7310] setpgid(0, 0 [pid 7309] <... mmap resumed>) = 0x7f943d000000 [pid 7308] <... write resumed>) = 524288 [pid 7307] munmap(0x7f943d000000, 138412032 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7310] <... setpgid resumed>) = 0 [pid 7309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] newfstatat(AT_FDCWD, "./369/file1", [pid 7310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7310] <... openat resumed>) = 3 [pid 7308] munmap(0x7f943d000000, 138412032 [pid 7307] <... munmap resumed>) = 0 [pid 7310] write(3, "1000", 4) = 4 [pid 5071] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7310] close(3 [pid 7308] <... munmap resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7310] <... close resumed>) = 0 [pid 7310] symlink("/dev/binderfs", "./binderfs" [pid 7307] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] openat(AT_FDCWD, "./369/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7310] <... symlink resumed>) = 0 [pid 7308] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7307] <... openat resumed>) = 4 [pid 7310] memfd_create("syzkaller", 0 [pid 7309] <... write resumed>) = 524288 [pid 7308] <... openat resumed>) = 4 [pid 7307] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... openat resumed>) = 4 [pid 7310] <... memfd_create resumed>) = 3 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./369/file1" [pid 7310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7308] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... rmdir resumed>) = 0 [pid 7310] <... mmap resumed>) = 0x7f943d000000 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 7309] munmap(0x7f943d000000, 138412032 [pid 5071] rmdir("./369" [pid 7309] <... munmap resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./370", 0777 [pid 7310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7309] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7308] <... ioctl resumed>) = 0 [pid 7307] <... ioctl resumed>) = 0 [pid 7308] close(3 [pid 5072] <... ioctl resumed>) = 0 [pid 7308] <... close resumed>) = 0 [pid 7308] close(4 [pid 5071] <... mkdir resumed>) = 0 [pid 7309] <... openat resumed>) = 4 [pid 7307] close(3) = 0 [pid 7308] <... close resumed>) = 0 [pid 7307] close(4 [pid 7309] ioctl(4, LOOP_SET_FD, 3 [pid 7307] <... close resumed>) = 0 [pid 7310] <... write resumed>) = 524288 [pid 7308] mkdir("./file1", 0777 [pid 7307] mkdir("./file1", 0777 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7307] <... mkdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5072] close(3 [ 272.871509][ T7307] loop3: detected capacity change from 0 to 1024 [ 272.880027][ T7308] loop4: detected capacity change from 0 to 1024 [ 272.908010][ T7309] loop2: detected capacity change from 0 to 1024 [pid 7307] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5072] <... close resumed>) = 0 [pid 7308] <... mkdir resumed>) = 0 [pid 7310] munmap(0x7f943d000000, 138412032 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7310] <... munmap resumed>) = 0 [pid 7308] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7309] <... ioctl resumed>) = 0 [pid 7310] <... openat resumed>) = 4 [pid 7309] close(3) = 0 [pid 7310] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7311 [pid 7309] close(4./strace-static-x86_64: Process 7311 attached ) = 0 [pid 7307] <... mount resumed>) = 0 [pid 7311] set_robust_list(0x555583d53660, 24 [pid 7309] mkdir("./file1", 0777 [pid 7311] <... set_robust_list resumed>) = 0 [pid 7307] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7311] chdir("./370" [pid 7309] <... mkdir resumed>) = 0 [pid 7308] <... mount resumed>) = 0 [pid 7307] <... openat resumed>) = 3 [pid 7311] <... chdir resumed>) = 0 [pid 7310] <... ioctl resumed>) = 0 [pid 7309] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7308] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7307] chdir("./file1" [pid 7311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7310] close(3 [pid 7308] <... openat resumed>) = 3 [pid 7307] <... chdir resumed>) = 0 [pid 7311] <... prctl resumed>) = 0 [pid 7310] <... close resumed>) = 0 [pid 7308] chdir("./file1" [pid 7307] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7311] setpgid(0, 0 [pid 7310] close(4 [pid 7308] <... chdir resumed>) = 0 [pid 7307] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7311] <... setpgid resumed>) = 0 [pid 7307] truncate("./file1", 0) = 0 [pid 7311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7308] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7307] memfd_create("syzkaller", 0 [pid 7308] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7307] <... memfd_create resumed>) = 4 [pid 7311] <... openat resumed>) = 3 [pid 7308] truncate("./file1", 0 [pid 7307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7311] write(3, "1000", 4 [pid 7310] <... close resumed>) = 0 [pid 7309] <... mount resumed>) = 0 [pid 7308] <... truncate resumed>) = 0 [pid 7311] <... write resumed>) = 4 [pid 7311] close(3 [pid 7310] mkdir("./file1", 0777 [pid 7309] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7308] memfd_create("syzkaller", 0 [pid 7311] <... close resumed>) = 0 [pid 7310] <... mkdir resumed>) = 0 [pid 7309] <... openat resumed>) = 3 [pid 7308] <... memfd_create resumed>) = 4 [pid 7307] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... ioctl resumed>) = 0 [pid 5071] close(3) = 0 [pid 7311] symlink("/dev/binderfs", "./binderfs" [pid 7309] chdir("./file1" [pid 7310] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7309] <... chdir resumed>) = 0 [pid 7308] <... mmap resumed>) = 0x7f943d000000 [pid 7311] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7309] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7308] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7309] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7309] truncate("./file1", 0 [ 272.932411][ T7310] loop5: detected capacity change from 0 to 1024 [pid 7311] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7312 attached ) = 3 [pid 7310] <... mount resumed>) = 0 [pid 7309] <... truncate resumed>) = 0 [pid 7307] <... write resumed>) = 524288 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7312 [pid 7311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7310] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7309] memfd_create("syzkaller", 0 [pid 7312] set_robust_list(0x555583d53660, 24 [pid 7311] <... mmap resumed>) = 0x7f943d000000 [pid 7310] <... openat resumed>) = 3 [pid 7309] <... memfd_create resumed>) = 4 [pid 7312] <... set_robust_list resumed>) = 0 [pid 7312] chdir("./370" [pid 7310] chdir("./file1" [pid 7309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7307] munmap(0x7f943d000000, 138412032 [pid 7312] <... chdir resumed>) = 0 [pid 7311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7310] <... chdir resumed>) = 0 [pid 7309] <... mmap resumed>) = 0x7f943d000000 [pid 7308] <... write resumed>) = 524288 [pid 7307] <... munmap resumed>) = 0 [pid 7312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7312] setpgid(0, 0) = 0 [pid 7312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7309] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7308] munmap(0x7f943d000000, 138412032 [pid 7307] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7310] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7310] truncate("./file1", 0 [pid 7308] <... munmap resumed>) = 0 [pid 7307] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7307] close(4 [pid 7310] <... truncate resumed>) = 0 [pid 7308] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7307] <... close resumed>) = 0 [pid 7312] <... openat resumed>) = 3 [pid 7312] write(3, "1000", 4) = 4 [pid 7312] close(3) = 0 [pid 7312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7312] memfd_create("syzkaller", 0) = 3 [pid 7312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7310] memfd_create("syzkaller", 0 [pid 7308] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7312] <... mmap resumed>) = 0x7f943d000000 [pid 7310] <... memfd_create resumed>) = 4 [pid 7307] exit_group(0 [pid 7311] <... write resumed>) = 524288 [pid 7310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7308] close(4 [pid 7310] <... mmap resumed>) = 0x7f943d000000 [pid 7307] <... exit_group resumed>) = ? [pid 7307] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7307, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7310] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7309] <... write resumed>) = 524288 [pid 5074] umount2("./369", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7311] munmap(0x7f943d000000, 138412032 [pid 7308] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7312] <... write resumed>) = 524288 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7308] exit_group(0 [pid 7311] <... munmap resumed>) = 0 [pid 7309] munmap(0x7f943d000000, 138412032 [pid 7308] <... exit_group resumed>) = ? [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7309] <... munmap resumed>) = 0 [pid 5074] umount2("./369/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./369/binderfs", [pid 7309] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7308] +++ exited with 0 +++ [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7309] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7308, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7309] close(4 [pid 5074] unlink("./369/binderfs" [pid 7312] munmap(0x7f943d000000, 138412032 [pid 5074] <... unlink resumed>) = 0 [pid 7311] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./368", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7311] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7311] ioctl(4, LOOP_SET_FD, 3 [pid 5075] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7312] <... munmap resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 7312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7312] <... openat resumed>) = 4 [pid 5075] getdents64(3, [pid 7312] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7310] <... write resumed>) = 524288 [pid 7309] <... close resumed>) = 0 [pid 7310] munmap(0x7f943d000000, 138412032) = 0 [pid 7309] exit_group(0 [pid 5075] umount2("./368/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7309] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./368/binderfs", [pid 7310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7310] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7310] close(4 [pid 5075] unlink("./368/binderfs") = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7309] +++ exited with 0 +++ [pid 5075] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7311] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7309, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5074] newfstatat(AT_FDCWD, "./369/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./370", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7311] close(3 [pid 5074] openat(AT_FDCWD, "./369/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7312] <... ioctl resumed>) = 0 [pid 7311] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7312] close(3 [pid 7311] close(4 [pid 7310] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] <... openat resumed>) = 3 [pid 7312] <... close resumed>) = 0 [pid 7311] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(3, "", [pid 7312] close(4 [pid 7311] mkdir("./file1", 0777 [pid 7310] exit_group(0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7312] <... close resumed>) = 0 [pid 7312] mkdir("./file1", 0777 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7312] <... mkdir resumed>) = 0 [pid 5074] getdents64(4, [pid 7310] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [ 273.075869][ T7311] loop1: detected capacity change from 0 to 1024 [ 273.082713][ T7312] loop0: detected capacity change from 0 to 1024 [pid 5073] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7312] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7311] <... mkdir resumed>) = 0 [pid 5074] rmdir("./369/file1" [pid 5073] umount2("./370/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7311] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... rmdir resumed>) = 0 [pid 7310] +++ exited with 0 +++ [pid 5073] newfstatat(AT_FDCWD, "./370/binderfs", [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7310, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./368/file1", [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] unlink("./370/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5076] umount2("./365", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./368/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5074] rmdir("./369" [pid 5076] newfstatat(3, "", [pid 5075] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... rmdir resumed>) = 0 [pid 7312] <... mount resumed>) = 0 [pid 7311] <... mount resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7312] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] getdents64(4, [pid 7312] <... openat resumed>) = 3 [pid 5076] umount2("./365/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7312] chdir("./file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5074] mkdir("./370", 0777 [pid 7311] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7312] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./365/binderfs", [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7311] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(4 [pid 5074] <... mkdir resumed>) = 0 [pid 7312] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7311] chdir("./file1" [pid 5076] unlink("./365/binderfs" [pid 5075] <... close resumed>) = 0 [pid 7312] truncate("./file1", 0 [pid 5075] rmdir("./368/file1" [pid 7311] <... chdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7311] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7312] <... truncate resumed>) = 0 [pid 7311] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = 0 [pid 7312] memfd_create("syzkaller", 0) = 4 [pid 7312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./370/file1", [pid 5075] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7312] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] rmdir("./368" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./370/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7311] truncate("./file1", 0 [pid 5076] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] mkdir("./369", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./365/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] umount2("./365/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7311] <... truncate resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7311] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./365/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 4 [pid 7311] <... memfd_create resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5076] getdents64(4, [pid 7311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 7311] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7312] <... write resumed>) = 524288 [pid 5076] close(4 [pid 7312] munmap(0x7f943d000000, 138412032 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./365/file1" [pid 5073] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./370/file1" [pid 5076] close(3) = 0 [pid 5076] rmdir("./365") = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7312] <... munmap resumed>) = 0 [pid 5076] mkdir("./366", 0777) = 0 [pid 5073] getdents64(3, [pid 7312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7312] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7312] close(4 [pid 5073] close(3) = 0 [pid 5073] rmdir("./370") = 0 [pid 5073] mkdir("./371", 0777 [pid 7312] <... close resumed>) = 0 [pid 7311] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 7312] exit_group(0 [pid 7311] <... write resumed>) = 524288 [pid 7312] <... exit_group resumed>) = ? [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] <... ioctl resumed>) = 0 [pid 7312] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7312, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] umount2("./370", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] umount2("./370/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./370/binderfs", [pid 7311] munmap(0x7f943d000000, 138412032 [pid 5074] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./370/binderfs") = 0 [pid 5071] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7311] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 5074] <... close resumed>) = 0 [pid 7311] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7311] close(4) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... ioctl resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7313 ./strace-static-x86_64: Process 7313 attached [pid 5071] <... umount2 resumed>) = 0 [pid 5071] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7315 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7315 [pid 5071] newfstatat(AT_FDCWD, "./370/file1", [pid 7315] set_robust_list(0x555583d53660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7315] <... set_robust_list resumed>) = 0 [pid 5071] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7315] chdir("./369" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./370/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7315] <... chdir resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 7315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] newfstatat(4, "", [pid 7315] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7315] setpgid(0, 0 [pid 7313] set_robust_list(0x555583d53660, 24 [pid 5071] getdents64(4, [pid 7315] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(4, [pid 7315] <... openat resumed>) = 3 [pid 7313] <... set_robust_list resumed>) = 0 [pid 5073] close(3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7315] write(3, "1000", 4 [pid 5073] <... close resumed>) = 0 [pid 5071] close(4 [pid 7315] <... write resumed>) = 4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... close resumed>) = 0 [pid 7315] close(3 [pid 7313] chdir("./370" [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7314 [pid 5071] rmdir("./370/file1" [pid 7311] exit_group(0 [pid 7313] <... chdir resumed>) = 0 [pid 7315] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7315] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 7315] <... symlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7315] memfd_create("syzkaller", 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./370") = 0 [pid 7315] <... memfd_create resumed>) = 3 [pid 7315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] mkdir("./371", 0777./strace-static-x86_64: Process 7316 attached [pid 7315] <... mmap resumed>) = 0x7f943d000000 [pid 7311] <... exit_group resumed>) = ? [pid 5071] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7314 attached [pid 7316] set_robust_list(0x555583d53660, 24 [pid 7315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7316] <... set_robust_list resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7316 [pid 7314] set_robust_list(0x555583d53660, 24 [pid 7313] <... prctl resumed>) = 0 [pid 7316] chdir("./371" [pid 7314] <... set_robust_list resumed>) = 0 [pid 7313] setpgid(0, 0 [pid 7316] <... chdir resumed>) = 0 [pid 7314] chdir("./366" [pid 7313] <... setpgid resumed>) = 0 [pid 7316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7314] <... chdir resumed>) = 0 [pid 7313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7311] +++ exited with 0 +++ [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7316] <... prctl resumed>) = 0 [pid 7314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7313] <... openat resumed>) = 3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7311, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] <... openat resumed>) = 3 [pid 7316] setpgid(0, 0 [pid 7314] <... prctl resumed>) = 0 [pid 7313] write(3, "1000", 4 [pid 7316] <... setpgid resumed>) = 0 [pid 7314] setpgid(0, 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7313] <... write resumed>) = 4 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7313] close(3 [pid 7314] <... setpgid resumed>) = 0 [pid 7316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7313] <... close resumed>) = 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7316] <... openat resumed>) = 3 [pid 7313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5072] umount2("./370", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7316] write(3, "1000", 4 [pid 7314] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7316] <... write resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7316] close(3 [pid 7314] write(3, "1000", 4 [pid 7313] memfd_create("syzkaller", 0 [pid 5072] <... openat resumed>) = 3 [pid 7316] <... close resumed>) = 0 [pid 7314] <... write resumed>) = 4 [pid 7316] symlink("/dev/binderfs", "./binderfs" [pid 7314] close(3 [pid 7313] <... memfd_create resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 7316] <... symlink resumed>) = 0 [pid 7313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7316] memfd_create("syzkaller", 0 [pid 7314] <... close resumed>) = 0 [pid 7313] <... mmap resumed>) = 0x7f943d000000 [pid 5072] getdents64(3, [pid 7316] <... memfd_create resumed>) = 3 [pid 7314] symlink("/dev/binderfs", "./binderfs" [pid 7315] <... write resumed>) = 524288 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7314] <... symlink resumed>) = 0 [pid 5072] umount2("./370/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7316] <... mmap resumed>) = 0x7f943d000000 [pid 5072] newfstatat(AT_FDCWD, "./370/binderfs", [pid 7316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7314] memfd_create("syzkaller", 0 [pid 7315] munmap(0x7f943d000000, 138412032 [pid 7313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7314] <... memfd_create resumed>) = 3 [pid 7315] <... munmap resumed>) = 0 [pid 5072] unlink("./370/binderfs") = 0 [pid 5072] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7315] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7315] ioctl(4, LOOP_SET_FD, 3 [pid 7314] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... umount2 resumed>) = 0 [pid 7314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... ioctl resumed>) = 0 [pid 7313] <... write resumed>) = 524288 [pid 7313] munmap(0x7f943d000000, 138412032 [pid 5072] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7316] <... write resumed>) = 524288 [pid 7313] <... munmap resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./370/file1", [pid 7313] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7313] <... openat resumed>) = 4 [pid 7313] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./370/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", [pid 7316] munmap(0x7f943d000000, 138412032 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7316] <... munmap resumed>) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7316] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] getdents64(4, [pid 7316] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7316] ioctl(4, LOOP_SET_FD, 3 [pid 5072] close(4 [pid 5071] close(3 [pid 7314] <... write resumed>) = 524288 [pid 5072] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7316] <... ioctl resumed>) = 0 [pid 7315] <... ioctl resumed>) = 0 [pid 7313] <... ioctl resumed>) = 0 [pid 7315] close(3 [pid 5072] rmdir("./370/file1" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7316] close(3 [pid 7315] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7316] <... close resumed>) = 0 [pid 7315] close(4 [pid 7316] close(4 [pid 7315] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 7316] <... close resumed>) = 0 [pid 7315] mkdir("./file1", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7317 ./strace-static-x86_64: Process 7317 attached [pid 7316] mkdir("./file1", 0777 [pid 7314] munmap(0x7f943d000000, 138412032 [pid 7315] <... mkdir resumed>) = 0 [pid 7313] close(3 [pid 5072] close(3 [pid 7317] set_robust_list(0x555583d53660, 24 [pid 7316] <... mkdir resumed>) = 0 [pid 7314] <... munmap resumed>) = 0 [pid 7315] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7313] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7317] <... set_robust_list resumed>) = 0 [pid 7316] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7314] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7313] close(4 [pid 7317] chdir("./371" [pid 7314] <... openat resumed>) = 4 [pid 7313] <... close resumed>) = 0 [ 273.378379][ T7315] loop4: detected capacity change from 0 to 1024 [ 273.402106][ T7313] loop3: detected capacity change from 0 to 1024 [ 273.407379][ T7316] loop2: detected capacity change from 0 to 1024 [pid 5072] rmdir("./370" [pid 7317] <... chdir resumed>) = 0 [pid 7314] ioctl(4, LOOP_SET_FD, 3 [pid 7313] mkdir("./file1", 0777 [pid 5072] <... rmdir resumed>) = 0 [pid 7317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7317] setpgid(0, 0 [pid 7315] <... mount resumed>) = 0 [pid 7313] <... mkdir resumed>) = 0 [pid 7315] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7317] <... setpgid resumed>) = 0 [pid 7315] <... openat resumed>) = 3 [pid 5072] mkdir("./371", 0777 [pid 7315] chdir("./file1") = 0 [pid 7313] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... mkdir resumed>) = 0 [pid 7315] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7315] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... openat resumed>) = 3 [pid 7317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7315] truncate("./file1", 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7317] <... openat resumed>) = 3 [pid 7316] <... mount resumed>) = 0 [pid 7315] <... truncate resumed>) = 0 [pid 7317] write(3, "1000", 4 [pid 7315] memfd_create("syzkaller", 0 [pid 7317] <... write resumed>) = 4 [pid 7315] <... memfd_create resumed>) = 4 [pid 7317] close(3 [pid 7316] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7317] <... close resumed>) = 0 [pid 7316] <... openat resumed>) = 3 [pid 7314] <... ioctl resumed>) = 0 [pid 7315] <... mmap resumed>) = 0x7f943d000000 [pid 7313] <... mount resumed>) = 0 [pid 7317] symlink("/dev/binderfs", "./binderfs" [pid 7316] chdir("./file1" [pid 7314] close(3 [pid 7313] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7317] <... symlink resumed>) = 0 [pid 7316] <... chdir resumed>) = 0 [pid 7314] <... close resumed>) = 0 [pid 7315] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7313] <... openat resumed>) = 3 [ 273.459439][ T7314] loop5: detected capacity change from 0 to 1024 [pid 7317] memfd_create("syzkaller", 0 [pid 7316] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7314] close(4 [pid 7313] chdir("./file1" [pid 7317] <... memfd_create resumed>) = 3 [pid 7316] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7314] <... close resumed>) = 0 [pid 7316] truncate("./file1", 0 [pid 7314] mkdir("./file1", 0777 [pid 7317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7314] <... mkdir resumed>) = 0 [pid 7314] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7313] <... chdir resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7317] <... mmap resumed>) = 0x7f943d000000 [pid 7313] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] close(3 [pid 7313] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7313] truncate("./file1", 0 [pid 5072] <... close resumed>) = 0 [pid 7316] <... truncate resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7316] memfd_create("syzkaller", 0) = 4 [pid 7316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7316] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7313] <... truncate resumed>) = 0 [pid 7313] memfd_create("syzkaller", 0) = 4 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7318 [pid 7317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7314] <... mount resumed>) = 0 [pid 7313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 7318 attached [pid 7314] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7318] set_robust_list(0x555583d53660, 24 [pid 7314] <... openat resumed>) = 3 [pid 7318] <... set_robust_list resumed>) = 0 [pid 7314] chdir("./file1" [pid 7318] chdir("./371" [pid 7314] <... chdir resumed>) = 0 [pid 7318] <... chdir resumed>) = 0 [pid 7314] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7314] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7318] <... prctl resumed>) = 0 [pid 7314] truncate("./file1", 0 [pid 7317] <... write resumed>) = 524288 [pid 7315] <... write resumed>) = 524288 [pid 7318] setpgid(0, 0 [pid 7315] munmap(0x7f943d000000, 138412032 [pid 7313] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7318] <... setpgid resumed>) = 0 [pid 7315] <... munmap resumed>) = 0 [pid 7318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7317] munmap(0x7f943d000000, 138412032 [pid 7315] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7314] <... truncate resumed>) = 0 [pid 7315] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7318] write(3, "1000", 4 [pid 7317] <... munmap resumed>) = 0 [pid 7314] memfd_create("syzkaller", 0 [pid 7315] close(4 [pid 7318] <... write resumed>) = 4 [pid 7314] <... memfd_create resumed>) = 4 [pid 7318] close(3 [pid 7314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7318] <... close resumed>) = 0 [pid 7314] <... mmap resumed>) = 0x7f943d000000 [pid 7318] symlink("/dev/binderfs", "./binderfs" [pid 7315] <... close resumed>) = 0 [pid 7318] <... symlink resumed>) = 0 [pid 7318] memfd_create("syzkaller", 0) = 3 [pid 7317] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7316] <... write resumed>) = 524288 [pid 7318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7317] <... openat resumed>) = 4 [pid 7316] munmap(0x7f943d000000, 138412032 [pid 7318] <... mmap resumed>) = 0x7f943d000000 [pid 7317] ioctl(4, LOOP_SET_FD, 3 [pid 7316] <... munmap resumed>) = 0 [pid 7314] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7316] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7313] <... write resumed>) = 524288 [pid 7316] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7316] close(4) = 0 [pid 7315] exit_group(0 [pid 7317] <... ioctl resumed>) = 0 [pid 7315] <... exit_group resumed>) = ? [pid 7317] close(3) = 0 [pid 7316] exit_group(0 [pid 7314] <... write resumed>) = 524288 [pid 7315] +++ exited with 0 +++ [pid 7313] munmap(0x7f943d000000, 138412032 [pid 7317] close(4 [pid 7316] <... exit_group resumed>) = ? [pid 7314] munmap(0x7f943d000000, 138412032 [pid 7313] <... munmap resumed>) = 0 [pid 7318] <... write resumed>) = 524288 [pid 7317] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7315, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7318] munmap(0x7f943d000000, 138412032 [pid 7317] mkdir("./file1", 0777 [pid 7313] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./369", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7314] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7317] <... mkdir resumed>) = 0 [pid 7313] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... openat resumed>) = 3 [pid 7318] <... munmap resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 7313] close(4 [pid 7318] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7317] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7318] <... openat resumed>) = 4 [pid 7318] ioctl(4, LOOP_SET_FD, 3 [pid 7314] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7318] <... ioctl resumed>) = 0 [pid 7317] <... mount resumed>) = 0 [pid 7316] +++ exited with 0 +++ [pid 7314] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7313] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 7314] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./369/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./369/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./369/binderfs") = 0 [pid 7318] close(3) = 0 [pid 7318] close(4) = 0 [pid 7314] <... close resumed>) = 0 [pid 5075] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7318] mkdir("./file1", 0777 [pid 7317] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7316, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7317] <... openat resumed>) = 3 [pid 5073] umount2("./371", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7317] chdir("./file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7317] <... chdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7317] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7318] <... mkdir resumed>) = 0 [pid 7317] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] newfstatat(3, "", [pid 7317] truncate("./file1", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7318] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7313] exit_group(0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] getdents64(3, [pid 7313] <... exit_group resumed>) = ? [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./371/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7317] <... truncate resumed>) = 0 [pid 7314] exit_group(0 [pid 5075] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./371/binderfs", [pid 7317] memfd_create("syzkaller", 0 [pid 7314] <... exit_group resumed>) = ? [ 273.608885][ T7317] loop0: detected capacity change from 0 to 1024 [ 273.648265][ T7318] loop1: detected capacity change from 0 to 1024 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./369/file1", [pid 7318] <... mount resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7318] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7318] <... openat resumed>) = 3 [pid 7317] <... memfd_create resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7318] chdir("./file1" [pid 5075] openat(AT_FDCWD, "./369/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7318] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] unlink("./371/binderfs" [pid 7318] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7313] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", [pid 7318] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7317] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7318] truncate("./file1", 0 [pid 5075] getdents64(4, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7313, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./370", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7318] <... truncate resumed>) = 0 [pid 7314] +++ exited with 0 +++ [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7318] memfd_create("syzkaller", 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7314, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7318] <... memfd_create resumed>) = 4 [pid 5075] close(4 [pid 5074] <... openat resumed>) = 3 [pid 7318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 7318] <... mmap resumed>) = 0x7f943d000000 [pid 5076] umount2("./366", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7318] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7317] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(3, [pid 5076] openat(AT_FDCWD, "./366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./369/file1" [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./370/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./370/binderfs", [pid 5076] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] unlink("./370/binderfs" [pid 7318] <... write resumed>) = 524288 [pid 5076] umount2("./366/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 5073] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5076] newfstatat(AT_FDCWD, "./366/binderfs", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5076] unlink("./366/binderfs" [pid 5075] <... close resumed>) = 0 [pid 7317] <... write resumed>) = 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5075] rmdir("./369" [pid 7318] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7317] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./370", 0777 [pid 5073] newfstatat(AT_FDCWD, "./371/file1", [pid 7318] <... munmap resumed>) = 0 [pid 7317] <... munmap resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7318] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] openat(AT_FDCWD, "./371/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7318] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 4 [pid 7318] close(4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7318] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5074] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./370/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./370/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./370/file1") = 0 [pid 7317] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7318] exit_group(0 [pid 5074] close(3 [pid 5073] getdents64(4, [pid 7318] <... exit_group resumed>) = ? [pid 7317] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7318] +++ exited with 0 +++ [pid 7317] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./370" [pid 5073] getdents64(4, [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7318, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] newfstatat(AT_FDCWD, "./366/file1", [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] mkdir("./371", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(4 [pid 7317] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7317] exit_group(0 [pid 5076] umount2("./366/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5072] umount2("./371", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7317] <... exit_group resumed>) = ? [pid 5073] rmdir("./371/file1" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7317] +++ exited with 0 +++ [pid 5072] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7317, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] <... openat resumed>) = 3 [pid 5071] umount2("./371", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5072] newfstatat(3, "", [pid 5076] openat(AT_FDCWD, "./366/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] getdents64(3, [pid 5071] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 5076] newfstatat(4, "", [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... openat resumed>) = 3 [pid 5072] umount2("./371/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", [pid 5072] newfstatat(AT_FDCWD, "./371/binderfs", [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./371" [pid 5071] getdents64(3, [pid 5072] unlink("./371/binderfs" [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./371/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7319 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7319 attached [pid 5076] getdents64(4, [pid 5073] mkdir("./372", 0777 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] unlink("./371/binderfs" [pid 7319] set_robust_list(0x555583d53660, 24) = 0 [pid 7319] chdir("./370") = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7319] setpgid(0, 0) = 0 [pid 7319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 5076] close(4 [pid 7319] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7319] <... write resumed>) = 4 [pid 5076] rmdir("./366/file1" [pid 5073] <... openat resumed>) = 3 [pid 5072] newfstatat(AT_FDCWD, "./371/file1", [pid 5071] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7319] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7319] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 7319] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7319] <... symlink resumed>) = 0 [pid 5076] close(3 [pid 7319] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 7319] <... memfd_create resumed>) = 3 [pid 5076] rmdir("./366" [pid 7319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7319] <... mmap resumed>) = 0x7f943d000000 [pid 7319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] mkdir("./367", 0777 [pid 5072] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./371/file1", [pid 5076] <... mkdir resumed>) = 0 [pid 5074] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./371/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... openat resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./371/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] newfstatat(4, "", [pid 5071] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7320 attached [pid 5076] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(4, "", [pid 7320] set_robust_list(0x555583d53660, 24 [pid 5072] getdents64(4, [pid 7320] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7320] chdir("./371" [pid 7319] <... write resumed>) = 524288 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7320 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, [pid 7320] <... chdir resumed>) = 0 [pid 5072] getdents64(4, [pid 7320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7320] <... prctl resumed>) = 0 [pid 5072] close(4 [pid 7320] setpgid(0, 0 [pid 5072] <... close resumed>) = 0 [pid 5071] getdents64(4, [pid 7320] <... setpgid resumed>) = 0 [pid 5072] rmdir("./371/file1" [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7320] <... openat resumed>) = 3 [pid 5071] rmdir("./371/file1") = 0 [pid 5071] getdents64(3, [pid 7320] write(3, "1000", 4) = 4 [pid 7319] munmap(0x7f943d000000, 138412032 [pid 5073] close(3 [pid 5072] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7320] close(3 [pid 7319] <... munmap resumed>) = 0 [pid 7320] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7320] symlink("/dev/binderfs", "./binderfs" [pid 7319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5072] close(3 [pid 5071] <... close resumed>) = 0 [pid 7320] <... symlink resumed>) = 0 [pid 5071] rmdir("./371" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7319] <... openat resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5072] rmdir("./371") = 0 [pid 7319] ioctl(4, LOOP_SET_FD, 3 [pid 7320] memfd_create("syzkaller", 0) = 3 [pid 5072] mkdir("./372", 0777 [pid 7320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] mkdir("./372", 0777 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7321 ./strace-static-x86_64: Process 7321 attached [pid 7320] <... mmap resumed>) = 0x7f943d000000 [pid 7321] set_robust_list(0x555583d53660, 24) = 0 [pid 7320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7319] <... ioctl resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7321] chdir("./372" [pid 5076] <... ioctl resumed>) = 0 [pid 7321] <... chdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 7321] <... prctl resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7321] setpgid(0, 0) = 0 [pid 7321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7319] close(3) = 0 [pid 7319] close(4) = 0 [pid 7319] mkdir("./file1", 0777) = 0 [pid 7319] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7321] <... openat resumed>) = 3 [pid 5076] close(3) = 0 [pid 7321] write(3, "1000", 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7321] <... write resumed>) = 4 [pid 7320] <... write resumed>) = 524288 [pid 7320] munmap(0x7f943d000000, 138412032 [pid 7321] close(3) = 0 [pid 7321] symlink("/dev/binderfs", "./binderfs" [pid 7320] <... munmap resumed>) = 0 [pid 7321] <... symlink resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7322 ./strace-static-x86_64: Process 7322 attached [pid 7321] memfd_create("syzkaller", 0 [pid 7320] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7322] set_robust_list(0x555583d53660, 24 [pid 7321] <... memfd_create resumed>) = 3 [pid 7320] <... openat resumed>) = 4 [ 273.891159][ T7319] loop4: detected capacity change from 0 to 1024 [pid 7322] <... set_robust_list resumed>) = 0 [pid 7321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7320] ioctl(4, LOOP_SET_FD, 3 [pid 7319] <... mount resumed>) = 0 [pid 7322] chdir("./367" [pid 7321] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7322] <... chdir resumed>) = 0 [pid 7321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7320] <... ioctl resumed>) = 0 [pid 7319] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] close(3 [pid 7320] close(3 [pid 7319] <... openat resumed>) = 3 [pid 5071] close(3 [pid 7322] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7320] <... close resumed>) = 0 [pid 7319] chdir("./file1" [pid 7322] <... prctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7322] setpgid(0, 0 [pid 7320] close(4 [pid 7319] <... chdir resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7323 attached [pid 7322] <... setpgid resumed>) = 0 [pid 7320] <... close resumed>) = 0 [pid 7319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7323] set_robust_list(0x555583d53660, 24 [pid 7320] mkdir("./file1", 0777 [pid 7319] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7323 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7324 ./strace-static-x86_64: Process 7324 attached [pid 7323] <... set_robust_list resumed>) = 0 [pid 7322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7320] <... mkdir resumed>) = 0 [pid 7319] truncate("./file1", 0 [pid 7324] set_robust_list(0x555583d53660, 24 [pid 7323] chdir("./372" [pid 7322] <... openat resumed>) = 3 [pid 7320] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7319] <... truncate resumed>) = 0 [pid 7323] <... chdir resumed>) = 0 [pid 7320] <... mount resumed>) = 0 [pid 7319] memfd_create("syzkaller", 0 [pid 7324] <... set_robust_list resumed>) = 0 [pid 7323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7322] write(3, "1000", 4 [pid 7319] <... memfd_create resumed>) = 4 [ 273.947600][ T7320] loop3: detected capacity change from 0 to 1024 [pid 7324] chdir("./372" [pid 7323] <... prctl resumed>) = 0 [pid 7322] <... write resumed>) = 4 [pid 7320] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7324] <... chdir resumed>) = 0 [pid 7323] setpgid(0, 0 [pid 7322] close(3 [pid 7320] <... openat resumed>) = 3 [pid 7319] <... mmap resumed>) = 0x7f943d000000 [pid 7324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7323] <... setpgid resumed>) = 0 [pid 7322] <... close resumed>) = 0 [pid 7321] <... write resumed>) = 524288 [pid 7320] chdir("./file1" [pid 7319] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7324] <... prctl resumed>) = 0 [pid 7323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7322] symlink("/dev/binderfs", "./binderfs" [pid 7320] <... chdir resumed>) = 0 [pid 7322] <... symlink resumed>) = 0 [pid 7324] setpgid(0, 0 [pid 7323] <... openat resumed>) = 3 [pid 7320] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7324] <... setpgid resumed>) = 0 [pid 7323] write(3, "1000", 4 [pid 7322] memfd_create("syzkaller", 0 [pid 7320] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7323] <... write resumed>) = 4 [pid 7322] <... memfd_create resumed>) = 3 [pid 7321] munmap(0x7f943d000000, 138412032 [pid 7320] truncate("./file1", 0 [pid 7324] <... openat resumed>) = 3 [pid 7323] close(3 [pid 7322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7324] write(3, "1000", 4 [pid 7323] <... close resumed>) = 0 [pid 7322] <... mmap resumed>) = 0x7f943d000000 [pid 7321] <... munmap resumed>) = 0 [pid 7324] <... write resumed>) = 4 [pid 7323] symlink("/dev/binderfs", "./binderfs" [pid 7320] <... truncate resumed>) = 0 [pid 7323] <... symlink resumed>) = 0 [pid 7324] close(3 [pid 7323] memfd_create("syzkaller", 0 [pid 7322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7320] memfd_create("syzkaller", 0 [pid 7324] <... close resumed>) = 0 [pid 7324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7321] <... openat resumed>) = 4 [pid 7319] <... write resumed>) = 524288 [pid 7321] ioctl(4, LOOP_SET_FD, 3 [pid 7324] memfd_create("syzkaller", 0 [pid 7320] <... memfd_create resumed>) = 4 [pid 7320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7323] <... memfd_create resumed>) = 3 [pid 7320] <... mmap resumed>) = 0x7f943d000000 [pid 7323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7319] munmap(0x7f943d000000, 138412032 [pid 7324] <... memfd_create resumed>) = 3 [pid 7319] <... munmap resumed>) = 0 [pid 7323] <... mmap resumed>) = 0x7f943d000000 [pid 7324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7322] <... write resumed>) = 524288 [pid 7319] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7324] <... mmap resumed>) = 0x7f943d000000 [pid 7319] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7319] close(4 [pid 7324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7319] <... close resumed>) = 0 [pid 7320] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7321] <... ioctl resumed>) = 0 [pid 7322] munmap(0x7f943d000000, 138412032 [pid 7321] close(3 [pid 7324] <... write resumed>) = 524288 [pid 7323] <... write resumed>) = 524288 [pid 7322] <... munmap resumed>) = 0 [pid 7321] <... close resumed>) = 0 [pid 7321] close(4) = 0 [pid 7321] mkdir("./file1", 0777) = 0 [pid 7320] <... write resumed>) = 524288 [pid 7319] exit_group(0) = ? [pid 7322] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7324] munmap(0x7f943d000000, 138412032 [pid 7321] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7319] +++ exited with 0 +++ [pid 7322] <... openat resumed>) = 4 [pid 7320] munmap(0x7f943d000000, 138412032 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7319, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7324] <... munmap resumed>) = 0 [pid 7323] munmap(0x7f943d000000, 138412032 [pid 7321] <... mount resumed>) = 0 [pid 7320] <... munmap resumed>) = 0 [ 274.058531][ T7321] loop2: detected capacity change from 0 to 1024 [pid 7323] <... munmap resumed>) = 0 [pid 7320] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7322] ioctl(4, LOOP_SET_FD, 3 [pid 7324] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7321] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7320] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./370", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 7321] <... openat resumed>) = 3 [pid 7320] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7324] <... openat resumed>) = 4 [pid 7323] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7322] <... ioctl resumed>) = 0 [pid 7321] chdir("./file1" [pid 5075] getdents64(3, [pid 7324] ioctl(4, LOOP_SET_FD, 3 [pid 7321] <... chdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7324] <... ioctl resumed>) = 0 [pid 7323] <... openat resumed>) = 4 [pid 7322] close(3 [pid 7321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7320] <... close resumed>) = 0 [pid 5075] umount2("./370/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7321] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7321] truncate("./file1", 0 [pid 7320] exit_group(0) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./370/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./370/binderfs" [pid 7320] +++ exited with 0 +++ [pid 5075] <... unlink resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7320, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 7322] <... close resumed>) = 0 [pid 7321] <... truncate resumed>) = 0 [pid 5075] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7321] memfd_create("syzkaller", 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5074] umount2("./371", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 7322] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7323] ioctl(4, LOOP_SET_FD, 3 [pid 7322] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 7322] mkdir("./file1", 0777 [pid 7321] <... memfd_create resumed>) = 4 [pid 7322] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7322] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] umount2("./371/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./371/binderfs") = 0 [pid 5074] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7324] close(3) = 0 [pid 7324] close(4 [pid 7321] <... mmap resumed>) = 0x7f943d000000 [pid 7324] <... close resumed>) = 0 [pid 7324] mkdir("./file1", 0777) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7324] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7322] <... mount resumed>) = 0 [pid 7321] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./370/file1", [pid 7324] <... mount resumed>) = 0 [pid 7322] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7324] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7323] <... ioctl resumed>) = 0 [pid 7322] <... openat resumed>) = 3 [pid 5074] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7324] <... openat resumed>) = 3 [pid 7323] close(3 [pid 7322] chdir("./file1" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7324] chdir("./file1" [pid 7323] <... close resumed>) = 0 [pid 7322] <... chdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./371/file1", [pid 7324] <... chdir resumed>) = 0 [pid 7323] close(4 [pid 7322] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7324] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7323] <... close resumed>) = 0 [pid 7322] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7324] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7323] mkdir("./file1", 0777 [pid 7322] truncate("./file1", 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7323] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7324] truncate("./file1", 0 [pid 5075] openat(AT_FDCWD, "./370/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 274.120976][ T7322] loop5: detected capacity change from 0 to 1024 [ 274.135819][ T7324] loop0: detected capacity change from 0 to 1024 [ 274.153104][ T7323] loop1: detected capacity change from 0 to 1024 [pid 7323] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./371/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7324] <... truncate resumed>) = 0 [pid 7322] <... truncate resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... openat resumed>) = 4 [pid 7324] memfd_create("syzkaller", 0 [pid 7322] memfd_create("syzkaller", 0 [pid 5074] newfstatat(4, "", [pid 7324] <... memfd_create resumed>) = 4 [pid 7323] <... mount resumed>) = 0 [pid 7322] <... memfd_create resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7323] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7321] <... write resumed>) = 524288 [pid 5074] getdents64(4, [pid 7324] <... mmap resumed>) = 0x7f943d000000 [pid 7323] <... openat resumed>) = 3 [pid 7322] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 7324] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7321] munmap(0x7f943d000000, 138412032 [pid 7323] chdir("./file1" [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7323] <... chdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 7323] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] rmdir("./371/file1" [pid 7323] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7323] truncate("./file1", 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7323] <... truncate resumed>) = 0 [pid 7321] <... munmap resumed>) = 0 [pid 5075] close(4 [pid 5074] getdents64(3, [pid 7321] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7323] memfd_create("syzkaller", 0 [pid 7322] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7321] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7323] <... memfd_create resumed>) = 4 [pid 7322] <... write resumed>) = 524288 [pid 7321] close(4 [pid 5075] <... close resumed>) = 0 [pid 5074] close(3 [pid 7323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./370/file1" [pid 5074] <... close resumed>) = 0 [pid 7323] <... mmap resumed>) = 0x7f943d000000 [pid 5074] rmdir("./371" [pid 7323] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7321] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7324] <... write resumed>) = 524288 [pid 5074] mkdir("./372", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7324] munmap(0x7f943d000000, 138412032) = 0 [pid 7322] munmap(0x7f943d000000, 138412032 [pid 5075] getdents64(3, [pid 7322] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7324] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] close(3 [pid 7324] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7323] <... write resumed>) = 524288 [pid 7324] close(4 [pid 7321] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 7322] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7322] close(4 [pid 7321] <... exit_group resumed>) = ? [pid 5075] rmdir("./370" [pid 7321] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7321, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7324] <... close resumed>) = 0 [pid 5075] mkdir("./371", 0777 [pid 7322] <... close resumed>) = 0 [pid 7322] exit_group(0 [pid 7324] exit_group(0 [pid 7323] munmap(0x7f943d000000, 138412032 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] umount2("./372", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7323] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7322] <... exit_group resumed>) = ? [pid 5075] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7324] <... exit_group resumed>) = ? [pid 7323] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7322] +++ exited with 0 +++ [pid 5074] <... ioctl resumed>) = 0 [pid 7324] +++ exited with 0 +++ [pid 7323] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7322, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7324, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./367", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(3, "", [pid 5071] umount2("./372", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7323] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5071] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(3, "", [pid 5074] close(3 [pid 5071] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7323] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./372/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./372/binderfs", [pid 5076] getdents64(3, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(3, [pid 5073] unlink("./372/binderfs" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./367/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./367/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./367/binderfs") = 0 [pid 5076] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7325 [pid 5071] umount2("./372/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7325 attached [pid 5076] <... umount2 resumed>) = 0 [pid 5073] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7325] set_robust_list(0x555583d53660, 24) = 0 [pid 7323] exit_group(0 [pid 5071] newfstatat(AT_FDCWD, "./372/binderfs", [pid 7325] chdir("./372" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7325] <... chdir resumed>) = 0 [pid 7323] <... exit_group resumed>) = ? [pid 5071] unlink("./372/binderfs" [pid 7325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7323] +++ exited with 0 +++ [pid 7325] <... prctl resumed>) = 0 [pid 7325] setpgid(0, 0 [pid 5076] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7323, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... unlink resumed>) = 0 [pid 7325] <... setpgid resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] newfstatat(AT_FDCWD, "./367/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7325] <... openat resumed>) = 3 [pid 5076] umount2("./367/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7325] write(3, "1000", 4 [pid 5071] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7325] <... write resumed>) = 4 [pid 7325] close(3) = 0 [pid 5076] openat(AT_FDCWD, "./367/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./372", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7325] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 4 [pid 7325] <... symlink resumed>) = 0 [pid 5073] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7325] memfd_create("syzkaller", 0 [pid 5076] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./372/file1", [pid 5072] <... openat resumed>) = 3 [pid 7325] <... memfd_create resumed>) = 3 [pid 5076] getdents64(4, [pid 7325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = 0 [pid 7325] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(4, [pid 5073] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5076] close(4) = 0 [pid 5073] openat(AT_FDCWD, "./372/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] rmdir("./367/file1" [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] close(4 [pid 5072] umount2("./372/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./372/file1" [pid 5076] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 5073] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] rmdir("./367") = 0 [pid 5073] close(3 [pid 5072] newfstatat(AT_FDCWD, "./372/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./372/binderfs") = 0 [pid 5072] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./372" [pid 5076] mkdir("./368", 0777 [pid 5075] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] mkdir("./373", 0777 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./372/file1", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7326 attached [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7326] set_robust_list(0x555583d53660, 24 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7326] <... set_robust_list resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./372/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7326] chdir("./371") = 0 [pid 7325] <... write resumed>) = 524288 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7326 [pid 5071] <... openat resumed>) = 4 [pid 7326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7325] munmap(0x7f943d000000, 138412032 [pid 7326] <... prctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7326] setpgid(0, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7326] <... setpgid resumed>) = 0 [pid 5071] getdents64(4, [pid 7326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7325] <... munmap resumed>) = 0 [pid 5072] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 7326] <... openat resumed>) = 3 [pid 7325] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] newfstatat(AT_FDCWD, "./372/file1", [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7326] write(3, "1000", 4 [pid 7325] <... openat resumed>) = 4 [pid 5071] close(4 [pid 7326] <... write resumed>) = 4 [pid 7325] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 7326] close(3 [pid 5072] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./372/file1" [pid 7326] <... close resumed>) = 0 [pid 7326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./372/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 5072] <... openat resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(4, "", [pid 5071] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 7326] memfd_create("syzkaller", 0 [pid 7325] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] rmdir("./372") = 0 [pid 7326] <... memfd_create resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] mkdir("./373", 0777 [pid 7326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... mkdir resumed>) = 0 [pid 7326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 5072] getdents64(4, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7325] close(3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7325] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7325] close(4 [pid 5076] close(3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7325] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5072] close(4 [pid 7325] mkdir("./file1", 0777) = 0 [pid 5072] <... close resumed>) = 0 ./strace-static-x86_64: Process 7327 attached [pid 7325] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] rmdir("./372/file1" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7327 [pid 7327] set_robust_list(0x555583d53660, 24 [pid 5072] <... rmdir resumed>) = 0 [ 274.388824][ T7325] loop3: detected capacity change from 0 to 1024 [pid 7326] <... write resumed>) = 524288 ./strace-static-x86_64: Process 7328 attached [pid 7327] <... set_robust_list resumed>) = 0 [pid 5072] getdents64(3, [pid 7328] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7328 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7328] <... set_robust_list resumed>) = 0 [pid 7327] chdir("./373" [pid 5072] close(3 [pid 7328] chdir("./368" [pid 7327] <... chdir resumed>) = 0 [pid 7327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... close resumed>) = 0 [pid 7328] <... chdir resumed>) = 0 [pid 7327] <... prctl resumed>) = 0 [pid 5072] rmdir("./372" [pid 7328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7327] setpgid(0, 0 [pid 7328] <... prctl resumed>) = 0 [pid 7327] <... setpgid resumed>) = 0 [pid 7325] <... mount resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7325] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7328] setpgid(0, 0 [pid 7327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7325] <... openat resumed>) = 3 [pid 5072] mkdir("./373", 0777 [pid 7328] <... setpgid resumed>) = 0 [pid 7325] chdir("./file1") = 0 [pid 7328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7326] munmap(0x7f943d000000, 138412032 [pid 7325] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7328] <... openat resumed>) = 3 [pid 7327] <... openat resumed>) = 3 [pid 7326] <... munmap resumed>) = 0 [pid 7325] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... mkdir resumed>) = 0 [pid 7328] write(3, "1000", 4 [pid 7327] write(3, "1000", 4 [pid 7326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7325] truncate("./file1", 0 [pid 7327] <... write resumed>) = 4 [pid 7326] <... openat resumed>) = 4 [pid 7325] <... truncate resumed>) = 0 [pid 7328] <... write resumed>) = 4 [pid 7327] close(3 [pid 7326] ioctl(4, LOOP_SET_FD, 3 [pid 7325] memfd_create("syzkaller", 0 [pid 7328] close(3 [pid 7327] <... close resumed>) = 0 [pid 7325] <... memfd_create resumed>) = 4 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... ioctl resumed>) = 0 [pid 7328] <... close resumed>) = 0 [pid 7327] symlink("/dev/binderfs", "./binderfs" [pid 7325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... openat resumed>) = 3 [pid 7328] symlink("/dev/binderfs", "./binderfs" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7327] <... symlink resumed>) = 0 [pid 7325] <... mmap resumed>) = 0x7f943d000000 [pid 7328] <... symlink resumed>) = 0 [pid 7325] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] close(3 [pid 7328] memfd_create("syzkaller", 0 [pid 7327] memfd_create("syzkaller", 0 [pid 5071] <... close resumed>) = 0 [pid 7328] <... memfd_create resumed>) = 3 [pid 7327] <... memfd_create resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7329 [pid 7327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7326] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7329 attached [pid 7325] <... write resumed>) = 524288 [pid 7326] close(3 [pid 7329] set_robust_list(0x555583d53660, 24) = 0 [pid 7329] chdir("./373" [pid 7326] <... close resumed>) = 0 [pid 7329] <... chdir resumed>) = 0 [pid 7326] close(4 [pid 7329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7326] <... close resumed>) = 0 [pid 7329] <... prctl resumed>) = 0 [pid 7326] mkdir("./file1", 0777 [ 274.478350][ T7326] loop4: detected capacity change from 0 to 1024 [pid 7329] setpgid(0, 0 [pid 7328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7326] <... mkdir resumed>) = 0 [pid 7329] <... setpgid resumed>) = 0 [pid 7327] <... write resumed>) = 524288 [pid 7325] munmap(0x7f943d000000, 138412032 [pid 5072] <... ioctl resumed>) = 0 [pid 7329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7326] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7329] <... openat resumed>) = 3 [pid 7327] munmap(0x7f943d000000, 138412032 [pid 7329] write(3, "1000", 4 [pid 5072] close(3 [pid 7329] <... write resumed>) = 4 [pid 7325] <... munmap resumed>) = 0 [pid 7329] close(3) = 0 [pid 7329] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... close resumed>) = 0 [pid 7329] <... symlink resumed>) = 0 [pid 7328] <... write resumed>) = 524288 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7329] memfd_create("syzkaller", 0) = 3 [pid 7329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7328] munmap(0x7f943d000000, 138412032 [pid 7329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7328] <... munmap resumed>) = 0 [pid 7327] <... munmap resumed>) = 0 [pid 7325] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7328] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7325] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7330 [pid 7328] <... openat resumed>) = 4 [pid 7325] close(4./strace-static-x86_64: Process 7330 attached [pid 7328] ioctl(4, LOOP_SET_FD, 3 [pid 7330] set_robust_list(0x555583d53660, 24 [pid 7327] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7327] ioctl(4, LOOP_SET_FD, 3 [pid 7330] <... set_robust_list resumed>) = 0 [pid 7330] chdir("./373" [pid 7325] <... close resumed>) = 0 [pid 7329] <... write resumed>) = 524288 [pid 7330] <... chdir resumed>) = 0 [pid 7329] munmap(0x7f943d000000, 138412032 [pid 7327] <... ioctl resumed>) = 0 [pid 7326] <... mount resumed>) = 0 [pid 7325] exit_group(0 [pid 7330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7329] <... munmap resumed>) = 0 [pid 7327] close(3 [pid 7325] <... exit_group resumed>) = ? [pid 7330] <... prctl resumed>) = 0 [pid 7328] <... ioctl resumed>) = 0 [pid 7326] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7330] setpgid(0, 0 [pid 7329] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7328] close(3 [pid 7326] <... openat resumed>) = 3 [pid 7330] <... setpgid resumed>) = 0 [pid 7327] <... close resumed>) = 0 [pid 7325] +++ exited with 0 +++ [pid 7330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7327] close(4 [pid 7330] <... openat resumed>) = 3 [pid 7327] <... close resumed>) = 0 [pid 7326] chdir("./file1" [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7325, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7327] mkdir("./file1", 0777 [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7326] <... chdir resumed>) = 0 [pid 7329] <... openat resumed>) = 4 [pid 7328] <... close resumed>) = 0 [pid 7330] write(3, "1000", 4 [ 274.576094][ T7328] loop5: detected capacity change from 0 to 1024 [ 274.586584][ T7327] loop2: detected capacity change from 0 to 1024 [pid 7329] ioctl(4, LOOP_SET_FD, 3 [pid 7328] close(4 [pid 7326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7330] <... write resumed>) = 4 [pid 7327] <... mkdir resumed>) = 0 [pid 5074] umount2("./372", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7330] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7330] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7330] symlink("/dev/binderfs", "./binderfs" [pid 7326] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 3 [pid 7330] <... symlink resumed>) = 0 [pid 7327] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7326] truncate("./file1", 0 [pid 5074] newfstatat(3, "", [pid 7330] memfd_create("syzkaller", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7330] <... memfd_create resumed>) = 3 [pid 5074] getdents64(3, [pid 7330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7328] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7330] <... mmap resumed>) = 0x7f943d000000 [pid 7328] mkdir("./file1", 0777 [pid 5074] umount2("./372/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7328] <... mkdir resumed>) = 0 [pid 7326] <... truncate resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7328] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7326] memfd_create("syzkaller", 0 [pid 5074] newfstatat(AT_FDCWD, "./372/binderfs", [pid 7326] <... memfd_create resumed>) = 4 [pid 7326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7326] <... mmap resumed>) = 0x7f943d000000 [pid 5074] unlink("./372/binderfs" [pid 7329] <... ioctl resumed>) = 0 [pid 7327] <... mount resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7329] close(3 [pid 7327] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7329] <... close resumed>) = 0 [pid 7327] <... openat resumed>) = 3 [pid 7329] close(4 [pid 7328] <... mount resumed>) = 0 [pid 7329] <... close resumed>) = 0 [pid 7328] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7329] mkdir("./file1", 0777 [pid 7328] <... openat resumed>) = 3 [pid 7329] <... mkdir resumed>) = 0 [pid 7327] chdir("./file1" [pid 7328] chdir("./file1" [pid 7327] <... chdir resumed>) = 0 [pid 7329] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7328] <... chdir resumed>) = 0 [pid 7328] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7327] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7326] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7330] <... write resumed>) = 524288 [pid 7329] <... mount resumed>) = 0 [pid 7328] truncate("./file1", 0 [pid 7327] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7329] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7327] truncate("./file1", 0 [pid 7330] munmap(0x7f943d000000, 138412032 [pid 7329] <... openat resumed>) = 3 [pid 7328] <... truncate resumed>) = 0 [pid 5074] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7330] <... munmap resumed>) = 0 [pid 7329] chdir("./file1" [pid 7328] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./372/file1", [pid 7329] <... chdir resumed>) = 0 [pid 7328] <... memfd_create resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7329] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7330] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7329] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7328] <... mmap resumed>) = 0x7f943d000000 [pid 7330] <... openat resumed>) = 4 [pid 7329] truncate("./file1", 0 [pid 7328] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 274.618052][ T7329] loop0: detected capacity change from 0 to 1024 [pid 5074] openat(AT_FDCWD, "./372/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7330] ioctl(4, LOOP_SET_FD, 3 [pid 7327] <... truncate resumed>) = 0 [pid 7327] memfd_create("syzkaller", 0 [pid 5074] newfstatat(4, "", [pid 7327] <... memfd_create resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(4, [pid 7327] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7329] <... truncate resumed>) = 0 [pid 7329] memfd_create("syzkaller", 0 [pid 7326] <... write resumed>) = 524288 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7329] <... memfd_create resumed>) = 4 [pid 7329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(4 [pid 7329] <... mmap resumed>) = 0x7f943d000000 [pid 7326] munmap(0x7f943d000000, 138412032 [pid 5074] <... close resumed>) = 0 [pid 7326] <... munmap resumed>) = 0 [pid 5074] rmdir("./372/file1" [pid 7330] <... ioctl resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7329] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7328] <... write resumed>) = 524288 [pid 7327] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7326] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] close(3 [pid 7326] close(4 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./372" [pid 7328] munmap(0x7f943d000000, 138412032 [pid 7329] <... write resumed>) = 524288 [pid 7328] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7330] close(3) = 0 [pid 7330] close(4) = 0 [pid 7328] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7330] mkdir("./file1", 0777 [pid 7328] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7330] <... mkdir resumed>) = 0 [pid 5074] mkdir("./373", 0777 [pid 7330] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7326] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7328] close(4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7328] <... close resumed>) = 0 [pid 7330] <... mount resumed>) = 0 [pid 7327] <... write resumed>) = 524288 [pid 7326] exit_group(0 [pid 5074] <... openat resumed>) = 3 [pid 7330] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7329] munmap(0x7f943d000000, 138412032 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7330] <... openat resumed>) = 3 [pid 7329] <... munmap resumed>) = 0 [pid 7328] exit_group(0 [pid 7326] <... exit_group resumed>) = ? [pid 7330] chdir("./file1") = 0 [pid 7328] <... exit_group resumed>) = ? [pid 7330] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7329] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7329] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7328] +++ exited with 0 +++ [pid 7327] munmap(0x7f943d000000, 138412032 [ 274.694773][ T7330] loop1: detected capacity change from 0 to 1024 [pid 7330] truncate("./file1", 0 [pid 7329] close(4 [pid 7327] <... munmap resumed>) = 0 [pid 7326] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7328, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./368", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7329] <... close resumed>) = 0 [pid 7330] <... truncate resumed>) = 0 [pid 5076] umount2("./368/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7330] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7330] <... memfd_create resumed>) = 4 [pid 5076] newfstatat(AT_FDCWD, "./368/binderfs", [pid 7330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7330] <... mmap resumed>) = 0x7f943d000000 [pid 5076] unlink("./368/binderfs" [pid 7330] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7327] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7326, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7327] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7327] close(4 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./371", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7329] exit_group(0 [pid 5076] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7329] <... exit_group resumed>) = ? [pid 7327] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 7329] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7327] exit_group(0 [pid 5075] getdents64(3, [pid 5074] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7329, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] umount2("./371/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./368/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./368/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./368/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(AT_FDCWD, "./371/binderfs", [pid 7327] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(3 [pid 5076] newfstatat(4, "", [pid 5075] unlink("./371/binderfs" [pid 5071] umount2("./373", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5075] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7327] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7327, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] newfstatat(3, "", [pid 7330] <... write resumed>) = 524288 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(4 [pid 5071] getdents64(3, [pid 5076] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] rmdir("./368/file1" [pid 5073] umount2("./373", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7330] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./373/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3) = 0 [pid 7330] <... munmap resumed>) = 0 [pid 5076] rmdir("./368" [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7331 [pid 5073] newfstatat(3, "", [pid 5071] newfstatat(AT_FDCWD, "./373/binderfs", [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 7331 attached [pid 7330] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7331] set_robust_list(0x555583d53660, 24 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7331] <... set_robust_list resumed>) = 0 [pid 7330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] mkdir("./369", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./373/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] unlink("./373/binderfs" [pid 7331] chdir("./373" [pid 5076] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./371/file1", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7330] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./373/binderfs", [pid 5071] <... unlink resumed>) = 0 [pid 7331] <... chdir resumed>) = 0 [pid 7330] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7331] <... prctl resumed>) = 0 [pid 5073] unlink("./373/binderfs" [pid 7331] setpgid(0, 0 [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./371/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 5073] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] close(3 [pid 5075] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(4) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5075] rmdir("./371/file1") = 0 [pid 5075] getdents64(3, [pid 5071] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7331] <... setpgid resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7332 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5071] newfstatat(AT_FDCWD, "./373/file1", ./strace-static-x86_64: Process 7332 attached [pid 7331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7330] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7330] <... exit_group resumed>) = ? [pid 5075] rmdir("./371" [pid 5071] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./372", 0777 [pid 5073] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7332] set_robust_list(0x555583d53660, 24) = 0 [pid 7331] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./373/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] getdents64(4, [pid 7330] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] newfstatat(AT_FDCWD, "./373/file1", [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7330, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5071] getdents64(4, [pid 7332] chdir("./369" [pid 7331] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7332] <... chdir resumed>) = 0 [pid 7331] <... write resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] close(4 [pid 5072] umount2("./373", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] rmdir("./373/file1" [pid 5072] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 7331] close(3 [pid 5073] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 7332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 7332] <... prctl resumed>) = 0 [pid 7331] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7332] setpgid(0, 0 [pid 7331] symlink("/dev/binderfs", "./binderfs" [pid 5073] openat(AT_FDCWD, "./373/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(3 [pid 5073] <... openat resumed>) = 4 [pid 5072] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 7331] <... symlink resumed>) = 0 [pid 7332] <... setpgid resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] rmdir("./373" [pid 7332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7331] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./373/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 7332] <... openat resumed>) = 3 [pid 5073] getdents64(4, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7332] write(3, "1000", 4 [pid 7331] <... memfd_create resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] newfstatat(AT_FDCWD, "./373/binderfs", [pid 5071] mkdir("./374", 0777 [pid 7332] <... write resumed>) = 4 [pid 7331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7331] <... mmap resumed>) = 0x7f943d000000 [pid 5072] unlink("./373/binderfs" [pid 5071] <... mkdir resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7332] close(3 [pid 7331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] close(4 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD) = 0 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 7332] <... close resumed>) = 0 [pid 5072] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./373/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./373/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7333 [pid 5075] close(3 [pid 5072] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] getdents64(4, [pid 7332] symlink("/dev/binderfs", "./binderfs" [pid 5073] rmdir("./373/file1" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 ./strace-static-x86_64: Process 7333 attached [pid 5073] <... rmdir resumed>) = 0 [pid 5072] rmdir("./373/file1"./strace-static-x86_64: Process 7334 attached [pid 7333] set_robust_list(0x555583d53660, 24 [pid 7332] <... symlink resumed>) = 0 [pid 7331] <... write resumed>) = 524288 [pid 5073] getdents64(3, [pid 7334] set_robust_list(0x555583d53660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7334 [pid 7332] memfd_create("syzkaller", 0 [pid 7334] <... set_robust_list resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7334] chdir("./372" [pid 7332] <... memfd_create resumed>) = 3 [pid 7331] munmap(0x7f943d000000, 138412032 [pid 5073] close(3 [pid 7334] <... chdir resumed>) = 0 [pid 7332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7333] <... set_robust_list resumed>) = 0 [pid 7331] <... munmap resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7332] <... mmap resumed>) = 0x7f943d000000 [pid 5073] rmdir("./373" [pid 7333] chdir("./374" [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] close(3 [pid 7333] <... chdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] rmdir("./373") = 0 [pid 5072] mkdir("./374", 0777 [pid 7333] <... prctl resumed>) = 0 [pid 7332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] mkdir("./374", 0777 [pid 5072] <... mkdir resumed>) = 0 [pid 7334] <... prctl resumed>) = 0 [pid 7331] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7334] setpgid(0, 0 [pid 7333] setpgid(0, 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7334] <... setpgid resumed>) = 0 [pid 7331] <... openat resumed>) = 4 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7333] <... setpgid resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7334] <... openat resumed>) = 3 [pid 7333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7331] ioctl(4, LOOP_SET_FD, 3 [pid 7334] write(3, "1000", 4 [pid 7333] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 7333] write(3, "1000", 4) = 4 [pid 7333] close(3) = 0 [pid 7333] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7333] memfd_create("syzkaller", 0 [pid 7334] <... write resumed>) = 4 [pid 7333] <... memfd_create resumed>) = 3 [pid 7331] <... ioctl resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7334] close(3 [pid 7333] <... mmap resumed>) = 0x7f943d000000 [pid 7334] <... close resumed>) = 0 [pid 7333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7334] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7334] memfd_create("syzkaller", 0) = 3 [pid 7333] <... write resumed>) = 524288 [pid 7332] <... write resumed>) = 524288 [pid 7331] close(3 [pid 7334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7331] <... close resumed>) = 0 [pid 7334] <... mmap resumed>) = 0x7f943d000000 [pid 7331] close(4 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7333] munmap(0x7f943d000000, 138412032 [pid 7332] munmap(0x7f943d000000, 138412032 [pid 7331] <... close resumed>) = 0 [pid 7331] mkdir("./file1", 0777 [pid 7333] <... munmap resumed>) = 0 [pid 7332] <... munmap resumed>) = 0 [pid 7331] <... mkdir resumed>) = 0 [pid 7332] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 274.957228][ T7331] loop3: detected capacity change from 0 to 1024 [pid 7331] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] close(3 [pid 7332] <... openat resumed>) = 4 [pid 5072] close(3 [pid 7332] ioctl(4, LOOP_SET_FD, 3 [pid 7331] <... mount resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 7333] <... openat resumed>) = 4 [pid 7331] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7333] ioctl(4, LOOP_SET_FD, 3 [pid 7331] <... openat resumed>) = 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7335 ./strace-static-x86_64: Process 7335 attached [pid 7334] <... write resumed>) = 524288 [pid 7332] <... ioctl resumed>) = 0 [pid 7331] chdir("./file1" [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7336 [pid 7334] munmap(0x7f943d000000, 138412032 [pid 7335] set_robust_list(0x555583d53660, 24 [pid 7331] <... chdir resumed>) = 0 [pid 7335] <... set_robust_list resumed>) = 0 [pid 7331] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7334] <... munmap resumed>) = 0 [pid 7331] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7335] chdir("./374" [pid 7331] truncate("./file1", 0 [pid 7334] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7332] close(3./strace-static-x86_64: Process 7336 attached [pid 7334] <... openat resumed>) = 4 [pid 7334] ioctl(4, LOOP_SET_FD, 3 [pid 7336] set_robust_list(0x555583d53660, 24) = 0 [pid 7336] chdir("./374") = 0 [pid 7336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7336] setpgid(0, 0) = 0 [pid 7336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7336] write(3, "1000", 4) = 4 [pid 7336] close(3) = 0 [pid 7336] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7334] <... ioctl resumed>) = 0 [pid 7332] <... close resumed>) = 0 [pid 7336] memfd_create("syzkaller", 0 [pid 7335] <... chdir resumed>) = 0 [pid 7332] close(4 [pid 7336] <... memfd_create resumed>) = 3 [pid 7335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7332] <... close resumed>) = 0 [pid 7331] <... truncate resumed>) = 0 [pid 7336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7335] <... prctl resumed>) = 0 [pid 7332] mkdir("./file1", 0777 [pid 7331] memfd_create("syzkaller", 0 [pid 7336] <... mmap resumed>) = 0x7f943d000000 [pid 7336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7335] setpgid(0, 0 [pid 7332] <... mkdir resumed>) = 0 [pid 7331] <... memfd_create resumed>) = 4 [pid 7333] <... ioctl resumed>) = 0 [pid 7333] close(3) = 0 [pid 7333] close(4) = 0 [pid 7335] <... setpgid resumed>) = 0 [pid 7333] mkdir("./file1", 0777 [pid 7332] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7333] <... mkdir resumed>) = 0 [pid 7331] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7335] <... openat resumed>) = 3 [pid 7335] write(3, "1000", 4) = 4 [pid 7335] close(3) = 0 [pid 7333] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7336] <... write resumed>) = 524288 [pid 7335] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7335] memfd_create("syzkaller", 0 [pid 7334] close(3) = 0 [pid 7335] <... memfd_create resumed>) = 3 [pid 7334] close(4) = 0 [ 275.035762][ T7332] loop5: detected capacity change from 0 to 1024 [ 275.038834][ T7333] loop0: detected capacity change from 0 to 1024 [ 275.066105][ T7334] loop4: detected capacity change from 0 to 1024 [pid 7336] munmap(0x7f943d000000, 138412032 [pid 7335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7334] mkdir("./file1", 0777 [pid 7331] <... write resumed>) = 524288 [pid 7335] <... mmap resumed>) = 0x7f943d000000 [pid 7334] <... mkdir resumed>) = 0 [pid 7333] <... mount resumed>) = 0 [pid 7333] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7336] <... munmap resumed>) = 0 [pid 7333] <... openat resumed>) = 3 [pid 7334] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7332] <... mount resumed>) = 0 [pid 7331] munmap(0x7f943d000000, 138412032 [pid 7333] chdir("./file1" [pid 7336] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7333] <... chdir resumed>) = 0 [pid 7332] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7331] <... munmap resumed>) = 0 [pid 7336] <... openat resumed>) = 4 [pid 7333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7332] <... openat resumed>) = 3 [pid 7331] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7336] ioctl(4, LOOP_SET_FD, 3 [pid 7332] chdir("./file1" [pid 7331] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7333] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7332] <... chdir resumed>) = 0 [pid 7331] close(4 [pid 7335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7333] truncate("./file1", 0 [pid 7332] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7331] <... close resumed>) = 0 [pid 7332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7332] truncate("./file1", 0 [pid 7331] exit_group(0) = ? [pid 7334] <... mount resumed>) = 0 [pid 7332] <... truncate resumed>) = 0 [pid 7331] +++ exited with 0 +++ [pid 7332] memfd_create("syzkaller", 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7331, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7336] <... ioctl resumed>) = 0 [pid 7334] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7332] <... memfd_create resumed>) = 4 [pid 7336] close(3 [pid 7334] <... openat resumed>) = 3 [pid 7332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7336] <... close resumed>) = 0 [pid 7333] <... truncate resumed>) = 0 [pid 7332] <... mmap resumed>) = 0x7f943d000000 [pid 7336] close(4 [pid 7334] chdir("./file1" [pid 7333] memfd_create("syzkaller", 0 [pid 7332] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7336] <... close resumed>) = 0 [pid 7334] <... chdir resumed>) = 0 [pid 5074] umount2("./373", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7333] <... memfd_create resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7336] mkdir("./file1", 0777 [pid 7334] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 7334] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7336] <... mkdir resumed>) = 0 [pid 7334] truncate("./file1", 0 [pid 7333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7336] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7335] <... write resumed>) = 524288 [pid 7334] <... truncate resumed>) = 0 [pid 7333] <... mmap resumed>) = 0x7f943d000000 [ 275.128140][ T7336] loop2: detected capacity change from 0 to 1024 [pid 5074] getdents64(3, [pid 7335] munmap(0x7f943d000000, 138412032 [pid 7334] memfd_create("syzkaller", 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7334] <... memfd_create resumed>) = 4 [pid 5074] umount2("./373/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7335] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./373/binderfs", [pid 7335] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7335] <... openat resumed>) = 4 [pid 5074] unlink("./373/binderfs" [pid 7335] ioctl(4, LOOP_SET_FD, 3 [pid 7334] <... mmap resumed>) = 0x7f943d000000 [pid 7333] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... unlink resumed>) = 0 [pid 7336] <... mount resumed>) = 0 [pid 7334] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7336] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7336] <... openat resumed>) = 3 [pid 7336] chdir("./file1") = 0 [pid 7332] <... write resumed>) = 524288 [pid 7332] munmap(0x7f943d000000, 138412032) = 0 [pid 7336] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7332] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7336] truncate("./file1", 0 [pid 7334] <... write resumed>) = 524288 [pid 7332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = 0 [pid 7332] close(4 [pid 5074] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7336] <... truncate resumed>) = 0 [pid 7335] <... ioctl resumed>) = 0 [pid 7334] munmap(0x7f943d000000, 138412032 [pid 7333] <... write resumed>) = 524288 [pid 7332] <... close resumed>) = 0 [pid 7336] memfd_create("syzkaller", 0 [pid 7335] close(3 [pid 7333] munmap(0x7f943d000000, 138412032 [pid 5074] newfstatat(AT_FDCWD, "./373/file1", [pid 7336] <... memfd_create resumed>) = 4 [pid 7336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7335] <... close resumed>) = 0 [pid 7334] <... munmap resumed>) = 0 [pid 7333] <... munmap resumed>) = 0 [pid 7332] exit_group(0 [pid 7336] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7335] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7335] <... close resumed>) = 0 [pid 7334] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7333] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7332] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7335] mkdir("./file1", 0777 [pid 7334] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 275.209158][ T7335] loop1: detected capacity change from 0 to 1024 [pid 7333] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7332] +++ exited with 0 +++ [pid 5074] openat(AT_FDCWD, "./373/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7335] <... mkdir resumed>) = 0 [pid 7334] close(4) = 0 [pid 7333] close(4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7332, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... openat resumed>) = 4 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] newfstatat(4, "", [pid 7336] <... write resumed>) = 524288 [pid 7335] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 7333] <... close resumed>) = 0 [pid 5076] umount2("./369", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./373/file1" [pid 7335] <... mount resumed>) = 0 [pid 7334] exit_group(0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7335] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7334] <... exit_group resumed>) = ? [pid 5076] openat(AT_FDCWD, "./369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 7335] <... openat resumed>) = 3 [pid 7334] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 7335] chdir("./file1" [pid 7333] exit_group(0 [pid 5076] newfstatat(3, "", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7334, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7335] <... chdir resumed>) = 0 [pid 7333] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 7336] munmap(0x7f943d000000, 138412032 [pid 7335] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] getdents64(3, [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7335] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] close(3 [pid 7335] truncate("./file1", 0 [pid 5076] umount2("./369/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7336] <... munmap resumed>) = 0 [pid 7333] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./369/binderfs", [pid 5074] rmdir("./373" [pid 7336] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7335] <... truncate resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./372", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7336] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7335] memfd_create("syzkaller", 0 [pid 5076] unlink("./369/binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7333, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7335] <... memfd_create resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 7336] close(4 [pid 7335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] mkdir("./374", 0777 [pid 5071] umount2("./374", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7335] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./372/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] newfstatat(AT_FDCWD, "./372/binderfs", [pid 5071] umount2("./374/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./374/binderfs", [pid 5075] unlink("./372/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5071] unlink("./374/binderfs") = 0 [pid 5071] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7335] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... umount2 resumed>) = 0 [pid 7335] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 7336] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7336] exit_group(0 [pid 7335] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5075] newfstatat(AT_FDCWD, "./372/file1", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 7336] <... exit_group resumed>) = ? [pid 7335] <... munmap resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./369/file1", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(AT_FDCWD, "./374/file1", [pid 7336] +++ exited with 0 +++ [pid 7335] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7335] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7336, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7335] close(4 [pid 5071] openat(AT_FDCWD, "./374/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7335] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./369/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./374", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./372/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7337 attached ) = 3 [pid 5076] openat(AT_FDCWD, "./369/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(4, "", [pid 7337] set_robust_list(0x555583d53660, 24 [pid 5076] <... openat resumed>) = 4 [pid 5073] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7337] <... set_robust_list resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 7337] chdir("./374" [pid 5076] newfstatat(4, "", [pid 5075] <... openat resumed>) = 4 [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5075] newfstatat(4, "", [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7337 [pid 5073] umount2("./374/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(4 [pid 7337] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 7337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7335] exit_group(0 [pid 5073] newfstatat(AT_FDCWD, "./374/binderfs", [pid 5071] rmdir("./374/file1" [pid 7337] <... prctl resumed>) = 0 [pid 7335] <... exit_group resumed>) = ? [pid 5076] getdents64(4, [pid 5075] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7337] setpgid(0, 0 [pid 7335] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] unlink("./374/binderfs" [pid 5071] getdents64(3, [pid 7337] <... setpgid resumed>) = 0 [pid 5076] close(4 [pid 5075] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7335, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... close resumed>) = 0 [pid 5073] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7337] <... openat resumed>) = 3 [pid 5075] close(4 [pid 5071] <... close resumed>) = 0 [pid 7337] write(3, "1000", 4 [pid 5076] rmdir("./369/file1" [pid 5075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] rmdir("./374" [pid 7337] <... write resumed>) = 4 [pid 7337] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] rmdir("./372/file1" [pid 5072] umount2("./374", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7337] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7337] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 7337] <... symlink resumed>) = 0 [pid 5073] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5076] getdents64(3, [pid 5072] newfstatat(3, "", [pid 7337] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] mkdir("./375", 0777 [pid 5072] getdents64(3, [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(AT_FDCWD, "./374/file1", [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... mkdir resumed>) = 0 [pid 7337] <... memfd_create resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./374/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] rmdir("./369" [pid 5075] <... close resumed>) = 0 [pid 7337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7337] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./374/binderfs", [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] rmdir("./372" [pid 5073] openat(AT_FDCWD, "./374/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5072] unlink("./374/binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 5076] mkdir("./370", 0777 [pid 5073] <... openat resumed>) = 4 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] mkdir("./373", 0777 [pid 5073] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7337] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] getdents64(4, [pid 7337] munmap(0x7f943d000000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] close(4 [pid 5072] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./374/file1" [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 7337] <... munmap resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7337] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7337] <... openat resumed>) = 4 [pid 5073] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7337] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... close resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./374/file1", [pid 5073] rmdir("./374") = 0 [pid 5073] mkdir("./375", 0777 [pid 7337] <... ioctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7337] close(3 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7337] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] openat(AT_FDCWD, "./374/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7337] close(4 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... openat resumed>) = 4 [pid 7337] <... close resumed>) = 0 [pid 7337] mkdir("./file1", 0777 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] newfstatat(4, "", [pid 7337] <... mkdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7337] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... ioctl resumed>) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./374/file1") = 0 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] getdents64(3, ./strace-static-x86_64: Process 7338 attached [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 7338] set_robust_list(0x555583d53660, 24 [pid 5076] close(3 [pid 5075] close(3 [pid 7338] <... set_robust_list resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7338] chdir("./375" [pid 7337] <... mount resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7338 [pid 7338] <... chdir resumed>) = 0 [pid 7337] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] rmdir("./374" [pid 7337] <... openat resumed>) = 3 [pid 5072] <... rmdir resumed>) = 0 [pid 7338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 275.428916][ T7337] loop3: detected capacity change from 0 to 1024 [pid 7337] chdir("./file1") = 0 [pid 7337] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] mkdir("./375", 0777./strace-static-x86_64: Process 7340 attached [pid 7338] setpgid(0, 0 [pid 7337] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 7339 attached [pid 7338] <... setpgid resumed>) = 0 [pid 7340] set_robust_list(0x555583d53660, 24 [pid 7337] truncate("./file1", 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7340] <... set_robust_list resumed>) = 0 [pid 7338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7339] set_robust_list(0x555583d53660, 24 [pid 7340] chdir("./373" [pid 7338] <... openat resumed>) = 3 [pid 7340] <... chdir resumed>) = 0 [pid 7338] write(3, "1000", 4 [pid 7340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7339 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7340 [pid 7340] <... prctl resumed>) = 0 [pid 7338] <... write resumed>) = 4 [pid 7339] <... set_robust_list resumed>) = 0 [pid 7340] setpgid(0, 0 [pid 7338] close(3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7339] chdir("./370" [pid 7337] <... truncate resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7339] <... chdir resumed>) = 0 [pid 7340] <... setpgid resumed>) = 0 [pid 7338] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7337] memfd_create("syzkaller", 0 [pid 7340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7337] <... memfd_create resumed>) = 4 [pid 7337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7339] <... prctl resumed>) = 0 [pid 7337] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7339] setpgid(0, 0) = 0 [pid 7339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7340] <... openat resumed>) = 3 [pid 7338] symlink("/dev/binderfs", "./binderfs" [pid 7340] write(3, "1000", 4 [pid 5073] close(3 [pid 7338] <... symlink resumed>) = 0 [pid 7339] write(3, "1000", 4 [pid 7340] <... write resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 7339] <... write resumed>) = 4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7339] close(3 [pid 7340] close(3 [pid 7339] <... close resumed>) = 0 [pid 7339] symlink("/dev/binderfs", "./binderfs" [pid 7340] <... close resumed>) = 0 [pid 7337] <... write resumed>) = 524288 [pid 7339] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 7341 attached [pid 7340] symlink("/dev/binderfs", "./binderfs" [pid 7338] memfd_create("syzkaller", 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7341 [pid 7341] set_robust_list(0x555583d53660, 24) = 0 [pid 7339] memfd_create("syzkaller", 0 [pid 7340] <... symlink resumed>) = 0 [pid 7338] <... memfd_create resumed>) = 3 [pid 7341] chdir("./375" [pid 7339] <... memfd_create resumed>) = 3 [pid 7338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7341] <... chdir resumed>) = 0 [pid 7339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7340] memfd_create("syzkaller", 0 [pid 7338] <... mmap resumed>) = 0x7f943d000000 [pid 7339] <... mmap resumed>) = 0x7f943d000000 [pid 7341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7341] <... prctl resumed>) = 0 [pid 7340] <... memfd_create resumed>) = 3 [pid 7340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7337] munmap(0x7f943d000000, 138412032 [pid 7341] setpgid(0, 0) = 0 [pid 7337] <... munmap resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7337] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7339] <... write resumed>) = 524288 [pid 7337] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7337] close(4 [pid 7341] <... openat resumed>) = 3 [pid 7340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7338] <... write resumed>) = 524288 [pid 7337] <... close resumed>) = 0 [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 7342 [pid 7341] write(3, "1000", 4 [pid 7340] <... write resumed>) = 524288 [pid 7338] munmap(0x7f943d000000, 138412032 [pid 7341] <... write resumed>) = 4 ./strace-static-x86_64: Process 7342 attached [pid 7341] close(3 [pid 7339] munmap(0x7f943d000000, 138412032 [pid 7342] set_robust_list(0x555583d53660, 24 [pid 7341] <... close resumed>) = 0 [pid 7339] <... munmap resumed>) = 0 [pid 7338] <... munmap resumed>) = 0 [pid 7341] symlink("/dev/binderfs", "./binderfs" [pid 7342] <... set_robust_list resumed>) = 0 [pid 7341] <... symlink resumed>) = 0 [pid 7339] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7337] exit_group(0 [pid 7342] chdir("./375" [pid 7339] <... openat resumed>) = 4 [pid 7339] ioctl(4, LOOP_SET_FD, 3 [pid 7338] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7342] <... chdir resumed>) = 0 [pid 7341] memfd_create("syzkaller", 0 [pid 7338] <... openat resumed>) = 4 [pid 7338] ioctl(4, LOOP_SET_FD, 3 [pid 7342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7337] <... exit_group resumed>) = ? [pid 7342] <... prctl resumed>) = 0 [pid 7337] +++ exited with 0 +++ [pid 7342] setpgid(0, 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7337, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7342] <... setpgid resumed>) = 0 [pid 7342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7341] <... memfd_create resumed>) = 3 [pid 7340] munmap(0x7f943d000000, 138412032 [pid 7338] <... ioctl resumed>) = 0 [pid 5074] umount2("./374", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7338] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7340] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7341] <... mmap resumed>) = 0x7f943d000000 [pid 7340] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7338] <... close resumed>) = 0 [pid 7340] <... openat resumed>) = 4 [pid 7338] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 7340] ioctl(4, LOOP_SET_FD, 3 [pid 7338] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7342] write(3, "1000", 4 [pid 7339] <... ioctl resumed>) = 0 [pid 5074] getdents64(3, [pid 7342] <... write resumed>) = 4 [pid 7339] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7342] close(3 [pid 7339] <... close resumed>) = 0 [pid 5074] umount2("./374/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7342] <... close resumed>) = 0 [pid 7339] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7342] symlink("/dev/binderfs", "./binderfs" [pid 7339] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./374/binderfs", [pid 7342] <... symlink resumed>) = 0 [pid 7339] mkdir("./file1", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7339] <... mkdir resumed>) = 0 [pid 5074] unlink("./374/binderfs" [pid 7339] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... unlink resumed>) = 0 [pid 7342] memfd_create("syzkaller", 0 [pid 7338] mkdir("./file1", 0777 [pid 5074] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7342] <... memfd_create resumed>) = 3 [pid 7341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7338] <... mkdir resumed>) = 0 [pid 7342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7341] <... write resumed>) = 524288 [pid 7338] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./374/file1", [pid 7340] <... ioctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7340] close(3 [pid 5074] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7340] <... close resumed>) = 0 [pid 7340] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7340] <... close resumed>) = 0 [pid 7342] <... mmap resumed>) = 0x7f943d000000 [pid 7340] mkdir("./file1", 0777 [pid 5074] openat(AT_FDCWD, "./374/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7340] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 7340] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7339] <... mount resumed>) = 0 [pid 5074] getdents64(4, [pid 7342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7339] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7339] <... openat resumed>) = 3 [pid 5074] getdents64(4, [pid 7339] chdir("./file1") = 0 [pid 7338] <... mount resumed>) = 0 [pid 7339] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7339] truncate("./file1", 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7341] munmap(0x7f943d000000, 138412032 [pid 7338] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] close(4 [pid 7340] <... mount resumed>) = 0 [pid 7338] <... openat resumed>) = 3 [ 275.580725][ T7339] loop5: detected capacity change from 0 to 1024 [ 275.588542][ T7338] loop0: detected capacity change from 0 to 1024 [ 275.609081][ T7340] loop4: detected capacity change from 0 to 1024 [pid 5074] <... close resumed>) = 0 [pid 7341] <... munmap resumed>) = 0 [pid 7340] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7338] chdir("./file1" [pid 5074] rmdir("./374/file1" [pid 7341] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7340] <... openat resumed>) = 3 [pid 7338] <... chdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7341] <... openat resumed>) = 4 [pid 7339] <... truncate resumed>) = 0 [pid 7340] chdir("./file1" [pid 7338] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(3, [pid 7341] ioctl(4, LOOP_SET_FD, 3 [pid 7339] memfd_create("syzkaller", 0 [pid 7340] <... chdir resumed>) = 0 [pid 7338] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7339] <... memfd_create resumed>) = 4 [pid 7339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5074] close(3 [pid 7340] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7338] truncate("./file1", 0 [pid 5074] <... close resumed>) = 0 [pid 7342] <... write resumed>) = 524288 [pid 7340] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] rmdir("./374" [pid 7340] truncate("./file1", 0 [pid 7339] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 7342] munmap(0x7f943d000000, 138412032 [pid 7339] <... write resumed>) = 524288 [pid 5074] mkdir("./375", 0777 [pid 7342] <... munmap resumed>) = 0 [pid 7341] <... ioctl resumed>) = 0 [pid 7340] <... truncate resumed>) = 0 [pid 7338] <... truncate resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7341] close(3 [pid 7340] memfd_create("syzkaller", 0 [pid 7338] memfd_create("syzkaller", 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7341] <... close resumed>) = 0 [pid 7340] <... memfd_create resumed>) = 4 [pid 7342] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7341] close(4 [pid 7339] munmap(0x7f943d000000, 138412032 [pid 7340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7338] <... memfd_create resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 7342] <... openat resumed>) = 4 [pid 7341] <... close resumed>) = 0 [pid 7340] <... mmap resumed>) = 0x7f943d000000 [ 275.669163][ T7341] loop2: detected capacity change from 0 to 1024 [pid 7338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7342] ioctl(4, LOOP_SET_FD, 3 [pid 7341] mkdir("./file1", 0777 [pid 7339] <... munmap resumed>) = 0 [pid 7338] <... mmap resumed>) = 0x7f943d000000 [pid 7341] <... mkdir resumed>) = 0 [pid 7340] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7338] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7341] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7342] <... ioctl resumed>) = 0 [pid 7339] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7342] close(3 [pid 7339] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7339] close(4 [pid 7342] <... close resumed>) = 0 [pid 7342] close(4 [pid 7341] <... mount resumed>) = 0 [pid 7339] <... close resumed>) = 0 [pid 7342] <... close resumed>) = 0 [pid 7339] exit_group(0 [pid 7342] mkdir("./file1", 0777) = 0 [pid 7339] <... exit_group resumed>) = ? [pid 7339] +++ exited with 0 +++ [pid 7338] <... write resumed>) = 524288 [pid 5074] <... ioctl resumed>) = 0 [pid 7341] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7339, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7342] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7341] <... openat resumed>) = 3 [pid 7341] chdir("./file1") = 0 [pid 5076] umount2("./370", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7341] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7341] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7341] truncate("./file1", 0 [pid 5076] <... openat resumed>) = 3 [ 275.710568][ T7342] loop1: detected capacity change from 0 to 1024 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7341] <... truncate resumed>) = 0 [pid 5076] getdents64(3, [pid 7341] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7341] <... memfd_create resumed>) = 4 [pid 5076] umount2("./370/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7340] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./370/binderfs", [pid 5074] close(3 [pid 7341] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./370/binderfs" [pid 5074] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7340] munmap(0x7f943d000000, 138412032 [pid 7341] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7340] <... munmap resumed>) = 0 [pid 7338] munmap(0x7f943d000000, 138412032 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7343 ./strace-static-x86_64: Process 7343 attached [pid 7342] <... mount resumed>) = 0 [pid 7340] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7338] <... munmap resumed>) = 0 [pid 7342] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7343] set_robust_list(0x555583d53660, 24 [pid 7342] <... openat resumed>) = 3 [pid 7340] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7342] chdir("./file1" [pid 7343] <... set_robust_list resumed>) = 0 [pid 7340] close(4 [pid 7338] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7343] chdir("./375" [pid 7342] <... chdir resumed>) = 0 [pid 7340] <... close resumed>) = 0 [pid 7338] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = 0 [pid 7343] <... chdir resumed>) = 0 [pid 7343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7342] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7343] <... prctl resumed>) = 0 [pid 7343] setpgid(0, 0 [pid 7342] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7343] <... setpgid resumed>) = 0 [pid 7338] close(4 [pid 7343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7342] truncate("./file1", 0 [pid 7338] <... close resumed>) = 0 [pid 7343] <... openat resumed>) = 3 [pid 7343] write(3, "1000", 4 [pid 5076] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7343] <... write resumed>) = 4 [pid 7343] close(3 [pid 7341] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7343] <... close resumed>) = 0 [pid 7341] munmap(0x7f943d000000, 138412032 [pid 7343] symlink("/dev/binderfs", "./binderfs" [pid 7341] <... munmap resumed>) = 0 [pid 7343] <... symlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./370/file1", [pid 7343] memfd_create("syzkaller", 0) = 3 [pid 7341] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7340] exit_group(0 [pid 7343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7341] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7338] exit_group(0 [pid 7343] <... mmap resumed>) = 0x7f943d000000 [pid 7341] close(4 [pid 7340] <... exit_group resumed>) = ? [pid 7338] <... exit_group resumed>) = ? [pid 7343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7342] <... truncate resumed>) = 0 [pid 7341] <... close resumed>) = 0 [pid 7340] +++ exited with 0 +++ [pid 7338] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7342] memfd_create("syzkaller", 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7340, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7338, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7342] <... memfd_create resumed>) = 4 [pid 7342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./370/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./373", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7342] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./370/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7343] <... write resumed>) = 524288 [pid 7342] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./375", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 7341] exit_group(0) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5071] newfstatat(3, "", [pid 5076] getdents64(4, [pid 7341] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7341, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] getdents64(3, [pid 5076] close(4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./373/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] rmdir("./370/file1" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7343] munmap(0x7f943d000000, 138412032 [pid 5075] newfstatat(AT_FDCWD, "./373/binderfs", [pid 5073] umount2("./375", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7343] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./375/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5075] unlink("./373/binderfs" [pid 5073] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 5075] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 5071] newfstatat(AT_FDCWD, "./375/binderfs", [pid 7343] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7343] <... openat resumed>) = 4 [pid 5076] rmdir("./370" [pid 5073] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7343] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] unlink("./375/binderfs" [pid 5076] mkdir("./371", 0777 [pid 5073] umount2("./375/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./375/binderfs" [pid 7342] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 7342] munmap(0x7f943d000000, 138412032 [pid 5076] ioctl(3, LOOP_CLR_FD) = 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... unlink resumed>) = 0 [pid 5073] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7342] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 7344 attached [pid 7343] <... ioctl resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7344 [pid 7343] close(3 [pid 7344] set_robust_list(0x555583d53660, 24 [pid 7343] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7344] <... set_robust_list resumed>) = 0 [pid 7344] chdir("./371" [pid 7343] close(4 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7343] <... close resumed>) = 0 [pid 7342] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7344] <... chdir resumed>) = 0 [pid 7342] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7342] close(4 [pid 5075] newfstatat(AT_FDCWD, "./373/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 275.890710][ T7343] loop3: detected capacity change from 0 to 1024 [pid 5075] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7344] <... prctl resumed>) = 0 [pid 7343] mkdir("./file1", 0777 [pid 7342] <... close resumed>) = 0 [pid 5073] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7344] setpgid(0, 0 [pid 7343] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./373/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7344] <... setpgid resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./375/file1", [pid 7344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7344] write(3, "1000", 4) = 4 [pid 7343] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] newfstatat(4, "", [pid 5073] newfstatat(AT_FDCWD, "./375/file1", [pid 5071] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7344] close(3) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7344] symlink("/dev/binderfs", "./binderfs" [pid 7342] exit_group(0 [pid 5075] getdents64(4, [pid 5073] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7344] <... symlink resumed>) = 0 [pid 7342] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] openat(AT_FDCWD, "./375/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./375/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(4 [pid 5073] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5075] rmdir("./373/file1" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7344] memfd_create("syzkaller", 0 [pid 7342] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5071] <... openat resumed>) = 4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7344] <... memfd_create resumed>) = 3 [pid 5075] getdents64(3, [pid 5073] getdents64(4, [pid 5071] newfstatat(4, "", [pid 7344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7342, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 7344] <... mmap resumed>) = 0x7f943d000000 [pid 5073] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./375/file1") = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5071] getdents64(4, [pid 5075] close(3 [pid 5072] umount2("./375", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] rmdir("./373" [pid 5073] rmdir("./375" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] getdents64(4, [pid 7343] <... mount resumed>) = 0 [pid 5073] mkdir("./376", 0777 [pid 5072] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7343] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] mkdir("./374", 0777 [pid 5073] <... mkdir resumed>) = 0 [pid 7343] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7343] chdir("./file1" [pid 5071] close(4 [pid 5072] newfstatat(3, "", [pid 7343] <... chdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... close resumed>) = 0 [pid 7344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7343] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 5071] rmdir("./375/file1" [pid 7343] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7343] truncate("./file1", 0 [pid 5075] close(3 [pid 7343] <... truncate resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./375/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7343] memfd_create("syzkaller", 0) = 4 [pid 5072] newfstatat(AT_FDCWD, "./375/binderfs", [pid 5071] close(3./strace-static-x86_64: Process 7345 attached [pid 7343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7345] set_robust_list(0x555583d53660, 24 [pid 7343] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 7345] <... set_robust_list resumed>) = 0 [pid 7345] chdir("./374") = 0 [pid 7345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7345 [pid 7345] setpgid(0, 0) = 0 [pid 5072] unlink("./375/binderfs" [pid 5071] rmdir("./375" [pid 7345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 7345] <... openat resumed>) = 3 [pid 5072] <... unlink resumed>) = 0 [pid 5071] mkdir("./376", 0777 [pid 7343] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7345] write(3, "1000", 4) = 4 [pid 7345] close(3) = 0 [pid 7344] <... write resumed>) = 524288 [pid 7343] <... write resumed>) = 524288 [pid 5072] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 [pid 7345] symlink("/dev/binderfs", "./binderfs" [pid 7344] munmap(0x7f943d000000, 138412032 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7345] <... symlink resumed>) = 0 [pid 7345] memfd_create("syzkaller", 0) = 3 [pid 7344] <... munmap resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7344] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7345] <... mmap resumed>) = 0x7f943d000000 [pid 7345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7344] <... openat resumed>) = 4 [pid 5073] close(3 [pid 5072] <... umount2 resumed>) = 0 [pid 7343] munmap(0x7f943d000000, 138412032 [pid 5073] <... close resumed>) = 0 [pid 7343] <... munmap resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7344] ioctl(4, LOOP_SET_FD, 3 [pid 5072] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7343] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7346 [pid 7343] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7343] close(4./strace-static-x86_64: Process 7346 attached ) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7346] set_robust_list(0x555583d53660, 24 [pid 5072] newfstatat(AT_FDCWD, "./375/file1", [pid 7346] <... set_robust_list resumed>) = 0 [pid 7346] chdir("./376") = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7346] <... prctl resumed>) = 0 [pid 7346] setpgid(0, 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7346] <... setpgid resumed>) = 0 [pid 7346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] openat(AT_FDCWD, "./375/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7346] <... openat resumed>) = 3 [pid 7346] write(3, "1000", 4) = 4 [pid 7346] close(3) = 0 [pid 7346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7346] memfd_create("syzkaller", 0 [pid 5072] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 7346] <... memfd_create resumed>) = 3 [pid 7345] <... write resumed>) = 524288 [pid 7344] <... ioctl resumed>) = 0 [pid 7343] exit_group(0 [pid 7346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7343] <... exit_group resumed>) = ? [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7346] <... mmap resumed>) = 0x7f943d000000 [pid 7344] close(3 [pid 7343] +++ exited with 0 +++ [pid 5072] getdents64(4, [pid 7346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7344] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7343, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7344] close(4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7344] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 7344] mkdir("./file1", 0777 [pid 5074] umount2("./375", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5072] <... close resumed>) = 0 [pid 7345] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./375/file1" [pid 7345] <... munmap resumed>) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] umount2("./375/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... rmdir resumed>) = 0 [pid 7344] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7345] <... openat resumed>) = 4 [ 276.063463][ T5078] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 276.092443][ T7344] loop5: detected capacity change from 0 to 1024 [pid 5074] unlink("./375/binderfs" [pid 5072] close(3 [pid 7345] ioctl(4, LOOP_SET_FD, 3 [pid 7344] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5074] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./375" [pid 7346] <... write resumed>) = 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./376", 0777 [pid 7346] munmap(0x7f943d000000, 138412032) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7346] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... openat resumed>) = 3 [pid 7346] <... openat resumed>) = 4 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7346] ioctl(4, LOOP_SET_FD, 3 [pid 7344] <... mount resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7344] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] close(3 [pid 7345] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7345] close(3) = 0 [pid 7345] close(4) = 0 [pid 7345] mkdir("./file1", 0777./strace-static-x86_64: Process 7347 attached ) = 0 [pid 7347] set_robust_list(0x555583d53660, 24 [pid 7345] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7344] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7347 [pid 5071] <... ioctl resumed>) = 0 [pid 5074] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7347] <... set_robust_list resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./375/file1", [pid 7347] chdir("./376" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7347] <... chdir resumed>) = 0 [pid 5074] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7347] setpgid(0, 0) = 0 [pid 5074] openat(AT_FDCWD, "./375/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... openat resumed>) = 4 [pid 7347] <... openat resumed>) = 3 [pid 7346] <... ioctl resumed>) = 0 [pid 7344] chdir("./file1" [pid 5071] close(3 [pid 7347] write(3, "1000", 4 [pid 7346] close(3 [pid 7344] <... chdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 7347] <... write resumed>) = 4 [pid 7346] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... close resumed>) = 0 [pid 7347] close(3 [pid 7346] close(4 [pid 5074] getdents64(4, [pid 7347] <... close resumed>) = 0 [pid 7346] <... close resumed>) = 0 [pid 7345] <... mount resumed>) = 0 [pid 7344] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7347] symlink("/dev/binderfs", "./binderfs" [pid 7346] mkdir("./file1", 0777 [pid 7345] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] getdents64(4, ./strace-static-x86_64: Process 7348 attached [pid 7347] <... symlink resumed>) = 0 [pid 7346] <... mkdir resumed>) = 0 [pid 7345] <... openat resumed>) = 3 [pid 7344] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7348] set_robust_list(0x555583d53660, 24 [pid 7347] memfd_create("syzkaller", 0 [ 276.148455][ T7345] loop4: detected capacity change from 0 to 1024 [ 276.170508][ T7346] loop2: detected capacity change from 0 to 1024 [pid 7346] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7345] chdir("./file1" [pid 7344] truncate("./file1", 0 [pid 5074] close(4 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7348 [pid 7348] <... set_robust_list resumed>) = 0 [pid 7347] <... memfd_create resumed>) = 3 [pid 7345] <... chdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] rmdir("./375/file1" [pid 7348] chdir("./376" [pid 7345] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... rmdir resumed>) = 0 [pid 7348] <... chdir resumed>) = 0 [pid 7347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7346] <... mount resumed>) = 0 [pid 7345] truncate("./file1", 0 [pid 5074] getdents64(3, [pid 7348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7347] <... mmap resumed>) = 0x7f943d000000 [pid 7346] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7348] <... prctl resumed>) = 0 [pid 7347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7346] <... openat resumed>) = 3 [pid 5074] close(3 [pid 7348] setpgid(0, 0 [pid 7345] <... truncate resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7348] <... setpgid resumed>) = 0 [pid 7345] memfd_create("syzkaller", 0 [pid 7344] <... truncate resumed>) = 0 [pid 5074] rmdir("./375" [pid 7348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7345] <... memfd_create resumed>) = 4 [pid 7344] memfd_create("syzkaller", 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7346] chdir("./file1" [pid 7345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7348] <... openat resumed>) = 3 [pid 7346] <... chdir resumed>) = 0 [pid 7345] <... mmap resumed>) = 0x7f943d000000 [pid 7344] <... memfd_create resumed>) = 4 [pid 7348] write(3, "1000", 4 [pid 7346] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7345] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] mkdir("./376", 0777 [pid 7348] <... write resumed>) = 4 [pid 7344] <... mmap resumed>) = 0x7f943d000000 [pid 7348] close(3) = 0 [pid 7346] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7348] symlink("/dev/binderfs", "./binderfs" [pid 7347] <... write resumed>) = 524288 [pid 7346] truncate("./file1", 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 7348] <... symlink resumed>) = 0 [pid 7344] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7348] memfd_create("syzkaller", 0 [pid 7346] <... truncate resumed>) = 0 [pid 7345] <... write resumed>) = 524288 [pid 7346] memfd_create("syzkaller", 0) = 4 [pid 7348] <... memfd_create resumed>) = 3 [pid 7346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7347] munmap(0x7f943d000000, 138412032 [pid 7348] <... mmap resumed>) = 0x7f943d000000 [pid 7347] <... munmap resumed>) = 0 [pid 7347] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7347] ioctl(4, LOOP_SET_FD, 3 [pid 7348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7344] <... write resumed>) = 524288 [pid 7345] munmap(0x7f943d000000, 138412032) = 0 [pid 7344] munmap(0x7f943d000000, 138412032 [pid 7346] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7344] <... munmap resumed>) = 0 [pid 7345] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7347] <... ioctl resumed>) = 0 [pid 7346] <... write resumed>) = 524288 [pid 7345] close(4 [pid 7344] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7347] close(3 [pid 7344] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... ioctl resumed>) = 0 [pid 7347] <... close resumed>) = 0 [pid 7345] <... close resumed>) = 0 [pid 7347] close(4 [pid 7348] <... write resumed>) = 524288 [pid 7347] <... close resumed>) = 0 [pid 7344] close(4 [pid 7347] mkdir("./file1", 0777 [pid 5074] close(3 [pid 7347] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7347] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 7349 ./strace-static-x86_64: Process 7349 attached [ 276.304515][ T7347] loop1: detected capacity change from 0 to 1024 [pid 7349] set_robust_list(0x555583d53660, 24) = 0 [pid 7349] chdir("./376" [pid 7345] exit_group(0 [pid 7346] munmap(0x7f943d000000, 138412032) = 0 [pid 7349] <... chdir resumed>) = 0 [pid 7345] <... exit_group resumed>) = ? [pid 7349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7346] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7345] +++ exited with 0 +++ [pid 7346] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7345, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7346] close(4) = 0 [pid 7344] <... close resumed>) = 0 [pid 7348] munmap(0x7f943d000000, 138412032 [pid 7349] <... prctl resumed>) = 0 [pid 5075] umount2("./374", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7349] setpgid(0, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7349] <... setpgid resumed>) = 0 [pid 7348] <... munmap resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7348] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 7344] exit_group(0 [pid 7349] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 7348] <... openat resumed>) = 4 [pid 7349] write(3, "1000", 4 [pid 7347] <... mount resumed>) = 0 [pid 7344] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7349] <... write resumed>) = 4 [pid 7347] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7344] +++ exited with 0 +++ [pid 5075] getdents64(3, [pid 7349] close(3 [pid 7347] <... openat resumed>) = 3 [pid 7346] exit_group(0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7344, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7349] <... close resumed>) = 0 [pid 7347] chdir("./file1" [pid 7346] <... exit_group resumed>) = ? [pid 5075] umount2("./374/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7348] ioctl(4, LOOP_SET_FD, 3 [pid 7349] symlink("/dev/binderfs", "./binderfs" [pid 7347] <... chdir resumed>) = 0 [pid 7346] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7349] <... symlink resumed>) = 0 [pid 7347] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./374/binderfs", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7346, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7349] memfd_create("syzkaller", 0 [pid 7347] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7347] truncate("./file1", 0 [pid 5075] unlink("./374/binderfs") = 0 [pid 5076] umount2("./371", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./376", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7349] <... memfd_create resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7348] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7349] <... mmap resumed>) = 0x7f943d000000 [pid 7348] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 7349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7348] <... close resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5073] newfstatat(3, "", [pid 7347] <... truncate resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7347] memfd_create("syzkaller", 0 [pid 5073] getdents64(3, [pid 7347] <... memfd_create resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7348] close(4 [pid 7347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] umount2("./376/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7347] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(3, [pid 7348] <... close resumed>) = 0 [pid 7347] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7349] <... write resumed>) = 524288 [pid 7348] mkdir("./file1", 0777 [pid 5076] umount2("./371/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./374/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7348] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7348] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] newfstatat(AT_FDCWD, "./371/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./376/binderfs", [pid 5076] unlink("./371/binderfs" [pid 5075] openat(AT_FDCWD, "./374/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 276.405056][ T7348] loop0: detected capacity change from 0 to 1024 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] unlink("./376/binderfs" [pid 5076] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7348] <... mount resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5073] <... unlink resumed>) = 0 [pid 7348] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7348] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 7348] chdir("./file1") = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7348] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] getdents64(4, [pid 7349] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7349] <... munmap resumed>) = 0 [pid 7348] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(4 [pid 7348] truncate("./file1", 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./374/file1") = 0 [pid 7349] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] getdents64(3, [pid 7349] <... openat resumed>) = 4 [pid 7349] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7348] <... truncate resumed>) = 0 [pid 5075] close(3 [pid 7348] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 7348] <... memfd_create resumed>) = 4 [pid 7347] <... write resumed>) = 524288 [pid 5075] rmdir("./374") = 0 [pid 7348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] mkdir("./375", 0777 [pid 7348] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... mkdir resumed>) = 0 [pid 7347] munmap(0x7f943d000000, 138412032 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7348] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7347] <... munmap resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD) = 0 [pid 5075] close(3) = 0 [pid 7347] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7347] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = 0 [pid 7347] close(4./strace-static-x86_64: Process 7350 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7350 [pid 7349] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7350] set_robust_list(0x555583d53660, 24) = 0 [pid 7349] close(3 [pid 5076] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7350] chdir("./375" [pid 7349] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7348] <... write resumed>) = 524288 [pid 5076] newfstatat(AT_FDCWD, "./371/file1", [pid 7350] <... chdir resumed>) = 0 [pid 7349] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7349] <... close resumed>) = 0 [pid 7347] <... close resumed>) = 0 [pid 7350] <... prctl resumed>) = 0 [pid 7349] mkdir("./file1", 0777 [pid 7347] exit_group(0 [pid 7350] setpgid(0, 0 [pid 7349] <... mkdir resumed>) = 0 [pid 7347] <... exit_group resumed>) = ? [pid 7350] <... setpgid resumed>) = 0 [pid 7347] +++ exited with 0 +++ [pid 7350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7349] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7347, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 276.479192][ T7349] loop3: detected capacity change from 0 to 1024 [pid 7348] munmap(0x7f943d000000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./376/file1", [pid 5076] umount2("./371/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7350] write(3, "1000", 4) = 4 [pid 7350] close(3) = 0 [pid 7350] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7350] memfd_create("syzkaller", 0 [pid 7349] <... mount resumed>) = 0 [pid 7350] <... memfd_create resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] umount2("./376", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7350] <... mmap resumed>) = 0x7f943d000000 [pid 7349] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./371/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7349] <... openat resumed>) = 3 [pid 7348] <... munmap resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7349] chdir("./file1" [pid 5076] newfstatat(4, "", [pid 7348] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5072] newfstatat(3, "", [pid 5073] openat(AT_FDCWD, "./376/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7349] <... chdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7349] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7348] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(4, [pid 5073] newfstatat(4, "", [pid 5072] getdents64(3, [pid 7349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7349] truncate("./file1", 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7349] <... truncate resumed>) = 0 [pid 5076] close(4 [pid 5073] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 7349] memfd_create("syzkaller", 0 [pid 7348] close(4 [pid 5076] rmdir("./371/file1" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] umount2("./376/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7349] <... memfd_create resumed>) = 4 [pid 7349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7348] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./376/binderfs", [pid 5076] getdents64(3, [pid 7349] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(3 [pid 5073] close(4 [pid 5076] <... close resumed>) = 0 [pid 5072] unlink("./376/binderfs" [pid 5076] rmdir("./371" [pid 5073] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] rmdir("./376/file1" [pid 5072] <... unlink resumed>) = 0 [pid 7350] <... write resumed>) = 524288 [pid 5076] mkdir("./372", 0777 [pid 7350] munmap(0x7f943d000000, 138412032 [pid 7349] <... write resumed>) = 524288 [pid 7350] <... munmap resumed>) = 0 [pid 7350] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7350] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7350] ioctl(4, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 7350] <... ioctl resumed>) = 0 [pid 7349] munmap(0x7f943d000000, 138412032 [pid 7348] exit_group(0 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7350] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 7350] close(4 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 7348] <... exit_group resumed>) = ? [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] close(3 [pid 5072] <... umount2 resumed>) = 0 [pid 7349] <... munmap resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7350] <... close resumed>) = 0 [pid 7349] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7348] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5073] rmdir("./376" [pid 7349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7349] close(4) = 0 [pid 5076] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... close resumed>) = 0 [pid 5073] mkdir("./377", 0777 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7348, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7350] close(3) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] newfstatat(AT_FDCWD, "./376/file1", [pid 5071] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 7351 attached [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7351 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... restart_syscall resumed>) = 0 [pid 7349] exit_group(0 [pid 7351] set_robust_list(0x555583d53660, 24 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7349] <... exit_group resumed>) = ? [pid 7351] <... set_robust_list resumed>) = 0 [pid 7349] +++ exited with 0 +++ [pid 5072] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7349, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7351] chdir("./372" [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5071] umount2("./376", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7351] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... restart_syscall resumed>) = 0 [pid 5074] umount2("./376", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./376/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./376/binderfs") = 0 [pid 5074] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./376/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... openat resumed>) = 4 [pid 7351] <... prctl resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7351] setpgid(0, 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 5071] newfstatat(3, "", [pid 7351] <... setpgid resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] newfstatat(AT_FDCWD, "./376/file1", [pid 7351] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./376/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7351] write(3, "1000", 4 [pid 5074] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7351] <... write resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./376/binderfs", [pid 7351] close(3 [pid 5072] getdents64(4, [pid 7351] <... close resumed>) = 0 [pid 7350] truncate("./file1", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7351] symlink("/dev/binderfs", "./binderfs" [pid 5072] close(4 [pid 5071] unlink("./376/binderfs" [pid 5072] <... close resumed>) = 0 [pid 7350] <... truncate resumed>) = -1 ENOENT (No such file or directory) [pid 5074] openat(AT_FDCWD, "./376/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./376/file1" [pid 5071] <... unlink resumed>) = 0 [pid 7351] <... symlink resumed>) = 0 [pid 7350] memfd_create("syzkaller", 0 [pid 5074] <... openat resumed>) = 4 [pid 5071] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7350] <... memfd_create resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 5072] <... rmdir resumed>) = 0 [pid 7351] memfd_create("syzkaller", 0 [pid 7350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5071] <... umount2 resumed>) = 0 [pid 7350] <... mmap resumed>) = 0x7f943d000000 [pid 5074] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] <... ioctl resumed>) = 0 [pid 5072] close(3 [pid 5071] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5072] <... close resumed>) = 0 [pid 7351] <... memfd_create resumed>) = 3 [pid 5074] rmdir("./376/file1" [pid 5072] rmdir("./376" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./376/file1", [pid 7351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5074] <... close resumed>) = 0 [pid 5073] close(3 [pid 5072] mkdir("./377", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./376") = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7350] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] mkdir("./377", 0777 [pid 5071] openat(AT_FDCWD, "./376/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", [pid 5072] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] getdents64(4, [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7352 ./strace-static-x86_64: Process 7353 attached ./strace-static-x86_64: Process 7352 attached [pid 5071] getdents64(4, [pid 7350] munmap(0x7f943d000000, 138412032 [pid 7352] set_robust_list(0x555583d53660, 24 [pid 7353] set_robust_list(0x555583d53660, 24 [pid 7350] <... munmap resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7353 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7353] <... set_robust_list resumed>) = 0 [pid 7352] <... set_robust_list resumed>) = 0 [pid 5071] close(4) = 0 [pid 7352] chdir("./377" [pid 5071] rmdir("./376/file1" [pid 7353] chdir("./377" [pid 7352] <... chdir resumed>) = 0 [pid 7352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7353] <... chdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7352] <... prctl resumed>) = 0 [pid 7352] setpgid(0, 0 [pid 7353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7352] <... setpgid resumed>) = 0 [pid 5071] getdents64(3, [pid 7353] <... prctl resumed>) = 0 [pid 7352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7353] setpgid(0, 0 [pid 7350] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] close(3 [pid 7353] <... setpgid resumed>) = 0 [pid 7350] <... openat resumed>) = 4 [pid 7350] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... close resumed>) = 0 [pid 7353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7352] <... openat resumed>) = 3 [pid 7351] <... write resumed>) = 524288 [pid 5071] rmdir("./376" [pid 7352] write(3, "1000", 4 [pid 7353] <... openat resumed>) = 3 [pid 7352] <... write resumed>) = 4 [pid 7351] munmap(0x7f943d000000, 138412032 [pid 5071] <... rmdir resumed>) = 0 [pid 7353] write(3, "1000", 4 [pid 7351] <... munmap resumed>) = 0 [pid 7353] <... write resumed>) = 4 [pid 5071] mkdir("./377", 0777 [pid 7353] close(3 [pid 7352] close(3 [pid 7353] <... close resumed>) = 0 [pid 7353] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... mkdir resumed>) = 0 [pid 7353] <... symlink resumed>) = 0 [pid 7352] <... close resumed>) = 0 [pid 7351] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7350] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7352] symlink("/dev/binderfs", "./binderfs" [pid 7351] <... openat resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 7353] memfd_create("syzkaller", 0 [pid 7352] <... symlink resumed>) = 0 [pid 7351] ioctl(4, LOOP_SET_FD, 3 [pid 7350] close(3 [pid 7353] <... memfd_create resumed>) = 3 [pid 7352] memfd_create("syzkaller", 0 [pid 7350] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7352] <... memfd_create resumed>) = 3 [pid 7352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7350] close(4) = 0 [pid 7352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7350] mkdir("./file1", 0777) = 0 [pid 7353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7350] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7353] <... write resumed>) = 524288 [pid 7351] <... ioctl resumed>) = 0 [pid 7351] close(3) = 0 [pid 7351] close(4 [pid 5074] <... ioctl resumed>) = 0 [pid 7351] <... close resumed>) = 0 [pid 5074] close(3 [ 276.772812][ T7350] loop4: detected capacity change from 0 to 1024 [ 276.800849][ T7351] loop5: detected capacity change from 0 to 1024 [ 276.843288][ T7350] [ 276.845693][ T7350] ====================================================== [ 276.852727][ T7350] WARNING: possible circular locking dependency detected [ 276.859797][ T7350] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 276.866492][ T7350] ------------------------------------------------------ [ 276.873525][ T7350] syz-executor207/7350 is trying to acquire lock: [ 276.879989][ T7350] ffff888078973dc8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x383/0x14f0 [ 276.890961][ T7350] [ 276.890961][ T7350] but task is already holding lock: [ 276.898341][ T7350] ffff88807b45c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 [ 276.907888][ T7350] [ 276.907888][ T7350] which lock already depends on the new lock. [ 276.907888][ T7350] [ 276.918301][ T7350] [ 276.918301][ T7350] the existing dependency chain (in reverse order) is: [ 276.927317][ T7350] [ 276.927317][ T7350] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 276.935080][ T7350] lock_acquire+0x1e4/0x530 [ 276.940120][ T7350] __mutex_lock+0x136/0xd70 [ 276.945189][ T7350] hfsplus_file_truncate+0x811/0xb50 [ 276.951007][ T7350] hfsplus_setattr+0x1ce/0x280 [ 276.956331][ T7350] notify_change+0xb9f/0xe70 [ 276.961474][ T7350] do_truncate+0x220/0x310 [ 276.966423][ T7350] vfs_truncate+0x2e1/0x3b0 [ 276.971457][ T7350] do_sys_truncate+0xde/0x190 [ 276.976688][ T7350] do_syscall_64+0xfd/0x240 [ 276.981718][ T7350] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 276.988143][ T7350] [ 276.988143][ T7350] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 276.997203][ T7350] validate_chain+0x18cb/0x58e0 [ 277.002587][ T7350] __lock_acquire+0x1346/0x1fd0 [ 277.008062][ T7350] lock_acquire+0x1e4/0x530 [ 277.013129][ T7350] __mutex_lock+0x136/0xd70 [ 277.018179][ T7350] hfsplus_get_block+0x383/0x14f0 [ 277.023733][ T7350] block_read_full_folio+0x430/0xe10 [ 277.029559][ T7350] filemap_read_folio+0x1a2/0x790 [ 277.035118][ T7350] do_read_cache_folio+0x134/0x820 [ 277.040763][ T7350] do_read_cache_page+0x30/0x200 [ 277.046244][ T7350] __hfs_bnode_create+0x487/0x770 [ 277.051822][ T7350] hfsplus_bnode_find+0x237/0x10c0 [ 277.057476][ T7350] hfsplus_brec_find+0x183/0x570 [ 277.062962][ T7350] hfsplus_brec_read+0x2b/0x110 [ 277.068354][ T7350] hfsplus_find_cat+0x17f/0x5d0 [ 277.073731][ T7350] hfsplus_iget+0x489/0x670 [ 277.078776][ T7350] hfsplus_fill_super+0xca8/0x1ca0 [ 277.084438][ T7350] mount_bdev+0x20c/0x2d0 [ 277.089342][ T7350] legacy_get_tree+0xf0/0x190 [ 277.094562][ T7350] vfs_get_tree+0x92/0x2a0 [ 277.099515][ T7350] do_new_mount+0x2be/0xb40 [ 277.104556][ T7350] __se_sys_mount+0x2d9/0x3c0 [ 277.109772][ T7350] do_syscall_64+0xfd/0x240 [ 277.114813][ T7350] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 277.121244][ T7350] [ 277.121244][ T7350] other info that might help us debug this: [ 277.121244][ T7350] [ 277.131474][ T7350] Possible unsafe locking scenario: [ 277.131474][ T7350] [ 277.138935][ T7350] CPU0 CPU1 [ 277.144306][ T7350] ---- ---- [ 277.149672][ T7350] lock(&tree->tree_lock); [ 277.154190][ T7350] lock(&HFSPLUS_I(inode)->extents_lock); [ 277.162636][ T7350] lock(&tree->tree_lock); [ 277.169680][ T7350] lock(&HFSPLUS_I(inode)->extents_lock); [ 277.175523][ T7350] [ 277.175523][ T7350] *** DEADLOCK *** [ 277.175523][ T7350] [ 277.183687][ T7350] 2 locks held by syz-executor207/7350: [ 277.189236][ T7350] #0: ffff8880120d20e0 (&type->s_umount_key#42/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 277.199449][ T7350] #1: ffff88807b45c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x14a/0x1c0 [ 277.209433][ T7350] [ 277.209433][ T7350] stack backtrace: [ 277.215348][ T7350] CPU: 0 PID: 7350 Comm: syz-executor207 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 277.225425][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 277.235489][ T7350] Call Trace: [ 277.238856][ T7350] [ 277.241795][ T7350] dump_stack_lvl+0x241/0x360 [ 277.246511][ T7350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.251745][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.256620][ T7350] ? print_circular_bug+0x130/0x1a0 [ 277.261853][ T7350] check_noncircular+0x36a/0x4a0 [ 277.266841][ T7350] ? mark_lock+0x9a/0x350 [ 277.271191][ T7350] ? __pfx_check_noncircular+0x10/0x10 [ 277.276696][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.281586][ T7350] ? lockdep_lock+0x123/0x2b0 [ 277.286309][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.291177][ T7350] ? mark_lock+0x9a/0x350 [ 277.295523][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.300390][ T7350] ? _find_first_zero_bit+0xd4/0x100 [ 277.305740][ T7350] validate_chain+0x18cb/0x58e0 [ 277.310647][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.315517][ T7350] ? __pfx_validate_chain+0x10/0x10 [ 277.320742][ T7350] ? is_bpf_text_address+0x26/0x2b0 [ 277.325964][ T7350] ? __pfx_lock_release+0x10/0x10 [ 277.331016][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.335891][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.340768][ T7350] ? deref_stack_reg+0x1c7/0x260 [ 277.345735][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.350619][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.355485][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.360346][ T7350] ? look_up_lock_class+0x77/0x160 [ 277.365476][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.370340][ T7350] ? register_lock_class+0x102/0x980 [ 277.375663][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.380617][ T7350] ? validate_chain+0x11b/0x58e0 [ 277.385574][ T7350] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 277.391797][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.396669][ T7350] ? __pfx_register_lock_class+0x10/0x10 [ 277.402313][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.407180][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.412392][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.417258][ T7350] ? mark_lock+0x9a/0x350 [ 277.421602][ T7350] __lock_acquire+0x1346/0x1fd0 [ 277.426480][ T7350] lock_acquire+0x1e4/0x530 [ 277.430995][ T7350] ? hfsplus_get_block+0x383/0x14f0 [ 277.436301][ T7350] ? __pfx_lock_acquire+0x10/0x10 [ 277.441523][ T7350] ? alloc_buffer_head+0x2d/0x2a0 [ 277.446580][ T7350] ? folio_alloc_buffers+0x2da/0x840 [ 277.451880][ T7350] ? __pfx___might_resched+0x10/0x10 [ 277.457362][ T7350] ? do_read_cache_page+0x30/0x200 [ 277.462501][ T7350] ? __hfs_bnode_create+0x487/0x770 [ 277.467746][ T7350] ? hfsplus_bnode_find+0x237/0x10c0 [ 277.473052][ T7350] ? hfsplus_brec_find+0x183/0x570 [ 277.478182][ T7350] ? hfsplus_brec_read+0x2b/0x110 [ 277.483249][ T7350] ? hfsplus_find_cat+0x17f/0x5d0 [ 277.488288][ T7350] ? hfsplus_iget+0x489/0x670 [ 277.493101][ T7350] ? hfsplus_fill_super+0xca8/0x1ca0 [ 277.498416][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.503286][ T7350] __mutex_lock+0x136/0xd70 [ 277.507807][ T7350] ? hfsplus_get_block+0x383/0x14f0 [ 277.513016][ T7350] ? hfsplus_get_block+0x383/0x14f0 [ 277.518355][ T7350] ? __pfx___mutex_lock+0x10/0x10 [ 277.523679][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.528736][ T7350] hfsplus_get_block+0x383/0x14f0 [ 277.533788][ T7350] ? __pfx_hfsplus_get_block+0x10/0x10 [ 277.539266][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.544136][ T7350] ? _raw_spin_unlock+0x28/0x50 [ 277.549004][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.553863][ T7350] ? create_empty_buffers+0x53e/0x740 [ 277.559262][ T7350] block_read_full_folio+0x430/0xe10 [ 277.564591][ T7350] ? __pfx_hfsplus_get_block+0x10/0x10 [ 277.570063][ T7350] ? __pfx_block_read_full_folio+0x10/0x10 [ 277.575892][ T7350] ? __pfx_lru_add_fn+0x10/0x10 [ 277.580779][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.585739][ T7350] ? folio_add_lru+0x58f/0xd70 [ 277.590522][ T7350] filemap_read_folio+0x1a2/0x790 [ 277.595565][ T7350] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 277.601132][ T7350] ? __pfx_filemap_read_folio+0x10/0x10 [ 277.606773][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.611658][ T7350] ? do_raw_spin_lock+0x14f/0x370 [ 277.616725][ T7350] do_read_cache_folio+0x134/0x820 [ 277.621870][ T7350] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 277.627461][ T7350] do_read_cache_page+0x30/0x200 [ 277.632447][ T7350] __hfs_bnode_create+0x487/0x770 [ 277.637502][ T7350] ? __pfx___hfs_bnode_create+0x10/0x10 [ 277.643159][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.648028][ T7350] ? do_raw_spin_unlock+0x13c/0x8b0 [ 277.653274][ T7350] hfsplus_bnode_find+0x237/0x10c0 [ 277.658411][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.663284][ T7350] ? deref_stack_reg+0x1c7/0x260 [ 277.668267][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.673138][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.678003][ T7350] ? __pfx_hfsplus_bnode_find+0x10/0x10 [ 277.683584][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.688469][ T7350] ? is_bpf_text_address+0x28d/0x2b0 [ 277.693775][ T7350] ? is_bpf_text_address+0x26/0x2b0 [ 277.698995][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.703881][ T7350] ? look_up_lock_class+0x77/0x160 [ 277.709018][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.713904][ T7350] ? register_lock_class+0x102/0x980 [ 277.719203][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.724065][ T7350] ? unwind_get_return_address+0x91/0xc0 [ 277.729717][ T7350] ? entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 277.735801][ T7350] hfsplus_brec_find+0x183/0x570 [ 277.741027][ T7350] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 277.746710][ T7350] ? __pfx_hfsplus_brec_find+0x10/0x10 [ 277.752191][ T7350] ? __lock_acquire+0x1346/0x1fd0 [ 277.757233][ T7350] hfsplus_brec_read+0x2b/0x110 [ 277.762126][ T7350] hfsplus_find_cat+0x17f/0x5d0 [ 277.766987][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.771854][ T7350] ? __pfx_hfsplus_find_cat+0x10/0x10 [ 277.777298][ T7350] ? rcu_is_watching+0x15/0xb0 [ 277.782091][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.786961][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.791824][ T7350] ? __kmalloc+0x251/0x4a0 [ 277.796250][ T7350] ? hfsplus_find_init+0x85/0x1c0 [ 277.801299][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.806162][ T7350] ? hfsplus_find_init+0x14a/0x1c0 [ 277.811289][ T7350] hfsplus_iget+0x489/0x670 [ 277.815826][ T7350] ? __pfx_hfsplus_iget+0x10/0x10 [ 277.820872][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.825746][ T7350] hfsplus_fill_super+0xca8/0x1ca0 [ 277.830880][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.835748][ T7350] ? string+0x26a/0x2b0 [ 277.839930][ T7350] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 277.845527][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.850474][ T7350] ? snprintf+0xda/0x120 [ 277.854737][ T7350] ? __pfx_lock_release+0x10/0x10 [ 277.859770][ T7350] ? do_raw_spin_lock+0x14f/0x370 [ 277.864825][ T7350] ? sb_set_blocksize+0x99/0x100 [ 277.869781][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.874650][ T7350] ? setup_bdev_super+0x4b7/0x5b0 [ 277.879690][ T7350] mount_bdev+0x20c/0x2d0 [ 277.884034][ T7350] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 277.889601][ T7350] ? __pfx_mount_bdev+0x10/0x10 [ 277.894468][ T7350] ? vfs_parse_fs_string+0x190/0x230 [ 277.899794][ T7350] legacy_get_tree+0xf0/0x190 [ 277.904579][ T7350] ? __pfx_hfsplus_mount+0x10/0x10 [ 277.909716][ T7350] vfs_get_tree+0x92/0x2a0 [ 277.914152][ T7350] do_new_mount+0x2be/0xb40 [ 277.918690][ T7350] ? ns_capable+0x8a/0xf0 [ 277.923069][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.927935][ T7350] ? __pfx_do_new_mount+0x10/0x10 [ 277.932990][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.937875][ T7350] __se_sys_mount+0x2d9/0x3c0 [ 277.942582][ T7350] ? __pfx___se_sys_mount+0x10/0x10 [ 277.947807][ T7350] ? do_syscall_64+0x10a/0x240 [ 277.952584][ T7350] ? srso_return_thunk+0x5/0x5f [ 277.957452][ T7350] ? __x64_sys_mount+0x20/0xc0 [ 277.962260][ T7350] do_syscall_64+0xfd/0x240 [ 277.966806][ T7350] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 277.972721][ T7350] RIP: 0033:0x7f94455ad69a [ 277.977163][ T7350] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 7351] mkdir("./file1", 0777) = 0 [pid 5074] <... close resumed>) = 0 [pid 7353] munmap(0x7f943d000000, 138412032 [pid 7352] <... write resumed>) = 524288 [pid 7351] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7353] <... munmap resumed>) = 0 [pid 7353] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 277.996875][ T7350] RSP: 002b:00007ffd7f859ac8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 278.005327][ T7350] RAX: ffffffffffffffda RBX: 00007ffd7f859af0 RCX: 00007f94455ad69a [ 278.013312][ T7350] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd7f859af0 [ 278.021290][ T7350] RBP: 00007ffd7f859b30 R08: 00007ffd7f859b30 R09: 0000000000000646 [ 278.029283][ T7350] R10: 000000000000005a R11: 0000000000000286 R12: 000000000000064c [ 278.037442][ T7350] R13: 0000000000000003 R14: 0000000000080000 R15: 000000000000064a [ 278.045433][ T7350] [pid 7353] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 7354 attached [pid 7352] munmap(0x7f943d000000, 138412032 [pid 7351] <... mount resumed>) = 0 [pid 7351] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7351] chdir("./file1") = 0 [pid 7351] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7351] truncate("./file1", 0) = 0 [pid 7351] memfd_create("syzkaller", 0) = 4 [pid 7351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7354] set_robust_list(0x555583d53660, 24 [pid 7352] <... munmap resumed>) = 0 [pid 7351] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7354 [pid 7353] <... ioctl resumed>) = 0 [pid 7354] <... set_robust_list resumed>) = 0 [pid 7352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7353] close(3) = 0 [pid 7353] close(4) = 0 [pid 7353] mkdir("./file1", 0777 [pid 7352] <... openat resumed>) = 4 [pid 7352] ioctl(4, LOOP_SET_FD, 3 [pid 7354] chdir("./377" [pid 7353] <... mkdir resumed>) = 0 [pid 7353] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7351] <... write resumed>) = 524288 [pid 7354] <... chdir resumed>) = 0 [pid 7353] <... mount resumed>) = 0 [pid 7352] <... ioctl resumed>) = 0 [pid 7350] <... mount resumed>) = -1 EIO (Input/output error) [pid 5071] <... ioctl resumed>) = 0 [pid 7354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7352] close(3 [pid 7354] <... prctl resumed>) = 0 [pid 7352] <... close resumed>) = 0 [pid 7353] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7352] close(4 [pid 7351] munmap(0x7f943d000000, 138412032 [pid 5071] close(3 [pid 7352] <... close resumed>) = 0 [pid 7354] setpgid(0, 0 [pid 7353] <... openat resumed>) = 3 [pid 7352] mkdir("./file1", 0777 [pid 7351] <... munmap resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7354] <... setpgid resumed>) = 0 [pid 7353] chdir("./file1" [pid 7351] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7353] <... chdir resumed>) = 0 [pid 7352] <... mkdir resumed>) = 0 [pid 7351] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7353] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7351] close(4 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7355 [pid 7353] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7351] <... close resumed>) = 0 [pid 7353] truncate("./file1", 0 [pid 7351] exit_group(0 [pid 7353] <... truncate resumed>) = 0 [pid 7351] <... exit_group resumed>) = ? [pid 7353] memfd_create("syzkaller", 0 [pid 7351] +++ exited with 0 +++ [pid 7353] <... memfd_create resumed>) = 4 [pid 7353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [ 278.059696][ T7353] loop1: detected capacity change from 0 to 1024 [ 278.067307][ T7350] hfsplus: failed to load root directory [ 278.078072][ T7352] loop2: detected capacity change from 0 to 1024 [pid 7353] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7350] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 7355 attached [pid 7354] <... openat resumed>) = 3 [pid 7353] <... write resumed>) = 524288 [pid 7352] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7350] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7351, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] umount2("./372", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7353] munmap(0x7f943d000000, 138412032 [pid 7350] ioctl(3, LOOP_CLR_FD [pid 7353] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7353] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7353] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 7355] set_robust_list(0x555583d53660, 24 [pid 7354] write(3, "1000", 4 [pid 7353] <... close resumed>) = 0 [pid 7352] <... mount resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7355] <... set_robust_list resumed>) = 0 [pid 7354] <... write resumed>) = 4 [pid 7352] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 7352] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7352] chdir("./file1" [pid 7355] chdir("./377" [pid 7354] close(3 [pid 7352] <... chdir resumed>) = 0 [pid 5076] umount2("./372/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7354] <... close resumed>) = 0 [pid 7352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7354] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7352] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./372/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7352] truncate("./file1", 0 [pid 7354] <... symlink resumed>) = 0 [pid 5076] unlink("./372/binderfs" [pid 7355] <... chdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7354] memfd_create("syzkaller", 0 [pid 5076] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7355] setpgid(0, 0) = 0 [pid 7353] exit_group(0 [pid 7355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7354] <... memfd_create resumed>) = 3 [pid 7353] <... exit_group resumed>) = ? [pid 7352] <... truncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7355] <... openat resumed>) = 3 [pid 7354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7352] memfd_create("syzkaller", 0 [pid 5076] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7355] write(3, "1000", 4 [pid 7354] <... mmap resumed>) = 0x7f943d000000 [pid 7352] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7355] <... write resumed>) = 4 [pid 7352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./372/file1", [pid 7355] close(3 [pid 7353] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7355] <... close resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7353, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7355] symlink("/dev/binderfs", "./binderfs" [pid 7352] <... mmap resumed>) = 0x7f943d000000 [pid 5076] umount2("./372/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7355] <... symlink resumed>) = 0 [pid 7354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... restart_syscall resumed>) = 0 [pid 7355] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "./372/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7355] <... memfd_create resumed>) = 3 [pid 7355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(4, "", [pid 5072] umount2("./377", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7355] <... mmap resumed>) = 0x7f943d000000 [pid 7352] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7354] <... write resumed>) = 524288 [pid 5076] getdents64(4, [pid 5072] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] getdents64(4, [pid 5072] umount2("./377/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(4 [pid 5072] newfstatat(AT_FDCWD, "./377/binderfs", [pid 5076] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7355] <... write resumed>) = 524288 [pid 5076] rmdir("./372/file1" [pid 5072] unlink("./377/binderfs") = 0 [pid 5072] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7354] munmap(0x7f943d000000, 138412032 [pid 7350] <... ioctl resumed>) = 0 [pid 7350] close(3 [pid 7354] <... munmap resumed>) = 0 [pid 7350] <... close resumed>) = 0 [pid 7350] exit_group(0 [pid 7355] munmap(0x7f943d000000, 138412032 [pid 7354] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7352] <... write resumed>) = 524288 [pid 7350] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7355] <... munmap resumed>) = 0 [pid 7354] <... openat resumed>) = 4 [pid 7352] munmap(0x7f943d000000, 138412032 [pid 7350] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7350, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7354] ioctl(4, LOOP_SET_FD, 3 [pid 7352] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 5072] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7355] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./375", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7355] <... openat resumed>) = 4 [pid 5076] rmdir("./372" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./377/file1", [pid 5076] <... rmdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7355] ioctl(4, LOOP_SET_FD, 3 [pid 7352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] mkdir("./373", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7352] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... mkdir resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5072] openat(AT_FDCWD, "./377/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5075] getdents64(3, [pid 5072] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./375/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 7355] <... ioctl resumed>) = 0 [pid 7352] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5075] newfstatat(AT_FDCWD, "./375/binderfs", [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./377/file1" [pid 7352] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5075] unlink("./375/binderfs" [pid 5072] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5072] rmdir("./377" [pid 5075] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./375/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./375/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] mkdir("./378", 0777 [pid 7354] <... ioctl resumed>) = 0 [pid 7352] exit_group(0 [pid 5075] <... openat resumed>) = 4 [pid 5072] <... mkdir resumed>) = 0 [pid 7352] <... exit_group resumed>) = ? [pid 5075] newfstatat(4, "", [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7352] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7352, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7354] close(3 [pid 5075] getdents64(4, [pid 7354] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./377", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7354] close(4 [pid 5075] close(4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7354] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7354] mkdir("./file1", 0777 [pid 5075] rmdir("./375/file1" [pid 7354] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7354] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] getdents64(3, [pid 5073] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] close(3 [pid 5073] umount2("./377/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./375") = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./376", 0777 [pid 5073] newfstatat(AT_FDCWD, "./377/binderfs", [pid 7354] <... mount resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7354] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] unlink("./377/binderfs" [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7354] <... openat resumed>) = 3 [pid 5073] <... unlink resumed>) = 0 [pid 5073] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7354] chdir("./file1") = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7355] close(3 [pid 5075] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5075] close(3) = 0 [pid 7355] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7355] close(4 [pid 7354] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = 0 [pid 7355] <... close resumed>) = 0 [pid 7354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7354] truncate("./file1", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./377/file1", ./strace-static-x86_64: Process 7356 attached [pid 7355] mkdir("./file1", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7356] set_robust_list(0x555583d53660, 24 [pid 7355] <... mkdir resumed>) = 0 [pid 5073] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7356] <... set_robust_list resumed>) = 0 [pid 7356] chdir("./376" [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7356 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7356] <... chdir resumed>) = 0 [pid 7355] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] openat(AT_FDCWD, "./377/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7354] <... truncate resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 7354] memfd_create("syzkaller", 0 [pid 5073] newfstatat(4, "", [pid 7356] <... prctl resumed>) = 0 [pid 7354] <... memfd_create resumed>) = 4 [pid 7356] setpgid(0, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7356] <... setpgid resumed>) = 0 [pid 7354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] getdents64(4, [pid 7356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7354] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [ 278.211442][ T7354] loop3: detected capacity change from 0 to 1024 [ 278.224605][ T7355] loop0: detected capacity change from 0 to 1024 [pid 7356] <... openat resumed>) = 3 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./377/file1" [pid 7356] write(3, "1000", 4 [pid 7354] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 7356] <... write resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 7356] close(3 [pid 5073] rmdir("./377" [pid 7356] <... close resumed>) = 0 [pid 7356] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... rmdir resumed>) = 0 [pid 7356] <... symlink resumed>) = 0 [pid 5073] mkdir("./378", 0777 [pid 5076] close(3) = 0 [pid 7356] memfd_create("syzkaller", 0 [pid 7355] <... mount resumed>) = 0 [pid 7354] <... write resumed>) = 524288 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 7355] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7355] chdir("./file1") = 0 [pid 7355] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7355] truncate("./file1", 0 [pid 7356] <... memfd_create resumed>) = 3 [pid 7354] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 7357 attached [pid 7356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7355] <... truncate resumed>) = 0 [pid 7354] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7357 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... ioctl resumed>) = 0 [pid 7357] set_robust_list(0x555583d53660, 24 [pid 7355] memfd_create("syzkaller", 0 [pid 7354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7357] <... set_robust_list resumed>) = 0 [pid 7356] <... mmap resumed>) = 0x7f943d000000 [pid 7355] <... memfd_create resumed>) = 4 [pid 7354] close(4 [pid 5072] close(3 [pid 7357] chdir("./373" [pid 7356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... close resumed>) = 0 [pid 7357] <... chdir resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7355] <... mmap resumed>) = 0x7f943d000000 ./strace-static-x86_64: Process 7358 attached [pid 7357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7358] set_robust_list(0x555583d53660, 24 [pid 7357] <... prctl resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7358 [pid 7357] setpgid(0, 0) = 0 [pid 7355] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7354] <... close resumed>) = 0 [pid 7358] <... set_robust_list resumed>) = 0 [pid 7358] chdir("./378" [pid 7357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7358] <... chdir resumed>) = 0 [pid 7357] <... openat resumed>) = 3 [pid 7355] <... write resumed>) = 524288 [pid 7354] exit_group(0 [pid 7358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7357] write(3, "1000", 4 [pid 7358] setpgid(0, 0 [pid 7357] <... write resumed>) = 4 [pid 7357] close(3 [pid 7358] <... setpgid resumed>) = 0 [pid 7354] <... exit_group resumed>) = ? [pid 7358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7357] <... close resumed>) = 0 [pid 7354] +++ exited with 0 +++ [pid 7357] symlink("/dev/binderfs", "./binderfs" [pid 7358] <... openat resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7354, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7358] write(3, "1000", 4 [pid 7357] <... symlink resumed>) = 0 [pid 7356] <... write resumed>) = 524288 [pid 7356] munmap(0x7f943d000000, 138412032 [pid 7358] <... write resumed>) = 4 [pid 7357] memfd_create("syzkaller", 0 [pid 7355] munmap(0x7f943d000000, 138412032 [pid 5074] umount2("./377", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7356] <... munmap resumed>) = 0 [pid 7358] close(3 [pid 7357] <... memfd_create resumed>) = 3 [pid 7355] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7356] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7355] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7356] ioctl(4, LOOP_SET_FD, 3 [pid 7355] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7356] <... ioctl resumed>) = 0 [pid 7355] close(4 [pid 5074] newfstatat(3, "", [pid 7358] <... close resumed>) = 0 [pid 5073] close(3 [pid 7356] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7358] symlink("/dev/binderfs", "./binderfs" [pid 7356] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7356] close(4 [pid 5074] getdents64(3, [pid 7356] <... close resumed>) = 0 [pid 7356] mkdir("./file1", 0777 [pid 7358] <... symlink resumed>) = 0 [pid 7356] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7356] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, ""./strace-static-x86_64: Process 7359 attached [pid 7358] memfd_create("syzkaller", 0 [pid 7357] <... mmap resumed>) = 0x7f943d000000 [pid 7355] <... close resumed>) = 0 [pid 5074] umount2("./377/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7359] set_robust_list(0x555583d53660, 24 [pid 7357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7359] <... set_robust_list resumed>) = 0 [pid 7359] chdir("./378" [pid 7358] <... memfd_create resumed>) = 3 [pid 7357] <... write resumed>) = 524288 [pid 7356] <... mount resumed>) = 0 [pid 7355] exit_group(0 [pid 5074] newfstatat(AT_FDCWD, "./377/binderfs", [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7359 [pid 7358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7357] munmap(0x7f943d000000, 138412032 [pid 7356] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7355] <... exit_group resumed>) = ? [pid 7359] <... chdir resumed>) = 0 [pid 7359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7359] setpgid(0, 0) = 0 [pid 7359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7359] <... openat resumed>) = 3 [pid 7359] write(3, "1000", 4) = 4 [pid 7359] close(3) = 0 [pid 5074] unlink("./377/binderfs" [pid 7359] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7358] <... mmap resumed>) = 0x7f943d000000 [pid 7357] <... munmap resumed>) = 0 [pid 7355] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 7356] <... openat resumed>) = 3 [pid 5074] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7355, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7356] chdir("./file1" [pid 7359] memfd_create("syzkaller", 0 [pid 7357] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7356] <... chdir resumed>) = 0 [pid 7358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7357] <... openat resumed>) = 4 [pid 7356] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./377", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7359] <... memfd_create resumed>) = 3 [pid 7356] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7356] truncate("./file1", 0 [pid 5074] newfstatat(AT_FDCWD, "./377/file1", [ 278.365595][ T7356] loop4: detected capacity change from 0 to 1024 [pid 5071] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7359] <... mmap resumed>) = 0x7f943d000000 [pid 7357] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7356] <... truncate resumed>) = 0 [pid 5074] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 7356] memfd_create("syzkaller", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./377/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 5074] <... openat resumed>) = 4 [pid 7356] <... memfd_create resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7358] <... write resumed>) = 524288 [pid 7356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./377/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5071] newfstatat(AT_FDCWD, "./377/binderfs", [pid 7359] <... write resumed>) = 524288 [pid 7356] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./377/binderfs" [pid 5074] getdents64(4, [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 7359] munmap(0x7f943d000000, 138412032 [pid 7358] munmap(0x7f943d000000, 138412032 [pid 7357] <... ioctl resumed>) = 0 [pid 7356] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7359] <... munmap resumed>) = 0 [pid 7358] <... munmap resumed>) = 0 [pid 7357] close(3 [pid 5074] rmdir("./377/file1" [pid 7359] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5074] <... rmdir resumed>) = 0 [ 278.412993][ T7357] loop5: detected capacity change from 0 to 1024 [pid 7359] ioctl(4, LOOP_SET_FD, 3 [pid 7358] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7357] <... close resumed>) = 0 [pid 7356] <... write resumed>) = 524288 [pid 5074] getdents64(3, [pid 5071] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7358] <... openat resumed>) = 4 [pid 7357] close(4 [pid 7356] munmap(0x7f943d000000, 138412032 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7358] ioctl(4, LOOP_SET_FD, 3 [pid 7357] <... close resumed>) = 0 [pid 7356] <... munmap resumed>) = 0 [pid 5074] close(3 [pid 5071] newfstatat(AT_FDCWD, "./377/file1", [pid 7359] <... ioctl resumed>) = 0 [pid 7359] close(3 [pid 5074] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./377" [pid 5071] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7359] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7359] close(4 [pid 5074] mkdir("./378", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7359] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./377/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7359] mkdir("./file1", 0777 [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 7359] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7359] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] getdents64(4, [pid 7357] mkdir("./file1", 0777 [pid 7356] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7357] <... mkdir resumed>) = 0 [pid 7356] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7356] close(4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] close(4 [pid 7356] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./377/file1") = 0 [pid 7357] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./377") = 0 [pid 5071] mkdir("./378", 0777) = 0 [pid 7357] <... mount resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7357] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] <... openat resumed>) = 3 [pid 7357] chdir("./file1" [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7357] <... chdir resumed>) = 0 [pid 7357] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7356] exit_group(0 [pid 7357] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7356] <... exit_group resumed>) = ? [pid 7359] <... mount resumed>) = 0 [pid 7358] <... ioctl resumed>) = 0 [pid 7357] truncate("./file1", 0 [pid 7359] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7359] chdir("./file1" [pid 7358] close(3 [pid 7357] <... truncate resumed>) = 0 [pid 7359] <... chdir resumed>) = 0 [pid 7358] <... close resumed>) = 0 [pid 7357] memfd_create("syzkaller", 0 [pid 7359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7357] <... memfd_create resumed>) = 4 [pid 7358] close(4 [pid 7357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7359] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7358] <... close resumed>) = 0 [pid 7357] <... mmap resumed>) = 0x7f943d000000 [pid 7356] +++ exited with 0 +++ [pid 7359] truncate("./file1", 0 [pid 7358] mkdir("./file1", 0777 [pid 7357] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7356, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7358] <... mkdir resumed>) = 0 [pid 7358] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7359] <... truncate resumed>) = 0 [pid 5075] umount2("./376", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 278.461444][ T7359] loop2: detected capacity change from 0 to 1024 [ 278.467417][ T7358] loop1: detected capacity change from 0 to 1024 [pid 7359] memfd_create("syzkaller", 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./376/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./376/binderfs") = 0 [pid 5075] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7359] <... memfd_create resumed>) = 4 [pid 7358] <... mount resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7358] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7357] <... write resumed>) = 524288 [pid 7359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7358] <... openat resumed>) = 3 [pid 7359] <... mmap resumed>) = 0x7f943d000000 [pid 7358] chdir("./file1" [pid 7359] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7358] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7358] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7358] truncate("./file1", 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7357] munmap(0x7f943d000000, 138412032 [pid 7359] <... write resumed>) = 524288 [pid 7357] <... munmap resumed>) = 0 [pid 5075] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7360 attached [pid 7358] <... truncate resumed>) = 0 [pid 7360] set_robust_list(0x555583d53660, 24 [pid 7358] memfd_create("syzkaller", 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 7360] <... set_robust_list resumed>) = 0 [pid 7358] <... memfd_create resumed>) = 4 [pid 7357] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./376/file1", [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7360 [pid 5071] <... close resumed>) = 0 [pid 7360] chdir("./378" [pid 7358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7357] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7360] <... chdir resumed>) = 0 [pid 7358] <... mmap resumed>) = 0x7f943d000000 [pid 5075] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7358] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7357] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7361 attached [pid 7360] <... prctl resumed>) = 0 [pid 7361] set_robust_list(0x555583d53660, 24 [pid 7360] setpgid(0, 0 [pid 7361] <... set_robust_list resumed>) = 0 [pid 7360] <... setpgid resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./376/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7361] chdir("./378" [pid 7360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7357] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 7361] <... chdir resumed>) = 0 [pid 7360] <... openat resumed>) = 3 [pid 5075] newfstatat(4, "", [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7361 [pid 7361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7360] write(3, "1000", 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7359] munmap(0x7f943d000000, 138412032 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./376/file1") = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7360] <... write resumed>) = 4 [pid 7360] close(3 [pid 7361] <... prctl resumed>) = 0 [pid 7360] <... close resumed>) = 0 [pid 7361] setpgid(0, 0 [pid 7360] symlink("/dev/binderfs", "./binderfs" [pid 7361] <... setpgid resumed>) = 0 [pid 7360] <... symlink resumed>) = 0 [pid 7358] <... write resumed>) = 524288 [pid 5075] close(3 [pid 7361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7360] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 7360] <... memfd_create resumed>) = 3 [pid 7360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./376" [pid 7360] <... mmap resumed>) = 0x7f943d000000 [pid 7360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7359] <... munmap resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7361] <... openat resumed>) = 3 [pid 7359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7357] exit_group(0 [pid 5075] mkdir("./377", 0777 [pid 7359] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... mkdir resumed>) = 0 [pid 7359] close(4 [pid 7361] write(3, "1000", 4) = 4 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7361] close(3 [pid 5075] <... openat resumed>) = 3 [pid 7361] <... close resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7361] symlink("/dev/binderfs", "./binderfs" [pid 7357] <... exit_group resumed>) = ? [pid 7361] <... symlink resumed>) = 0 [pid 7359] <... close resumed>) = 0 [pid 7357] +++ exited with 0 +++ [pid 7361] memfd_create("syzkaller", 0 [pid 7360] <... write resumed>) = 524288 [pid 7359] exit_group(0 [pid 7358] munmap(0x7f943d000000, 138412032 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7357, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7361] <... memfd_create resumed>) = 3 [pid 7361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7358] <... munmap resumed>) = 0 [pid 5076] umount2("./373", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7361] <... mmap resumed>) = 0x7f943d000000 [pid 7358] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 7359] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7358] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./373/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7358] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7359] +++ exited with 0 +++ [pid 7358] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./373/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./373/binderfs" [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7359, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./378", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... openat resumed>) = 3 [pid 7360] munmap(0x7f943d000000, 138412032) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 7360] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5076] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7360] ioctl(4, LOOP_SET_FD, 3 [pid 7358] exit_group(0 [pid 5073] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./373/file1", [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./378/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./373/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./378/binderfs", [pid 7358] <... exit_group resumed>) = ? [pid 5076] openat(AT_FDCWD, "./373/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./378/binderfs" [pid 7358] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 7361] <... write resumed>) = 524288 [pid 7361] munmap(0x7f943d000000, 138412032) = 0 [pid 5076] newfstatat(4, "", [pid 5073] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7358, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] umount2("./378", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7361] <... openat resumed>) = 4 [pid 5076] getdents64(4, [pid 5072] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7361] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5072] newfstatat(3, "", [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7360] <... ioctl resumed>) = 0 [pid 5076] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7360] close(3 [pid 5076] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 7360] <... close resumed>) = 0 [pid 5076] rmdir("./373/file1" [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7361] <... ioctl resumed>) = 0 [pid 7360] close(4 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] umount2("./378/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7360] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 7360] mkdir("./file1", 0777 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] newfstatat(AT_FDCWD, "./378/binderfs", [pid 7361] close(3 [pid 7360] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7361] <... close resumed>) = 0 [pid 7360] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7361] close(4 [pid 5076] close(3 [pid 7361] <... close resumed>) = 0 [pid 5072] unlink("./378/binderfs" [pid 7361] mkdir("./file1", 0777 [pid 5076] <... close resumed>) = 0 [pid 7361] <... mkdir resumed>) = 0 [pid 7361] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7362 [pid 5073] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./378/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./378/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 5072] <... unlink resumed>) = 0 [pid 5076] rmdir("./373" [pid 5072] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./378/file1"./strace-static-x86_64: Process 7362 attached [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./378") = 0 [pid 5073] mkdir("./379", 0777) = 0 [pid 7362] set_robust_list(0x555583d53660, 24 [pid 5076] mkdir("./374", 0777 [pid 7362] <... set_robust_list resumed>) = 0 [pid 7362] chdir("./377" [pid 5076] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7362] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... openat resumed>) = 3 [pid 7362] <... prctl resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [ 278.609469][ T7360] loop3: detected capacity change from 0 to 1024 [ 278.636379][ T7361] loop0: detected capacity change from 0 to 1024 [pid 7362] setpgid(0, 0) = 0 [pid 7361] <... mount resumed>) = 0 [pid 7360] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./378/file1", [pid 7362] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7362] write(3, "1000", 4 [pid 7360] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 5072] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7361] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7361] <... openat resumed>) = 3 [pid 7360] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7362] <... write resumed>) = 4 [pid 7361] chdir("./file1" [pid 5072] openat(AT_FDCWD, "./378/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7362] close(3 [pid 7361] <... chdir resumed>) = 0 [pid 7360] chdir("./file1" [pid 7362] <... close resumed>) = 0 [pid 7361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7362] symlink("/dev/binderfs", "./binderfs" [pid 7361] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7360] <... chdir resumed>) = 0 [pid 7360] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7362] <... symlink resumed>) = 0 [pid 7361] truncate("./file1", 0 [pid 7360] truncate("./file1", 0 [pid 5072] <... openat resumed>) = 4 [pid 7362] memfd_create("syzkaller", 0 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 7362] <... memfd_create resumed>) = 3 [pid 7362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7362] <... mmap resumed>) = 0x7f943d000000 [pid 7361] <... truncate resumed>) = 0 [pid 5072] close(4 [pid 7361] memfd_create("syzkaller", 0 [pid 5072] <... close resumed>) = 0 [pid 7361] <... memfd_create resumed>) = 4 [pid 5072] rmdir("./378/file1") = 0 [pid 5072] getdents64(3, [pid 7361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7361] <... mmap resumed>) = 0x7f943d000000 [pid 5072] close(3 [pid 7362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7361] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./378" [pid 7360] <... truncate resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7360] memfd_create("syzkaller", 0) = 4 [pid 5072] mkdir("./379", 0777 [pid 7360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7360] <... mmap resumed>) = 0x7f943d000000 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7360] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD) = 0 [pid 5072] close(3) = 0 [pid 7361] <... write resumed>) = 524288 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7363 attached , child_tidptr=0x555583d53650) = 7363 [pid 7363] set_robust_list(0x555583d53660, 24) = 0 [pid 7363] chdir("./379") = 0 [pid 7363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7363] setpgid(0, 0) = 0 [pid 7360] <... write resumed>) = 524288 [pid 7363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7363] <... openat resumed>) = 3 [pid 7361] munmap(0x7f943d000000, 138412032) = 0 [pid 7363] write(3, "1000", 4) = 4 [pid 7363] close(3 [pid 7361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7363] <... close resumed>) = 0 [pid 7361] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7363] symlink("/dev/binderfs", "./binderfs" [pid 7361] close(4 [pid 7362] <... write resumed>) = 524288 [pid 7363] <... symlink resumed>) = 0 [pid 7362] munmap(0x7f943d000000, 138412032 [pid 7360] munmap(0x7f943d000000, 138412032 [pid 5076] close(3 [pid 7360] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 7362] <... munmap resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7364 attached [pid 7363] memfd_create("syzkaller", 0 [pid 7362] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7360] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7364] set_robust_list(0x555583d53660, 24 [pid 7363] <... memfd_create resumed>) = 3 [pid 7362] <... openat resumed>) = 4 [pid 7360] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7364 [pid 7362] ioctl(4, LOOP_SET_FD, 3 [pid 7360] close(4) = 0 [pid 7363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7362] <... ioctl resumed>) = 0 [pid 7361] <... close resumed>) = 0 [pid 5073] close(3 [pid 7361] exit_group(0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7364] <... set_robust_list resumed>) = 0 [pid 7361] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7365 attached [pid 7364] chdir("./374" [pid 7361] +++ exited with 0 +++ [pid 7365] set_robust_list(0x555583d53660, 24 [pid 7364] <... chdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7361, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7365] <... set_robust_list resumed>) = 0 [pid 7364] <... prctl resumed>) = 0 [pid 7362] close(3 [pid 7360] exit_group(0 [pid 7365] chdir("./379" [pid 7364] setpgid(0, 0 [pid 7362] <... close resumed>) = 0 [pid 7360] <... exit_group resumed>) = ? [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7365 [pid 5071] umount2("./378", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7365] <... chdir resumed>) = 0 [pid 7364] <... setpgid resumed>) = 0 [pid 7362] close(4 [pid 7360] +++ exited with 0 +++ [pid 7365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7362] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7360, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7365] <... prctl resumed>) = 0 [pid 7364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7362] mkdir("./file1", 0777 [pid 7365] setpgid(0, 0) = 0 [pid 5074] umount2("./378", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7362] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7365] <... openat resumed>) = 3 [pid 7364] <... openat resumed>) = 3 [pid 7362] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 7364] write(3, "1000", 4 [pid 5074] <... openat resumed>) = 3 [pid 7364] <... write resumed>) = 4 [pid 5074] newfstatat(3, "", [pid 7364] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(3, "", [pid 7364] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7365] write(3, "1000", 4 [pid 7364] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] getdents64(3, [pid 7365] <... write resumed>) = 4 [pid 7363] <... write resumed>) = 524288 [pid 5074] umount2("./378/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7365] close(3 [pid 7364] <... symlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7365] <... close resumed>) = 0 [pid 7364] memfd_create("syzkaller", 0 [pid 5074] newfstatat(AT_FDCWD, "./378/binderfs", [pid 5071] umount2("./378/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7365] symlink("/dev/binderfs", "./binderfs" [pid 7364] <... memfd_create resumed>) = 3 [pid 7363] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7365] <... symlink resumed>) = 0 [pid 7364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7363] <... munmap resumed>) = 0 [pid 5074] unlink("./378/binderfs" [pid 5071] newfstatat(AT_FDCWD, "./378/binderfs", [pid 7365] memfd_create("syzkaller", 0 [pid 7364] <... mmap resumed>) = 0x7f943d000000 [pid 7363] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 278.755834][ T7362] loop4: detected capacity change from 0 to 1024 [pid 5074] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] unlink("./378/binderfs" [pid 7365] <... memfd_create resumed>) = 3 [pid 7365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7363] <... openat resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 7365] <... mmap resumed>) = 0x7f943d000000 [pid 7363] ioctl(4, LOOP_SET_FD, 3 [pid 7365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 7364] <... write resumed>) = 524288 [pid 7365] <... write resumed>) = 524288 [pid 7362] <... mount resumed>) = 0 [pid 5074] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./378/file1", [pid 7362] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7364] munmap(0x7f943d000000, 138412032 [pid 7362] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./378/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7364] <... munmap resumed>) = 0 [pid 7363] <... ioctl resumed>) = 0 [pid 7362] chdir("./file1" [pid 5074] <... openat resumed>) = 4 [ 278.807887][ T7363] loop1: detected capacity change from 0 to 1024 [pid 5071] <... umount2 resumed>) = 0 [pid 7364] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7362] <... chdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 7364] <... openat resumed>) = 4 [pid 7362] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7364] ioctl(4, LOOP_SET_FD, 3 [pid 5074] getdents64(4, [pid 7362] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./378/file1") = 0 [pid 7363] close(3 [pid 7365] munmap(0x7f943d000000, 138412032 [pid 7363] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 7365] <... munmap resumed>) = 0 [pid 7363] close(4 [pid 7365] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7363] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7365] <... openat resumed>) = 4 [pid 7363] mkdir("./file1", 0777 [pid 5074] close(3 [pid 7365] ioctl(4, LOOP_SET_FD, 3 [pid 7363] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7365] <... ioctl resumed>) = 0 [pid 7365] close(3 [pid 5074] rmdir("./378" [pid 7365] <... close resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7365] close(4 [pid 5074] mkdir("./379", 0777 [pid 7365] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7365] mkdir("./file1", 0777) = 0 [pid 7365] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7363] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD) = 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7362] truncate("./file1", 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7366 ./strace-static-x86_64: Process 7366 attached [pid 7366] set_robust_list(0x555583d53660, 24 [pid 7362] <... truncate resumed>) = 0 [pid 5071] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7362] memfd_create("syzkaller", 0) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7366] <... set_robust_list resumed>) = 0 [pid 7366] chdir("./379" [pid 7362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] newfstatat(AT_FDCWD, "./378/file1", [pid 7366] <... chdir resumed>) = 0 [pid 7366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7366] setpgid(0, 0) = 0 [pid 7366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7366] write(3, "1000", 4) = 4 [pid 7362] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7366] close(3 [pid 5071] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7366] <... close resumed>) = 0 [pid 7363] <... mount resumed>) = 0 [pid 7362] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7366] symlink("/dev/binderfs", "./binderfs" [pid 7365] <... mount resumed>) = 0 [pid 7363] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7366] <... symlink resumed>) = 0 [pid 7365] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7363] <... openat resumed>) = 3 [pid 7365] chdir("./file1" [pid 7363] chdir("./file1" [pid 7366] memfd_create("syzkaller", 0 [pid 7365] <... chdir resumed>) = 0 [pid 7363] <... chdir resumed>) = 0 [pid 7362] <... write resumed>) = 524288 [pid 5071] openat(AT_FDCWD, "./378/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7366] <... memfd_create resumed>) = 3 [pid 7363] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7363] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7366] <... mmap resumed>) = 0x7f943d000000 [pid 7363] truncate("./file1", 0 [pid 5071] <... openat resumed>) = 4 [pid 7366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7365] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7364] <... ioctl resumed>) = 0 [pid 7362] munmap(0x7f943d000000, 138412032 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 7364] close(3 [pid 7362] <... munmap resumed>) = 0 [pid 7365] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7364] <... close resumed>) = 0 [pid 7363] <... truncate resumed>) = 0 [ 278.852682][ T7364] loop5: detected capacity change from 0 to 1024 [ 278.859200][ T7365] loop2: detected capacity change from 0 to 1024 [pid 7362] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7364] close(4 [pid 7365] truncate("./file1", 0 [pid 7364] <... close resumed>) = 0 [pid 7363] memfd_create("syzkaller", 0 [pid 7362] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] getdents64(4, [pid 7364] mkdir("./file1", 0777 [pid 7362] close(4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7364] <... mkdir resumed>) = 0 [pid 7363] <... memfd_create resumed>) = 4 [pid 7362] <... close resumed>) = 0 [pid 5071] close(4 [pid 7364] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] <... close resumed>) = 0 [pid 7363] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] rmdir("./378/file1" [pid 7366] <... write resumed>) = 524288 [pid 7365] <... truncate resumed>) = 0 [pid 7362] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 7365] memfd_create("syzkaller", 0 [pid 7362] <... exit_group resumed>) = ? [pid 5071] getdents64(3, [pid 7365] <... memfd_create resumed>) = 4 [pid 7365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7364] <... mount resumed>) = 0 [pid 7362] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7365] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7364] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7362, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] close(3 [pid 7364] <... openat resumed>) = 3 [pid 7364] chdir("./file1" [pid 5071] <... close resumed>) = 0 [pid 7364] <... chdir resumed>) = 0 [pid 5075] umount2("./377", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./378" [pid 7364] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7364] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 7366] munmap(0x7f943d000000, 138412032 [pid 7364] truncate("./file1", 0 [pid 7363] <... write resumed>) = 524288 [pid 5071] mkdir("./379", 0777 [pid 5075] <... openat resumed>) = 3 [pid 7366] <... munmap resumed>) = 0 [pid 7365] <... write resumed>) = 524288 [pid 5075] newfstatat(3, "", [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 7366] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7364] <... truncate resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7364] memfd_create("syzkaller", 0 [pid 7366] ioctl(4, LOOP_SET_FD, 3 [pid 7364] <... memfd_create resumed>) = 4 [pid 5075] umount2("./377/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./377/binderfs", [pid 7363] munmap(0x7f943d000000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7363] <... munmap resumed>) = 0 [pid 5075] unlink("./377/binderfs") = 0 [pid 5075] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7363] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7363] close(4) = 0 [pid 7364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7365] munmap(0x7f943d000000, 138412032) = 0 [pid 7365] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7365] close(4 [pid 7363] exit_group(0) = ? [pid 7365] <... close resumed>) = 0 [pid 7366] <... ioctl resumed>) = 0 [pid 7364] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7363] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 7366] close(3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7363, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... ioctl resumed>) = 0 [pid 7365] exit_group(0) = ? [pid 7365] +++ exited with 0 +++ [pid 5075] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7365, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5072] umount2("./379", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./377/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./379", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7366] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 7366] close(4 [pid 5075] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(3, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7366] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./377/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(3, "", [pid 5072] getdents64(3, [pid 7366] mkdir("./file1", 0777 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7366] <... mkdir resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5073] getdents64(3, [pid 5072] umount2("./379/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5073] umount2("./379/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [ 278.966984][ T7366] loop3: detected capacity change from 0 to 1024 [pid 5072] newfstatat(AT_FDCWD, "./379/binderfs", [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./379/binderfs", [pid 5072] unlink("./379/binderfs" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 7366] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7364] <... write resumed>) = 524288 [pid 5075] close(4 [pid 5073] unlink("./379/binderfs" [pid 5072] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5071] close(3 [pid 7364] munmap(0x7f943d000000, 138412032 [pid 5075] rmdir("./377/file1" [pid 5073] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7364] <... munmap resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7367 [pid 5072] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7367 attached [pid 7367] set_robust_list(0x555583d53660, 24 [pid 5075] getdents64(3, [pid 7364] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7364] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3) = 0 [pid 5075] rmdir("./377" [pid 7367] <... set_robust_list resumed>) = 0 [pid 7367] chdir("./379" [pid 7364] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 7367] <... chdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] mkdir("./378", 0777 [pid 5072] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7367] setpgid(0, 0) = 0 [pid 5072] newfstatat(AT_FDCWD, "./379/file1", [pid 7367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7367] <... openat resumed>) = 3 [pid 7366] <... mount resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7367] write(3, "1000", 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] newfstatat(AT_FDCWD, "./379/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7366] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "./379/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7366] <... openat resumed>) = 3 [pid 7364] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7364] exit_group(0 [pid 5073] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 7367] <... write resumed>) = 4 [pid 7367] close(3 [pid 7366] chdir("./file1" [pid 7364] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7367] <... close resumed>) = 0 [pid 7367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7366] <... chdir resumed>) = 0 [pid 7364] +++ exited with 0 +++ [pid 5073] openat(AT_FDCWD, "./379/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7364, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 7367] memfd_create("syzkaller", 0 [pid 7366] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7367] <... memfd_create resumed>) = 3 [pid 7366] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./374", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5072] getdents64(4, [pid 7366] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5072] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... close resumed>) = 0 [pid 7367] <... mmap resumed>) = 0x7f943d000000 [pid 5076] newfstatat(3, "", [pid 5073] getdents64(4, [pid 5072] rmdir("./379/file1" [pid 7367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5072] getdents64(3, [pid 7366] <... truncate resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7366] memfd_create("syzkaller", 0 [pid 5073] rmdir("./379/file1" [pid 5072] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7366] <... memfd_create resumed>) = 4 [pid 5072] rmdir("./379") = 0 [pid 5073] getdents64(3, [pid 5072] mkdir("./380", 0777 [pid 5076] getdents64(3, [pid 7366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5076] umount2("./374/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7366] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./374/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5076] unlink("./374/binderfs" [pid 7366] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5073] rmdir("./379" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./380", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7368 attached [pid 7367] <... write resumed>) = 524288 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7368 [pid 7368] set_robust_list(0x555583d53660, 24 [pid 7367] munmap(0x7f943d000000, 138412032 [pid 7368] <... set_robust_list resumed>) = 0 [pid 7367] <... munmap resumed>) = 0 [pid 7368] chdir("./380") = 0 [pid 7368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7366] <... write resumed>) = 524288 [pid 7368] <... prctl resumed>) = 0 [pid 7367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7368] setpgid(0, 0 [pid 7367] ioctl(4, LOOP_SET_FD, 3 [pid 7368] <... setpgid resumed>) = 0 [pid 7366] munmap(0x7f943d000000, 138412032 [pid 7368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 7366] <... munmap resumed>) = 0 [pid 7366] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7366] close(4 [pid 7368] write(3, "1000", 4 [pid 7366] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7368] <... write resumed>) = 4 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7369 attached [pid 7368] close(3 [pid 7367] <... ioctl resumed>) = 0 [pid 7366] exit_group(0 [pid 5076] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 7368] <... close resumed>) = 0 [pid 7369] set_robust_list(0x555583d53660, 24 [pid 7367] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7369 [pid 7369] <... set_robust_list resumed>) = 0 [pid 7368] symlink("/dev/binderfs", "./binderfs" [pid 7367] <... close resumed>) = 0 [pid 7366] <... exit_group resumed>) = ? [pid 5076] newfstatat(AT_FDCWD, "./374/file1", [pid 7369] chdir("./378" [pid 7368] <... symlink resumed>) = 0 [pid 7367] close(4 [pid 5072] close(3 [pid 7369] <... chdir resumed>) = 0 [pid 7369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7368] memfd_create("syzkaller", 0 [pid 7367] <... close resumed>) = 0 [pid 7369] setpgid(0, 0 [pid 7367] mkdir("./file1", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 7369] <... setpgid resumed>) = 0 [pid 7368] <... memfd_create resumed>) = 3 [pid 7367] <... mkdir resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./374/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7367] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7369] <... openat resumed>) = 3 [pid 7368] <... mmap resumed>) = 0x7f943d000000 [pid 7366] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7370 attached [pid 5076] openat(AT_FDCWD, "./374/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7366, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 7369] write(3, "1000", 4) = 4 [pid 5074] umount2("./379", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 3 [pid 7370] set_robust_list(0x555583d53660, 24 [pid 5074] newfstatat(3, "", [pid 7370] <... set_robust_list resumed>) = 0 [pid 7369] close(3 [pid 5076] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7370] chdir("./380" [pid 5074] getdents64(3, [pid 7370] <... chdir resumed>) = 0 [pid 7369] <... close resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7369] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./379/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7370 [pid 7370] <... prctl resumed>) = 0 [pid 7369] <... symlink resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7370] setpgid(0, 0 [pid 5074] newfstatat(AT_FDCWD, "./379/binderfs", [pid 7370] <... setpgid resumed>) = 0 [pid 7367] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7369] memfd_create("syzkaller", 0 [pid 5076] getdents64(4, [pid 5074] unlink("./379/binderfs" [pid 7370] <... openat resumed>) = 3 [pid 7367] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [ 279.125385][ T7367] loop0: detected capacity change from 0 to 1024 [pid 7367] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7370] write(3, "1000", 4) = 4 [pid 7370] close(3) = 0 [pid 7369] <... memfd_create resumed>) = 3 [pid 7370] symlink("/dev/binderfs", "./binderfs" [pid 7369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7370] <... symlink resumed>) = 0 [pid 7369] <... mmap resumed>) = 0x7f943d000000 [pid 7370] memfd_create("syzkaller", 0) = 3 [pid 7370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7368] <... write resumed>) = 524288 [pid 7367] chdir("./file1" [pid 5076] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5076] rmdir("./374/file1" [pid 7369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7367] <... chdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(3, [pid 7369] <... write resumed>) = 524288 [pid 7367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7368] munmap(0x7f943d000000, 138412032 [pid 7367] truncate("./file1", 0 [pid 5076] close(3 [pid 5074] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./379/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7370] <... write resumed>) = 524288 [pid 7368] <... munmap resumed>) = 0 [pid 5076] rmdir("./374" [pid 5074] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./379/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 7368] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] mkdir("./375", 0777 [pid 5074] newfstatat(4, "", [pid 7368] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7369] munmap(0x7f943d000000, 138412032 [pid 5074] getdents64(4, [pid 7369] <... munmap resumed>) = 0 [pid 7368] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7367] <... truncate resumed>) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./379/file1") = 0 [pid 7369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] getdents64(3, [pid 7369] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./379") = 0 [pid 5074] mkdir("./380", 0777) = 0 [pid 7369] ioctl(4, LOOP_SET_FD, 3 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7367] memfd_create("syzkaller", 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 7367] <... memfd_create resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 7367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7370] munmap(0x7f943d000000, 138412032 [pid 7367] <... mmap resumed>) = 0x7f943d000000 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7370] <... munmap resumed>) = 0 [pid 7370] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7370] ioctl(4, LOOP_SET_FD, 3 [pid 7367] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7369] <... ioctl resumed>) = 0 [pid 7369] close(3) = 0 [pid 7369] close(4) = 0 [pid 7369] mkdir("./file1", 0777) = 0 [pid 7369] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7368] <... ioctl resumed>) = 0 [pid 7368] close(3 [pid 7369] <... mount resumed>) = 0 [pid 7368] <... close resumed>) = 0 [pid 7368] close(4) = 0 [pid 7368] mkdir("./file1", 0777 [pid 7369] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7368] <... mkdir resumed>) = 0 [pid 7369] <... openat resumed>) = 3 [pid 7369] chdir("./file1") = 0 [ 279.212350][ T7368] loop2: detected capacity change from 0 to 1024 [ 279.217865][ T7369] loop4: detected capacity change from 0 to 1024 [ 279.231312][ T7370] loop1: detected capacity change from 0 to 1024 [pid 7369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7368] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7367] <... write resumed>) = 524288 [pid 7370] <... ioctl resumed>) = 0 [pid 7370] close(3) = 0 [pid 7370] close(4 [pid 7369] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7370] <... close resumed>) = 0 [pid 7369] truncate("./file1", 0 [pid 7370] mkdir("./file1", 0777) = 0 [pid 7369] <... truncate resumed>) = 0 [pid 7369] memfd_create("syzkaller", 0) = 4 [pid 7369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7370] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7370] <... mount resumed>) = 0 [pid 7369] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7367] munmap(0x7f943d000000, 138412032 [pid 5074] close(3 [pid 7369] <... write resumed>) = 524288 [pid 7367] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7370] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 7371 attached [pid 7370] chdir("./file1" [pid 7371] set_robust_list(0x555583d53660, 24 [pid 7370] <... chdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7371 [pid 7370] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 7372 attached [pid 7371] <... set_robust_list resumed>) = 0 [pid 7370] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7368] <... mount resumed>) = 0 [pid 7371] chdir("./380" [pid 7367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7372] set_robust_list(0x555583d53660, 24) = 0 [pid 7370] truncate("./file1", 0 [pid 7367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7372] chdir("./375" [pid 7371] <... chdir resumed>) = 0 [pid 7368] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7372] <... chdir resumed>) = 0 [pid 7371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7368] <... openat resumed>) = 3 [pid 7367] close(4 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7372 [pid 7372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7371] <... prctl resumed>) = 0 [pid 7370] <... truncate resumed>) = 0 [pid 7368] chdir("./file1" [pid 7372] <... prctl resumed>) = 0 [pid 7371] setpgid(0, 0 [pid 7370] memfd_create("syzkaller", 0 [pid 7369] munmap(0x7f943d000000, 138412032 [pid 7368] <... chdir resumed>) = 0 [pid 7372] setpgid(0, 0 [pid 7371] <... setpgid resumed>) = 0 [pid 7370] <... memfd_create resumed>) = 4 [pid 7369] <... munmap resumed>) = 0 [pid 7372] <... setpgid resumed>) = 0 [pid 7371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7368] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7370] <... mmap resumed>) = 0x7f943d000000 [pid 7372] <... openat resumed>) = 3 [pid 7371] <... openat resumed>) = 3 [pid 7370] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7371] write(3, "1000", 4) = 4 [pid 7369] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7371] close(3 [pid 7369] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7371] <... close resumed>) = 0 [pid 7369] close(4 [pid 7371] symlink("/dev/binderfs", "./binderfs" [pid 7369] <... close resumed>) = 0 [pid 7371] <... symlink resumed>) = 0 [pid 7371] memfd_create("syzkaller", 0) = 3 [pid 7371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7372] write(3, "1000", 4 [pid 7370] <... write resumed>) = 524288 [pid 7368] truncate("./file1", 0 [pid 7367] <... close resumed>) = 0 [pid 7372] <... write resumed>) = 4 [pid 7372] close(3 [pid 7369] exit_group(0 [pid 7368] <... truncate resumed>) = 0 [pid 7367] exit_group(0 [pid 7372] <... close resumed>) = 0 [pid 7368] memfd_create("syzkaller", 0 [pid 7367] <... exit_group resumed>) = ? [pid 7372] symlink("/dev/binderfs", "./binderfs" [pid 7369] <... exit_group resumed>) = ? [pid 7367] +++ exited with 0 +++ [pid 7372] <... symlink resumed>) = 0 [pid 7368] <... memfd_create resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7367, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7372] memfd_create("syzkaller", 0 [pid 7368] <... mmap resumed>) = 0x7f943d000000 [pid 7370] munmap(0x7f943d000000, 138412032) = 0 [pid 7369] +++ exited with 0 +++ [pid 7372] <... memfd_create resumed>) = 3 [pid 7368] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7369, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] umount2("./379", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7370] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7371] <... write resumed>) = 524288 [pid 7370] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... restart_syscall resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7372] <... mmap resumed>) = 0x7f943d000000 [pid 7370] close(4 [pid 5075] umount2("./378", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7371] munmap(0x7f943d000000, 138412032 [pid 5075] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7371] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 7371] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7370] <... close resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7371] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./378/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./379/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7371] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./379/binderfs", [pid 7372] <... write resumed>) = 524288 [pid 5075] newfstatat(AT_FDCWD, "./378/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7370] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./379/binderfs" [pid 7370] <... exit_group resumed>) = ? [pid 5075] unlink("./378/binderfs" [pid 7370] +++ exited with 0 +++ [pid 7368] <... write resumed>) = 524288 [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7370, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] umount2("./380", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./380/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./380/binderfs") = 0 [pid 5072] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7371] <... ioctl resumed>) = 0 [pid 7372] munmap(0x7f943d000000, 138412032 [pid 7368] munmap(0x7f943d000000, 138412032 [pid 5075] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7371] close(3 [pid 7368] <... munmap resumed>) = 0 [pid 7372] <... munmap resumed>) = 0 [pid 7372] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7371] <... close resumed>) = 0 [pid 7368] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7371] close(4) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7371] mkdir("./file1", 0777 [pid 5075] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./380/file1", [pid 7371] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./378/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./380/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7371] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./378/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7372] <... openat resumed>) = 4 [pid 7368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = 0 [ 279.354821][ T7371] loop3: detected capacity change from 0 to 1024 [pid 7372] ioctl(4, LOOP_SET_FD, 3 [pid 7368] close(4 [pid 7371] <... mount resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5075] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7371] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 5075] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7371] <... openat resumed>) = 3 [pid 5075] close(4 [pid 5072] <... close resumed>) = 0 [pid 7371] chdir("./file1" [pid 5075] <... close resumed>) = 0 [pid 5072] rmdir("./380/file1" [pid 7371] <... chdir resumed>) = 0 [pid 5075] rmdir("./378/file1" [pid 5072] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7371] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] getdents64(3, [pid 7371] truncate("./file1", 0 [pid 5075] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 7368] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] rmdir("./380" [pid 5075] close(3 [pid 5071] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7368] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./379/file1", [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./378" [pid 5071] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7368] <... exit_group resumed>) = ? [pid 5075] <... rmdir resumed>) = 0 [pid 5072] mkdir("./381", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./379/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] mkdir("./379", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7371] <... truncate resumed>) = 0 [pid 7368] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 4 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7368, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 7371] memfd_create("syzkaller", 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7371] <... memfd_create resumed>) = 4 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7371] <... mmap resumed>) = 0x7f943d000000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./380", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(4 [pid 7372] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7372] close(3 [pid 5071] rmdir("./379/file1" [pid 7372] <... close resumed>) = 0 [pid 7371] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(3, [pid 5072] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 7372] close(4 [pid 5071] getdents64(3, [pid 7372] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7372] mkdir("./file1", 0777 [pid 5071] close(3 [pid 5073] umount2("./380/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] rmdir("./379" [pid 7372] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./380/binderfs", [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./380", 0777./strace-static-x86_64: Process 7373 attached [pid 7372] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 7373] set_robust_list(0x555583d53660, 24 [pid 7372] <... mount resumed>) = 0 [pid 5073] unlink("./380/binderfs" [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7373] <... set_robust_list resumed>) = 0 [pid 7372] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] <... unlink resumed>) = 0 [pid 7373] chdir("./381" [pid 7372] chdir("./file1" [pid 5071] <... openat resumed>) = 3 [pid 5073] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7373 [pid 7372] <... chdir resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7373] <... chdir resumed>) = 0 [pid 7373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7372] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7373] <... prctl resumed>) = 0 [pid 7372] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7373] setpgid(0, 0 [pid 7372] truncate("./file1", 0 [pid 7373] <... setpgid resumed>) = 0 [pid 7373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7372] <... truncate resumed>) = 0 [ 279.401669][ T7372] loop5: detected capacity change from 0 to 1024 [pid 7373] write(3, "1000", 4 [pid 7372] memfd_create("syzkaller", 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7371] <... write resumed>) = 524288 [pid 7371] munmap(0x7f943d000000, 138412032) = 0 [pid 7371] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7373] <... write resumed>) = 4 [pid 7372] <... memfd_create resumed>) = 4 [pid 5073] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7371] close(4 [pid 7373] close(3 [pid 7372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7371] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7372] <... mmap resumed>) = 0x7f943d000000 [pid 5073] newfstatat(AT_FDCWD, "./380/file1", [pid 7373] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7373] symlink("/dev/binderfs", "./binderfs" [pid 5073] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7373] <... symlink resumed>) = 0 [pid 7372] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./380/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7371] exit_group(0 [pid 5073] getdents64(4, [pid 7371] <... exit_group resumed>) = ? [pid 7373] memfd_create("syzkaller", 0 [pid 7371] +++ exited with 0 +++ [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7371, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7373] <... memfd_create resumed>) = 3 [pid 5073] getdents64(4, [pid 7373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./380", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 7373] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./380/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./380/binderfs") = 0 [pid 7373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] rmdir("./380/file1") = 0 [pid 5074] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(3 [pid 7372] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./380" [pid 5071] <... ioctl resumed>) = 0 [pid 7372] munmap(0x7f943d000000, 138412032) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./381", 0777 [pid 5074] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./380/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7374 attached ) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 7374] set_robust_list(0x555583d53660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7374 [pid 5074] openat(AT_FDCWD, "./380/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] close(3 [pid 7374] <... set_robust_list resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 7374] chdir("./379" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7374] <... chdir resumed>) = 0 [pid 7372] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 7374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... close resumed>) = 0 [pid 7374] <... prctl resumed>) = 0 [pid 5074] rmdir("./380/file1" [pid 7374] setpgid(0, 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7374] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 7375 attached [pid 7374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7372] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7375 [pid 7372] close(4 [pid 7374] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 7374] write(3, "1000", 4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./380" [pid 7375] set_robust_list(0x555583d53660, 24 [pid 5074] <... rmdir resumed>) = 0 [pid 7374] <... write resumed>) = 4 [pid 5074] mkdir("./381", 0777 [pid 7374] close(3 [pid 7375] <... set_robust_list resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7374] <... close resumed>) = 0 [pid 7375] chdir("./380") = 0 [pid 7374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7374] memfd_create("syzkaller", 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7375] <... prctl resumed>) = 0 [pid 7373] <... write resumed>) = 524288 [pid 7372] <... close resumed>) = 0 [pid 7375] setpgid(0, 0 [pid 7373] munmap(0x7f943d000000, 138412032 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7374] <... memfd_create resumed>) = 3 [pid 7374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7373] <... munmap resumed>) = 0 [pid 7373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7375] <... setpgid resumed>) = 0 [pid 7373] <... openat resumed>) = 4 [pid 7373] ioctl(4, LOOP_SET_FD, 3 [pid 7375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7374] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7375] <... openat resumed>) = 3 [pid 7372] exit_group(0 [pid 5073] <... ioctl resumed>) = 0 [pid 7372] <... exit_group resumed>) = ? [pid 7375] write(3, "1000", 4) = 4 [pid 7375] close(3) = 0 [pid 7373] <... ioctl resumed>) = 0 [pid 7372] +++ exited with 0 +++ [pid 5073] close(3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7372, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7375] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... close resumed>) = 0 [pid 7375] <... symlink resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7373] close(3 [pid 5076] umount2("./375", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7373] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7373] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", ./strace-static-x86_64: Process 7376 attached [pid 7375] memfd_create("syzkaller", 0 [pid 7374] <... write resumed>) = 524288 [pid 7373] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7376 [pid 7373] mkdir("./file1", 0777 [pid 5076] getdents64(3, [pid 7375] <... memfd_create resumed>) = 3 [pid 7373] <... mkdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... ioctl resumed>) = 0 [pid 7375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./375/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7373] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7375] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./375/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7376] set_robust_list(0x555583d53660, 24 [pid 5076] unlink("./375/binderfs" [pid 7374] munmap(0x7f943d000000, 138412032 [pid 7376] <... set_robust_list resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7376] chdir("./381" [pid 7374] <... munmap resumed>) = 0 [pid 7376] <... chdir resumed>) = 0 [pid 7376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7376] setpgid(0, 0) = 0 [pid 7376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7374] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7376] <... openat resumed>) = 3 [pid 7374] <... openat resumed>) = 4 [ 279.546600][ T7373] loop1: detected capacity change from 0 to 1024 [pid 7376] write(3, "1000", 4 [pid 5074] close(3 [pid 7376] <... write resumed>) = 4 [pid 7376] close(3 [pid 5074] <... close resumed>) = 0 [pid 7376] <... close resumed>) = 0 [pid 7374] ioctl(4, LOOP_SET_FD, 3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7377 attached [pid 7375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7373] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 7376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7376] memfd_create("syzkaller", 0) = 3 [pid 7376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7377 [pid 7376] <... mmap resumed>) = 0x7f943d000000 [pid 7376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7377] set_robust_list(0x555583d53660, 24 [pid 7373] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7373] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7377] <... set_robust_list resumed>) = 0 [pid 7377] chdir("./381" [pid 5076] newfstatat(AT_FDCWD, "./375/file1", [pid 7377] <... chdir resumed>) = 0 [pid 7373] chdir("./file1" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7375] <... write resumed>) = 524288 [pid 7374] <... ioctl resumed>) = 0 [pid 7373] <... chdir resumed>) = 0 [pid 5076] umount2("./375/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7377] <... prctl resumed>) = 0 [pid 7373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7377] setpgid(0, 0 [pid 7375] munmap(0x7f943d000000, 138412032 [pid 7374] close(3 [pid 7373] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./375/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7377] <... setpgid resumed>) = 0 [pid 7375] <... munmap resumed>) = 0 [pid 7374] <... close resumed>) = 0 [pid 7373] truncate("./file1", 0 [pid 5076] <... openat resumed>) = 4 [pid 7377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7374] close(4 [pid 5076] getdents64(4, [pid 7377] <... openat resumed>) = 3 [pid 7374] <... close resumed>) = 0 [pid 7377] write(3, "1000", 4 [pid 7375] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7374] mkdir("./file1", 0777 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7377] <... write resumed>) = 4 [pid 7375] <... openat resumed>) = 4 [pid 7377] close(3 [pid 7375] ioctl(4, LOOP_SET_FD, 3 [pid 7374] <... mkdir resumed>) = 0 [pid 5076] getdents64(4, [pid 7377] <... close resumed>) = 0 [ 279.599234][ T7374] loop4: detected capacity change from 0 to 1024 [pid 7377] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7376] <... write resumed>) = 524288 [pid 7375] <... ioctl resumed>) = 0 [pid 7374] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7373] <... truncate resumed>) = 0 [pid 5076] close(4 [pid 7377] <... symlink resumed>) = 0 [pid 7376] munmap(0x7f943d000000, 138412032 [pid 7373] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 7376] <... munmap resumed>) = 0 [pid 7377] memfd_create("syzkaller", 0 [pid 7376] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7375] close(3 [pid 7373] <... memfd_create resumed>) = 4 [pid 5076] rmdir("./375/file1" [pid 7376] <... openat resumed>) = 4 [pid 7376] ioctl(4, LOOP_SET_FD, 3 [pid 7373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7374] <... mount resumed>) = 0 [pid 7374] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7374] chdir("./file1") = 0 [pid 7374] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7374] truncate("./file1", 0 [pid 7373] <... mmap resumed>) = 0x7f943d000000 [pid 7377] <... memfd_create resumed>) = 3 [pid 7375] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 7375] close(4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7375] <... close resumed>) = 0 [pid 5076] close(3 [pid 7375] mkdir("./file1", 0777 [pid 5076] <... close resumed>) = 0 [pid 7377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7373] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] rmdir("./375" [pid 7375] <... mkdir resumed>) = 0 [pid 7377] <... mmap resumed>) = 0x7f943d000000 [pid 7376] <... ioctl resumed>) = 0 [pid 7375] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7374] <... truncate resumed>) = 0 [pid 7373] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 7374] memfd_create("syzkaller", 0) = 4 [pid 7374] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] mkdir("./376", 0777 [pid 7376] close(3 [pid 7373] munmap(0x7f943d000000, 138412032 [pid 5076] <... mkdir resumed>) = 0 [pid 7376] <... close resumed>) = 0 [pid 7376] close(4 [pid 7374] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7373] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7376] <... close resumed>) = 0 [pid 7373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7376] mkdir("./file1", 0777 [pid 5076] <... openat resumed>) = 3 [pid 7373] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7376] <... mkdir resumed>) = 0 [pid 7373] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7377] <... write resumed>) = 524288 [pid 7376] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7373] <... close resumed>) = 0 [pid 7374] <... write resumed>) = 524288 [pid 7374] munmap(0x7f943d000000, 138412032 [pid 7375] <... mount resumed>) = 0 [ 279.642500][ T7375] loop0: detected capacity change from 0 to 1024 [ 279.659439][ T7376] loop2: detected capacity change from 0 to 1024 [pid 7375] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7374] <... munmap resumed>) = 0 [pid 7377] munmap(0x7f943d000000, 138412032 [pid 7375] chdir("./file1" [pid 7377] <... munmap resumed>) = 0 [pid 7375] <... chdir resumed>) = 0 [pid 7377] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7375] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7374] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7373] exit_group(0 [pid 7377] <... openat resumed>) = 4 [pid 7376] <... mount resumed>) = 0 [pid 7375] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7374] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7373] <... exit_group resumed>) = ? [pid 7377] ioctl(4, LOOP_SET_FD, 3 [pid 7376] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7375] truncate("./file1", 0 [pid 7374] close(4 [pid 7376] <... openat resumed>) = 3 [pid 7375] <... truncate resumed>) = 0 [pid 7374] <... close resumed>) = 0 [pid 7373] +++ exited with 0 +++ [pid 7375] memfd_create("syzkaller", 0 [pid 7376] chdir("./file1" [pid 7375] <... memfd_create resumed>) = 4 [pid 7376] <... chdir resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7373, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7376] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7376] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7375] <... mmap resumed>) = 0x7f943d000000 [pid 5072] umount2("./381", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7375] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7376] truncate("./file1", 0 [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./381/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./381/binderfs") = 0 [pid 7374] exit_group(0 [pid 5076] <... ioctl resumed>) = 0 [pid 5072] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 7374] <... exit_group resumed>) = ? [pid 5076] close(3 [pid 7376] <... truncate resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7376] memfd_create("syzkaller", 0) = 4 [pid 7374] +++ exited with 0 +++ [pid 5072] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7374, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7376] <... mmap resumed>) = 0x7f943d000000 [pid 5075] umount2("./379", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./379/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./379/binderfs") = 0 [pid 5075] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7376] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7375] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./381/file1", [pid 5075] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7378 attached [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7377] <... ioctl resumed>) = 0 [pid 7378] set_robust_list(0x555583d53660, 24 [pid 5075] newfstatat(AT_FDCWD, "./379/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7378] <... set_robust_list resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./381/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7378] chdir("./376" [pid 5075] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7377] close(3 [pid 5072] <... openat resumed>) = 4 [pid 7377] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(4, "", [pid 7378] <... chdir resumed>) = 0 [pid 7377] close(4 [pid 5075] openat(AT_FDCWD, "./379/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7377] <... close resumed>) = 0 [pid 7376] <... write resumed>) = 524288 [pid 7375] munmap(0x7f943d000000, 138412032 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7378 [pid 7377] mkdir("./file1", 0777 [pid 7378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... openat resumed>) = 4 [pid 5072] getdents64(4, [pid 7377] <... mkdir resumed>) = 0 [pid 7377] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7378] <... prctl resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7378] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7378] <... setpgid resumed>) = 0 [pid 7376] munmap(0x7f943d000000, 138412032 [pid 7375] <... munmap resumed>) = 0 [pid 5075] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7375] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] close(4 [pid 7378] <... openat resumed>) = 3 [pid 7375] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 7378] write(3, "1000", 4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] rmdir("./381/file1" [pid 7378] <... write resumed>) = 4 [pid 7376] <... munmap resumed>) = 0 [pid 7375] close(4 [pid 5075] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 7378] close(3 [pid 5075] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 7378] <... close resumed>) = 0 [pid 7376] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 279.739752][ T7377] loop3: detected capacity change from 0 to 1024 [pid 5075] rmdir("./379/file1" [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7378] symlink("/dev/binderfs", "./binderfs" [pid 7377] <... mount resumed>) = 0 [pid 7376] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5072] close(3 [pid 7378] <... symlink resumed>) = 0 [pid 7375] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7376] close(4 [pid 5072] rmdir("./381" [pid 5075] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] mkdir("./382", 0777 [pid 7378] memfd_create("syzkaller", 0 [pid 7377] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 7378] <... memfd_create resumed>) = 3 [pid 7377] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 7378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./379" [pid 7378] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... rmdir resumed>) = 0 [pid 7378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7377] chdir("./file1" [pid 7376] <... close resumed>) = 0 [pid 7375] exit_group(0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7377] <... chdir resumed>) = 0 [pid 7375] <... exit_group resumed>) = ? [pid 7377] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] mkdir("./380", 0777 [pid 5072] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7377] truncate("./file1", 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7378] <... write resumed>) = 524288 [pid 7376] exit_group(0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7376] <... exit_group resumed>) = ? [pid 7375] +++ exited with 0 +++ [pid 7378] munmap(0x7f943d000000, 138412032 [pid 7377] <... truncate resumed>) = 0 [pid 7376] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7375, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7377] memfd_create("syzkaller", 0) = 4 [pid 7377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7376, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] umount2("./381", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7377] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./380", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7378] <... munmap resumed>) = 0 [pid 7378] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7377] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7378] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(3, "", [pid 7377] <... write resumed>) = 524288 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./381/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] newfstatat(AT_FDCWD, "./381/binderfs", [pid 5071] umount2("./380/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./380/binderfs", [pid 5073] unlink("./381/binderfs" [pid 5072] close(3) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] unlink("./380/binderfs") = 0 ./strace-static-x86_64: Process 7379 attached [pid 7377] munmap(0x7f943d000000, 138412032 [pid 5073] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7379 [pid 7377] <... munmap resumed>) = 0 [pid 7379] set_robust_list(0x555583d53660, 24 [pid 7377] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7379] <... set_robust_list resumed>) = 0 [pid 5075] close(3) = 0 [pid 7379] chdir("./382" [pid 7377] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7377] close(4 [pid 7379] <... chdir resumed>) = 0 [pid 7379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7379] setpgid(0, 0./strace-static-x86_64: Process 7380 attached [pid 7378] <... ioctl resumed>) = 0 [pid 7377] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7380 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7380] set_robust_list(0x555583d53660, 24 [pid 7379] <... setpgid resumed>) = 0 [pid 7378] close(3 [pid 7377] exit_group(0 [pid 5073] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7380] <... set_robust_list resumed>) = 0 [pid 7379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7378] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7379] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./381/file1", [pid 5071] newfstatat(AT_FDCWD, "./380/file1", [pid 7379] write(3, "1000", 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7379] <... write resumed>) = 4 [pid 5073] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7379] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7379] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./381/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./380/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7379] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... openat resumed>) = 4 [pid 5071] <... openat resumed>) = 4 [pid 7379] <... symlink resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5071] newfstatat(4, "", [pid 7379] memfd_create("syzkaller", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7379] <... memfd_create resumed>) = 3 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5071] getdents64(4, [pid 7379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7377] <... exit_group resumed>) = ? [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] close(4) = 0 [pid 5071] getdents64(4, [pid 5073] rmdir("./381/file1" [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7377] +++ exited with 0 +++ [pid 5073] <... rmdir resumed>) = 0 [pid 5071] close(4 [pid 7380] chdir("./380" [pid 7378] close(4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7377, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7380] <... chdir resumed>) = 0 [pid 7379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7378] <... close resumed>) = 0 [pid 5073] getdents64(3, [pid 5071] <... close resumed>) = 0 [ 279.842758][ T7378] loop5: detected capacity change from 0 to 1024 [pid 7380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7378] mkdir("./file1", 0777 [pid 7380] <... prctl resumed>) = 0 [pid 7378] <... mkdir resumed>) = 0 [pid 7380] setpgid(0, 0 [pid 7378] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7380] <... setpgid resumed>) = 0 [pid 7380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] umount2("./381", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./380/file1" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 7380] write(3, "1000", 4 [pid 5074] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7380] <... write resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5073] rmdir("./381" [pid 5071] getdents64(3, [pid 7380] close(3 [pid 5074] newfstatat(3, "", [pid 7380] <... close resumed>) = 0 [pid 7380] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7380] <... symlink resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] mkdir("./382", 0777 [pid 5071] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... mkdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7380] memfd_create("syzkaller", 0 [pid 5074] umount2("./381/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] rmdir("./380" [pid 7380] <... memfd_create resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 7380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] newfstatat(AT_FDCWD, "./381/binderfs", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] <... rmdir resumed>) = 0 [pid 7380] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] mkdir("./381", 0777 [pid 7380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] unlink("./381/binderfs" [pid 5071] <... mkdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7378] <... mount resumed>) = 0 [pid 7378] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7378] chdir("./file1" [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7378] <... chdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7379] <... write resumed>) = 524288 [pid 7378] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7379] munmap(0x7f943d000000, 138412032 [pid 7378] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7378] truncate("./file1", 0 [pid 7379] <... munmap resumed>) = 0 [pid 7379] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] <... umount2 resumed>) = 0 [pid 7378] <... truncate resumed>) = 0 [pid 7378] memfd_create("syzkaller", 0) = 4 [pid 5074] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7379] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7379] ioctl(4, LOOP_SET_FD, 3 [pid 5074] newfstatat(AT_FDCWD, "./381/file1", [pid 7380] <... write resumed>) = 524288 [pid 7378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7380] munmap(0x7f943d000000, 138412032 [pid 7378] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7380] <... munmap resumed>) = 0 [pid 7378] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7380] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 7380] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./381/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(3 [pid 5071] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 5073] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7381 attached [pid 7378] <... write resumed>) = 524288 [pid 5074] getdents64(4, [pid 7381] set_robust_list(0x555583d53660, 24) = 0 [pid 7379] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7381 [pid 7381] chdir("./382" [pid 7380] <... ioctl resumed>) = 0 [pid 7379] close(3 [pid 5074] getdents64(4, [pid 5071] close(3 [pid 7381] <... chdir resumed>) = 0 [pid 7379] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... close resumed>) = 0 [pid 5074] close(4 [pid 7381] <... prctl resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7381] setpgid(0, 0 [pid 5074] rmdir("./381/file1") = 0 [pid 7381] <... setpgid resumed>) = 0 [pid 5074] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7380] close(3 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./381" [pid 7378] munmap(0x7f943d000000, 138412032 [pid 7380] <... close resumed>) = 0 [pid 7378] <... munmap resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 7382 attached [pid 7381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7380] close(4 [pid 7379] close(4 [pid 5074] mkdir("./382", 0777 [pid 7382] set_robust_list(0x555583d53660, 24 [pid 7378] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7382 [pid 7382] <... set_robust_list resumed>) = 0 [pid 7382] chdir("./381" [pid 7378] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... mkdir resumed>) = 0 [pid 7378] close(4 [pid 7382] <... chdir resumed>) = 0 [pid 7380] <... close resumed>) = 0 [pid 7379] <... close resumed>) = 0 [pid 7382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7381] <... openat resumed>) = 3 [pid 7380] mkdir("./file1", 0777 [pid 7379] mkdir("./file1", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7381] write(3, "1000", 4 [pid 7382] setpgid(0, 0) = 0 [pid 7381] <... write resumed>) = 4 [pid 7379] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7381] close(3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7382] <... openat resumed>) = 3 [pid 7381] <... close resumed>) = 0 [pid 7380] <... mkdir resumed>) = 0 [pid 7379] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7382] write(3, "1000", 4 [pid 7381] symlink("/dev/binderfs", "./binderfs" [pid 7380] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7382] <... write resumed>) = 4 [pid 7381] <... symlink resumed>) = 0 [pid 7382] close(3) = 0 [ 279.947721][ T7379] loop1: detected capacity change from 0 to 1024 [ 279.949959][ T7380] loop4: detected capacity change from 0 to 1024 [pid 7382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7381] memfd_create("syzkaller", 0 [pid 7379] <... mount resumed>) = 0 [pid 7378] <... close resumed>) = 0 [pid 7382] memfd_create("syzkaller", 0 [pid 7381] <... memfd_create resumed>) = 3 [pid 7379] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7378] exit_group(0 [pid 7382] <... memfd_create resumed>) = 3 [pid 7378] <... exit_group resumed>) = ? [pid 7382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7380] <... mount resumed>) = 0 [pid 7379] <... openat resumed>) = 3 [pid 7378] +++ exited with 0 +++ [pid 7382] <... mmap resumed>) = 0x7f943d000000 [pid 7381] <... mmap resumed>) = 0x7f943d000000 [pid 7380] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7379] chdir("./file1" [pid 7382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7378, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7380] <... openat resumed>) = 3 [pid 7379] <... chdir resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7382] <... write resumed>) = 524288 [pid 7381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7380] chdir("./file1" [pid 7379] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... restart_syscall resumed>) = 0 [pid 7380] <... chdir resumed>) = 0 [pid 7380] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./376", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7380] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 7382] munmap(0x7f943d000000, 138412032 [pid 7379] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7382] <... munmap resumed>) = 0 [pid 7379] truncate("./file1", 0 [pid 5076] umount2("./376/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./376/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./376/binderfs") = 0 [pid 7382] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7382] ioctl(4, LOOP_SET_FD, 3 [pid 5076] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7380] <... truncate resumed>) = 0 [pid 7380] memfd_create("syzkaller", 0 [pid 7381] <... write resumed>) = 524288 [pid 7380] <... memfd_create resumed>) = 4 [pid 7379] <... truncate resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7379] memfd_create("syzkaller", 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 7379] <... memfd_create resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 7380] <... mmap resumed>) = 0x7f943d000000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./376/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./376/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7381] munmap(0x7f943d000000, 138412032 [pid 7379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7383 attached [pid 7381] <... munmap resumed>) = 0 [pid 7380] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7379] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "./376/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7383] set_robust_list(0x555583d53660, 24 [pid 7379] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 4 [ 280.041796][ T7382] loop0: detected capacity change from 0 to 1024 [pid 7383] <... set_robust_list resumed>) = 0 [pid 7382] <... ioctl resumed>) = 0 [pid 7381] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7380] <... write resumed>) = 524288 [pid 7379] <... write resumed>) = 524288 [pid 5076] newfstatat(4, "", [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7383 [pid 7383] chdir("./382" [pid 7381] <... openat resumed>) = 4 [pid 7381] ioctl(4, LOOP_SET_FD, 3 [pid 7383] <... chdir resumed>) = 0 [pid 7382] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7382] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 7382] close(4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7382] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 7382] mkdir("./file1", 0777 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7382] <... mkdir resumed>) = 0 [pid 5076] close(4 [pid 7382] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./376/file1") = 0 [pid 7383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] getdents64(3, [pid 7383] <... prctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7383] setpgid(0, 0 [pid 7379] munmap(0x7f943d000000, 138412032 [pid 5076] close(3) = 0 [pid 5076] rmdir("./376" [pid 7383] <... setpgid resumed>) = 0 [pid 7379] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7379] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] mkdir("./377", 0777 [pid 7383] <... openat resumed>) = 3 [pid 7379] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... mkdir resumed>) = 0 [pid 7383] write(3, "1000", 4 [pid 7379] close(4 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7380] munmap(0x7f943d000000, 138412032 [pid 7383] <... write resumed>) = 4 [pid 7382] <... mount resumed>) = 0 [pid 7381] <... ioctl resumed>) = 0 [pid 7379] <... close resumed>) = 0 [pid 7383] close(3 [pid 7382] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7381] close(3 [pid 7380] <... munmap resumed>) = 0 [pid 7379] exit_group(0 [pid 7383] <... close resumed>) = 0 [pid 7382] <... openat resumed>) = 3 [pid 7381] <... close resumed>) = 0 [pid 7379] <... exit_group resumed>) = ? [pid 7383] symlink("/dev/binderfs", "./binderfs" [pid 7382] chdir("./file1" [pid 7381] close(4 [pid 7383] <... symlink resumed>) = 0 [pid 7382] <... chdir resumed>) = 0 [pid 7381] <... close resumed>) = 0 [pid 7382] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7380] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7382] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7380] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7383] memfd_create("syzkaller", 0 [pid 7382] truncate("./file1", 0 [pid 7381] mkdir("./file1", 0777 [pid 7383] <... memfd_create resumed>) = 3 [pid 7380] close(4 [pid 7383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7381] <... mkdir resumed>) = 0 [pid 7380] <... close resumed>) = 0 [pid 7379] +++ exited with 0 +++ [pid 7383] <... mmap resumed>) = 0x7f943d000000 [pid 7381] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7379, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] umount2("./382", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7382] <... truncate resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7382] memfd_create("syzkaller", 0 [pid 5072] <... openat resumed>) = 3 [pid 7382] <... memfd_create resumed>) = 4 [pid 5072] newfstatat(3, "", [pid 7382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7382] <... mmap resumed>) = 0x7f943d000000 [pid 5072] getdents64(3, [pid 7382] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./382/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7380] exit_group(0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7380] <... exit_group resumed>) = ? [pid 5072] newfstatat(AT_FDCWD, "./382/binderfs", [pid 7380] +++ exited with 0 +++ [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./382/binderfs" [pid 7381] <... mount resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [ 280.083517][ T7381] loop2: detected capacity change from 0 to 1024 [pid 7383] <... write resumed>) = 524288 [pid 7381] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7380, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7383] munmap(0x7f943d000000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] umount2("./380", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7381] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7381] chdir("./file1" [pid 7383] <... munmap resumed>) = 0 [pid 7381] <... chdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7381] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] newfstatat(3, "", [pid 7381] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7383] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7381] truncate("./file1", 0 [pid 5075] getdents64(3, [pid 7383] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7383] ioctl(4, LOOP_SET_FD, 3 [pid 7382] <... write resumed>) = 524288 [pid 5075] umount2("./380/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7381] <... truncate resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7381] memfd_create("syzkaller", 0) = 4 [pid 7381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7381] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7382] munmap(0x7f943d000000, 138412032 [pid 5075] newfstatat(AT_FDCWD, "./380/binderfs", [pid 5072] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] unlink("./380/binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7382] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 7382] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 7382] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... unlink resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./382/file1", [pid 5075] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7383] <... ioctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7384 attached [pid 7383] close(3 [pid 7382] close(4 [pid 7381] <... write resumed>) = 524288 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7384 [pid 5075] <... umount2 resumed>) = 0 [pid 7384] set_robust_list(0x555583d53660, 24 [pid 7383] <... close resumed>) = 0 [pid 7382] <... close resumed>) = 0 [pid 7381] munmap(0x7f943d000000, 138412032 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7384] <... set_robust_list resumed>) = 0 [pid 5075] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7383] close(4 [pid 5072] openat(AT_FDCWD, "./382/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7384] chdir("./377" [pid 7383] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7384] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] newfstatat(AT_FDCWD, "./380/file1", [pid 7384] <... prctl resumed>) = 0 [pid 7384] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7384] <... setpgid resumed>) = 0 [pid 7383] mkdir("./file1", 0777 [pid 7381] <... munmap resumed>) = 0 [pid 5075] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 7384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7382] exit_group(0 [pid 5075] openat(AT_FDCWD, "./380/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(4, [pid 7384] write(3, "1000", 4 [pid 7382] <... exit_group resumed>) = ? [pid 7381] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... openat resumed>) = 4 [pid 7384] <... write resumed>) = 4 [pid 7381] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(4, "", [pid 7384] close(3 [pid 7383] <... mkdir resumed>) = 0 [pid 7382] +++ exited with 0 +++ [pid 7381] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7384] <... close resumed>) = 0 [pid 7383] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7382, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./381", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] close(4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./382/file1" [pid 5071] <... openat resumed>) = 3 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./380/file1" [pid 5072] <... rmdir resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5072] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5072] close(3 [pid 7384] memfd_create("syzkaller", 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] rmdir("./382" [pid 7384] <... memfd_create resumed>) = 3 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] close(3 [pid 5072] mkdir("./383", 0777 [pid 5071] umount2("./381/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 7384] <... mmap resumed>) = 0x7f943d000000 [ 280.153708][ T7383] loop3: detected capacity change from 0 to 1024 [pid 7384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7381] <... close resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7383] <... mount resumed>) = 0 [pid 5075] rmdir("./380" [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./381/binderfs", [pid 7383] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] unlink("./381/binderfs" [pid 5075] mkdir("./381", 0777 [pid 7383] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 7383] chdir("./file1" [pid 5071] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7383] <... chdir resumed>) = 0 [pid 7383] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7383] truncate("./file1", 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7381] exit_group(0) = ? [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7384] <... write resumed>) = 524288 [pid 7383] <... truncate resumed>) = 0 [pid 7381] +++ exited with 0 +++ [pid 7384] munmap(0x7f943d000000, 138412032 [pid 7383] memfd_create("syzkaller", 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7381, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7384] <... munmap resumed>) = 0 [pid 7383] <... memfd_create resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./381/file1", [pid 5073] umount2("./382", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... openat resumed>) = 3 [pid 7383] <... mmap resumed>) = 0x7f943d000000 [pid 5073] newfstatat(3, "", [pid 5071] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7384] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7384] <... openat resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./381/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(3, [pid 5071] <... openat resumed>) = 4 [pid 7384] ioctl(4, LOOP_SET_FD, 3 [pid 7383] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] newfstatat(4, "", [pid 7383] <... write resumed>) = 524288 [pid 5073] umount2("./382/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7384] <... ioctl resumed>) = 0 [pid 7383] munmap(0x7f943d000000, 138412032 [pid 5073] newfstatat(AT_FDCWD, "./382/binderfs", [pid 5071] getdents64(4, [pid 7384] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] unlink("./382/binderfs" [pid 7384] <... close resumed>) = 0 [pid 5071] getdents64(4, [pid 7383] <... munmap resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7384] close(4 [pid 5073] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(4 [pid 7384] <... close resumed>) = 0 [pid 7384] mkdir("./file1", 0777 [pid 7383] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 7383] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7383] close(4 [pid 5072] <... ioctl resumed>) = 0 [pid 7384] <... mkdir resumed>) = 0 [pid 5071] rmdir("./381/file1" [pid 7384] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... rmdir resumed>) = 0 [pid 7383] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 7383] exit_group(0 [pid 7384] <... mount resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] close(3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7384] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] close(3 [pid 7384] chdir("./file1" [pid 5071] <... close resumed>) = 0 [pid 7384] <... chdir resumed>) = 0 [pid 7384] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7383] <... exit_group resumed>) = ? [pid 5075] <... ioctl resumed>) = 0 [pid 5071] rmdir("./381" [pid 5073] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 7384] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7384] truncate("./file1", 0 [pid 7383] +++ exited with 0 +++ [pid 5073] newfstatat(AT_FDCWD, "./382/file1", [pid 5071] <... rmdir resumed>) = 0 [pid 7384] <... truncate resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7383, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7385 [pid 5071] mkdir("./382", 0777./strace-static-x86_64: Process 7385 attached [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 [pid 7385] set_robust_list(0x555583d53660, 24 [pid 7384] memfd_create("syzkaller", 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7385] <... set_robust_list resumed>) = 0 [pid 7384] <... memfd_create resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./382/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7385] chdir("./383" [pid 7384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... openat resumed>) = 3 [pid 7385] <... chdir resumed>) = 0 [pid 7384] <... mmap resumed>) = 0x7f943d000000 [pid 5074] umount2("./382", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] newfstatat(4, "", [pid 7385] <... prctl resumed>) = 0 [pid 7385] setpgid(0, 0) = 0 [pid 7385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7385] <... openat resumed>) = 3 [pid 7385] write(3, "1000", 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7385] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] getdents64(4, [pid 7385] close(3) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7385] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7385] <... symlink resumed>) = 0 [ 280.253474][ T7384] loop5: detected capacity change from 0 to 1024 [pid 7384] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] close(3 [pid 5074] newfstatat(3, "", [pid 5075] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./382/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./382/binderfs") = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7386 [pid 5074] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 7385] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7385] <... memfd_create resumed>) = 3 [pid 7385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] close(4./strace-static-x86_64: Process 7386 attached ) = 0 [pid 7386] set_robust_list(0x555583d53660, 24 [pid 5073] rmdir("./382/file1" [pid 7386] <... set_robust_list resumed>) = 0 [pid 7386] chdir("./381" [pid 5074] <... umount2 resumed>) = 0 [pid 7386] <... chdir resumed>) = 0 [pid 7386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 7386] setpgid(0, 0 [pid 7385] <... write resumed>) = 524288 [pid 7384] <... write resumed>) = 524288 [pid 5073] getdents64(3, [pid 7386] <... setpgid resumed>) = 0 [pid 7386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7386] write(3, "1000", 4) = 4 [pid 7386] close(3) = 0 [pid 7386] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7386] memfd_create("syzkaller", 0) = 3 [pid 7385] munmap(0x7f943d000000, 138412032 [pid 7386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7385] <... munmap resumed>) = 0 [pid 7386] <... mmap resumed>) = 0x7f943d000000 [pid 7386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./382" [pid 5074] newfstatat(AT_FDCWD, "./382/file1", [pid 7385] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7385] ioctl(4, LOOP_SET_FD, 3 [pid 5074] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 7384] munmap(0x7f943d000000, 138412032 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7384] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./382/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] mkdir("./383", 0777 [pid 5071] <... ioctl resumed>) = 0 [pid 7386] <... write resumed>) = 524288 [pid 7384] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... openat resumed>) = 4 [pid 5073] <... mkdir resumed>) = 0 [pid 5071] close(3) = 0 [pid 7384] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(4, "", [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7384] close(4 [pid 5073] <... openat resumed>) = 3 [pid 7386] munmap(0x7f943d000000, 138412032) = 0 [pid 7386] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 280.339403][ T7385] loop1: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 7387 attached [pid 7385] <... ioctl resumed>) = 0 [pid 7384] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7387 [pid 7387] set_robust_list(0x555583d53660, 24 [pid 7386] ioctl(4, LOOP_SET_FD, 3 [pid 7387] <... set_robust_list resumed>) = 0 [pid 7384] exit_group(0 [pid 5074] getdents64(4, [pid 7384] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7387] chdir("./382" [pid 7385] close(3) = 0 [pid 7385] close(4) = 0 [pid 7385] mkdir("./file1", 0777) = 0 [pid 7385] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7387] <... chdir resumed>) = 0 [pid 7387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7387] setpgid(0, 0 [pid 5074] getdents64(4, [pid 7384] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7387] <... setpgid resumed>) = 0 [pid 5074] close(4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7384, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... close resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] rmdir("./382/file1" [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] umount2("./377", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", [pid 7387] <... openat resumed>) = 3 [pid 7385] <... mount resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 7387] write(3, "1000", 4) = 4 [pid 7387] close(3 [pid 5076] getdents64(3, [pid 7387] <... close resumed>) = 0 [pid 7387] symlink("/dev/binderfs", "./binderfs" [pid 7385] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7385] <... openat resumed>) = 3 [pid 5076] umount2("./377/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 7385] chdir("./file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7387] <... symlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7385] <... chdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./377/binderfs", [pid 7385] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./377/binderfs" [pid 7387] memfd_create("syzkaller", 0) = 3 [pid 7385] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] rmdir("./382" [pid 7387] <... mmap resumed>) = 0x7f943d000000 [pid 7385] truncate("./file1", 0 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7386] <... ioctl resumed>) = 0 [pid 7385] <... truncate resumed>) = 0 [pid 7385] memfd_create("syzkaller", 0) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 7385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7386] close(3 [pid 7385] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] mkdir("./383", 0777 [pid 7386] <... close resumed>) = 0 [pid 7386] close(4 [pid 5074] <... mkdir resumed>) = 0 [pid 7386] <... close resumed>) = 0 [pid 7386] mkdir("./file1", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7386] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7387] <... write resumed>) = 524288 [pid 7386] <... mount resumed>) = 0 [pid 7385] <... write resumed>) = 524288 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7386] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7387] munmap(0x7f943d000000, 138412032 [pid 7386] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./377/file1", [pid 7387] <... munmap resumed>) = 0 [pid 7386] chdir("./file1" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 280.385524][ T7386] loop4: detected capacity change from 0 to 1024 [pid 7386] <... chdir resumed>) = 0 [pid 5076] umount2("./377/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7385] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7387] <... openat resumed>) = 4 [pid 7386] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7385] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./377/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(3 [pid 7387] ioctl(4, LOOP_SET_FD, 3 [pid 7386] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7386] truncate("./file1", 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 7385] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7385] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7385] close(4 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./377/file1") = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./377") = 0 ./strace-static-x86_64: Process 7388 attached [pid 7386] <... truncate resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7388 [pid 7388] set_robust_list(0x555583d53660, 24 [pid 7386] memfd_create("syzkaller", 0 [pid 7385] <... close resumed>) = 0 [pid 5076] mkdir("./378", 0777 [pid 7388] <... set_robust_list resumed>) = 0 [pid 7388] chdir("./383" [pid 7386] <... memfd_create resumed>) = 4 [pid 5076] <... mkdir resumed>) = 0 [pid 7386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7386] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7388] <... chdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7388] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7385] exit_group(0 [pid 7388] <... prctl resumed>) = 0 [pid 7385] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 3 [pid 7388] setpgid(0, 0 [pid 7385] +++ exited with 0 +++ [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7388] <... setpgid resumed>) = 0 [pid 7387] <... ioctl resumed>) = 0 [pid 7388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7387] close(3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7385, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7387] <... close resumed>) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7388] <... openat resumed>) = 3 [pid 7387] close(4 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7388] write(3, "1000", 4 [pid 7387] <... close resumed>) = 0 [pid 5074] close(3 [pid 7387] mkdir("./file1", 0777 [pid 7388] <... write resumed>) = 4 [pid 7387] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] umount2("./383", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7388] close(3 [pid 7387] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7388] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7389 attached [pid 7389] set_robust_list(0x555583d53660, 24 [pid 7388] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... openat resumed>) = 3 [pid 7389] <... set_robust_list resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7389 [pid 5072] newfstatat(3, "", [pid 7388] <... symlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 7389] chdir("./383") = 0 [pid 7388] memfd_create("syzkaller", 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] umount2("./383/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7389] setpgid(0, 0 [pid 7388] <... memfd_create resumed>) = 3 [pid 7387] <... mount resumed>) = 0 [pid 7386] <... write resumed>) = 524288 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7389] <... setpgid resumed>) = 0 [pid 7388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7387] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] newfstatat(AT_FDCWD, "./383/binderfs", [pid 7389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7387] <... openat resumed>) = 3 [ 280.451694][ T7387] loop0: detected capacity change from 0 to 1024 [pid 7389] <... openat resumed>) = 3 [pid 7388] <... mmap resumed>) = 0x7f943d000000 [pid 7387] chdir("./file1" [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7389] write(3, "1000", 4 [pid 7388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7387] <... chdir resumed>) = 0 [pid 7386] munmap(0x7f943d000000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5072] unlink("./383/binderfs" [pid 7389] <... write resumed>) = 4 [pid 7387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7386] <... munmap resumed>) = 0 [pid 7389] close(3) = 0 [pid 7389] symlink("/dev/binderfs", "./binderfs" [pid 7387] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7387] truncate("./file1", 0 [pid 7389] <... symlink resumed>) = 0 [pid 7386] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] close(3 [pid 7386] close(4 [pid 5076] <... close resumed>) = 0 [pid 7386] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... unlink resumed>) = 0 [pid 7389] memfd_create("syzkaller", 0 [pid 5072] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7390 attached [pid 7389] <... memfd_create resumed>) = 3 [pid 7387] <... truncate resumed>) = 0 [pid 7387] memfd_create("syzkaller", 0) = 4 [pid 7390] set_robust_list(0x555583d53660, 24 [pid 7387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7390] <... set_robust_list resumed>) = 0 [pid 7387] <... mmap resumed>) = 0x7f943d000000 [pid 7390] chdir("./378" [pid 7387] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7390] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7390] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7390] <... prctl resumed>) = 0 [pid 7390] setpgid(0, 0 [pid 7389] <... mmap resumed>) = 0x7f943d000000 [pid 7390] <... setpgid resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7390 [pid 5072] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7390] <... openat resumed>) = 3 [pid 7386] exit_group(0 [pid 7390] write(3, "1000", 4 [pid 7386] <... exit_group resumed>) = ? [pid 5072] newfstatat(AT_FDCWD, "./383/file1", [pid 7390] <... write resumed>) = 4 [pid 7390] close(3) = 0 [pid 7390] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7390] <... symlink resumed>) = 0 [pid 7389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7388] <... write resumed>) = 524288 [pid 7386] +++ exited with 0 +++ [pid 5072] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7388] munmap(0x7f943d000000, 138412032 [pid 5072] openat(AT_FDCWD, "./383/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7390] memfd_create("syzkaller", 0 [pid 7388] <... munmap resumed>) = 0 [pid 7387] <... write resumed>) = 524288 [pid 5072] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7386, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] umount2("./381", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 7388] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 7390] <... memfd_create resumed>) = 3 [pid 5075] umount2("./381/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7388] <... openat resumed>) = 4 [pid 7390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7390] <... mmap resumed>) = 0x7f943d000000 [pid 7388] ioctl(4, LOOP_SET_FD, 3 [pid 5075] newfstatat(AT_FDCWD, "./381/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./381/binderfs") = 0 [pid 5075] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] getdents64(4, [pid 7389] <... write resumed>) = 524288 [pid 7389] munmap(0x7f943d000000, 138412032 [pid 7388] <... ioctl resumed>) = 0 [pid 7387] munmap(0x7f943d000000, 138412032 [pid 5075] <... umount2 resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7389] <... munmap resumed>) = 0 [pid 7387] <... munmap resumed>) = 0 [pid 7389] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 7389] <... openat resumed>) = 4 [pid 7388] close(3 [pid 7387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] rmdir("./383/file1" [pid 7389] ioctl(4, LOOP_SET_FD, 3 [pid 7388] <... close resumed>) = 0 [pid 7387] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(AT_FDCWD, "./381/file1", [pid 7387] close(4 [pid 7388] close(4 [pid 7387] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7388] <... close resumed>) = 0 [pid 5075] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 7388] mkdir("./file1", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./381/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7390] <... write resumed>) = 524288 [pid 7390] munmap(0x7f943d000000, 138412032 [pid 7388] <... mkdir resumed>) = 0 [pid 7390] <... munmap resumed>) = 0 [pid 7388] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... openat resumed>) = 4 [pid 5072] close(3 [pid 7389] <... ioctl resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5072] <... close resumed>) = 0 [pid 7390] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7387] exit_group(0 [pid 5072] rmdir("./383" [pid 7390] <... openat resumed>) = 4 [pid 7387] <... exit_group resumed>) = ? [pid 7389] close(3 [pid 5072] <... rmdir resumed>) = 0 [ 280.572334][ T7388] loop2: detected capacity change from 0 to 1024 [ 280.596186][ T7389] loop3: detected capacity change from 0 to 1024 [pid 7390] ioctl(4, LOOP_SET_FD, 3 [pid 7389] <... close resumed>) = 0 [pid 7387] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] mkdir("./384", 0777 [pid 7390] <... ioctl resumed>) = 0 [pid 7390] close(3) = 0 [pid 5075] getdents64(4, [pid 7390] close(4 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7387, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7390] <... close resumed>) = 0 [pid 7389] close(4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7390] mkdir("./file1", 0777 [pid 7389] <... close resumed>) = 0 [pid 7390] <... mkdir resumed>) = 0 [pid 7389] mkdir("./file1", 0777 [pid 7388] <... mount resumed>) = 0 [pid 5075] getdents64(4, [pid 5072] <... openat resumed>) = 3 [pid 5071] <... restart_syscall resumed>) = 0 [pid 7390] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7389] <... mkdir resumed>) = 0 [pid 7388] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7389] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7388] <... openat resumed>) = 3 [pid 5075] close(4 [pid 5071] umount2("./382", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7388] chdir("./file1" [pid 5075] <... close resumed>) = 0 [pid 7388] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7388] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] rmdir("./381/file1" [pid 5071] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7390] <... mount resumed>) = 0 [pid 7388] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7390] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7388] truncate("./file1", 0 [pid 5071] <... openat resumed>) = 3 [pid 7390] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 7390] chdir("./file1") = 0 [pid 7388] <... truncate resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7388] memfd_create("syzkaller", 0 [pid 7390] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(3, [pid 5071] getdents64(3, [pid 7390] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7390] truncate("./file1", 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] close(3 [pid 5071] umount2("./382/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7389] <... mount resumed>) = 0 [pid 7388] <... memfd_create resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] rmdir("./381" [pid 5071] newfstatat(AT_FDCWD, "./382/binderfs", [pid 7390] <... truncate resumed>) = 0 [pid 7388] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7390] memfd_create("syzkaller", 0) = 4 [pid 7390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7390] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] unlink("./382/binderfs") = 0 [pid 5075] mkdir("./382", 0777 [pid 5071] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7388] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... mkdir resumed>) = 0 [pid 7389] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7389] chdir("./file1" [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7389] <... chdir resumed>) = 0 [pid 7388] <... write resumed>) = 524288 [ 280.624249][ T7390] loop5: detected capacity change from 0 to 1024 [pid 5071] <... umount2 resumed>) = 0 [pid 7389] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7389] truncate("./file1", 0 [pid 5071] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./382/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7388] munmap(0x7f943d000000, 138412032 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7388] <... munmap resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./382/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 7389] <... truncate resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7388] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] getdents64(4, [pid 7389] memfd_create("syzkaller", 0 [pid 7388] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7389] <... memfd_create resumed>) = 4 [pid 7388] close(4 [pid 5071] close(4 [pid 7390] <... write resumed>) = 524288 [pid 7389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7389] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7390] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] <... close resumed>) = 0 [pid 7390] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] rmdir("./382/file1" [pid 7390] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7388] <... close resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7390] close(4 [pid 7389] <... write resumed>) = 524288 [pid 7388] exit_group(0 [pid 5072] close(3 [pid 5071] getdents64(3, [pid 7388] <... exit_group resumed>) = ? [pid 5072] <... close resumed>) = 0 [pid 7390] <... close resumed>) = 0 [pid 7388] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7389] munmap(0x7f943d000000, 138412032) = 0 [pid 7389] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7389] close(4) = 0 [pid 7390] exit_group(0) = ? [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7388, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7389] exit_group(0) = ? ./strace-static-x86_64: Process 7391 attached [pid 7389] +++ exited with 0 +++ [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7391 [pid 5071] close(3 [pid 7391] set_robust_list(0x555583d53660, 24 [pid 5071] <... close resumed>) = 0 [pid 5073] umount2("./383", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] rmdir("./382" [pid 7391] <... set_robust_list resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7391] chdir("./384" [pid 7390] +++ exited with 0 +++ [pid 5075] close(3 [pid 5073] <... openat resumed>) = 3 [pid 5071] mkdir("./383", 0777 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7390, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7389, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] newfstatat(3, "", [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5076] umount2("./378", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./383", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7391] <... chdir resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./383/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7392 attached [pid 5071] <... openat resumed>) = 3 [pid 7392] set_robust_list(0x555583d53660, 24 [pid 7391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7392 [pid 5074] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7392] <... set_robust_list resumed>) = 0 [pid 7391] <... prctl resumed>) = 0 [pid 5076] getdents64(3, [pid 7392] chdir("./382" [pid 7391] setpgid(0, 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./383/binderfs", [pid 7392] <... chdir resumed>) = 0 [pid 7391] <... setpgid resumed>) = 0 [pid 5076] umount2("./378/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(3, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7392] <... prctl resumed>) = 0 [pid 7391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] newfstatat(AT_FDCWD, "./378/binderfs", [pid 5073] unlink("./383/binderfs" [pid 7392] setpgid(0, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7392] <... setpgid resumed>) = 0 [pid 7391] <... openat resumed>) = 3 [pid 5076] unlink("./378/binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 7392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7391] write(3, "1000", 4 [pid 5076] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7392] <... openat resumed>) = 3 [pid 7391] <... write resumed>) = 4 [pid 5076] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7392] write(3, "1000", 4 [pid 7391] close(3 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7392] <... write resumed>) = 4 [pid 7391] <... close resumed>) = 0 [pid 7392] close(3) = 0 [pid 7391] symlink("/dev/binderfs", "./binderfs" [pid 5076] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7392] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7392] <... symlink resumed>) = 0 [pid 7391] <... symlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./378/file1", [pid 5074] umount2("./383/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7392] memfd_create("syzkaller", 0 [pid 7391] memfd_create("syzkaller", 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7392] <... memfd_create resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7391] <... memfd_create resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./383/binderfs", [pid 7391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] umount2("./378/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7391] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = 0 [pid 7392] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] unlink("./383/binderfs" [pid 5073] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./378/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 5074] <... unlink resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./383/file1", [pid 5076] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./383/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7391] <... write resumed>) = 524288 [pid 5076] getdents64(4, [pid 5074] <... umount2 resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7392] <... write resumed>) = 524288 [pid 7391] munmap(0x7f943d000000, 138412032 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7392] munmap(0x7f943d000000, 138412032 [pid 7391] <... munmap resumed>) = 0 [pid 5076] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./378/file1" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7392] <... munmap resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./383/file1", [pid 5076] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 7391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7392] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7391] <... openat resumed>) = 4 [pid 5076] close(3 [pid 7392] <... openat resumed>) = 4 [pid 7391] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... close resumed>) = 0 [pid 5073] close(4 [pid 5076] rmdir("./378") = 0 [pid 5074] openat(AT_FDCWD, "./383/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7392] ioctl(4, LOOP_SET_FD, 3 [pid 5071] close(3 [pid 5076] mkdir("./379", 0777 [pid 5073] rmdir("./383/file1" [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] getdents64(3, ./strace-static-x86_64: Process 7393 attached [pid 5074] newfstatat(4, "", [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7393 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7393] set_robust_list(0x555583d53660, 24 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(3 [pid 5074] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 7393] <... set_robust_list resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] rmdir("./383" [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7393] chdir("./383" [pid 5073] mkdir("./384", 0777 [pid 5074] close(4) = 0 [pid 5074] rmdir("./383/file1" [pid 7393] <... chdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 7393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7393] <... prctl resumed>) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7393] setpgid(0, 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7393] <... setpgid resumed>) = 0 [pid 7393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] rmdir("./383" [pid 7393] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./384", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7392] <... ioctl resumed>) = 0 [pid 7393] write(3, "1000", 4 [pid 7392] close(3 [pid 7391] <... ioctl resumed>) = 0 [pid 7393] <... write resumed>) = 4 [pid 7392] <... close resumed>) = 0 [pid 7391] close(3 [pid 7392] close(4 [pid 7393] close(3 [pid 7391] <... close resumed>) = 0 [pid 7393] <... close resumed>) = 0 [pid 7392] <... close resumed>) = 0 [pid 7391] close(4 [pid 7393] symlink("/dev/binderfs", "./binderfs" [pid 7392] mkdir("./file1", 0777 [pid 7391] <... close resumed>) = 0 [pid 7393] <... symlink resumed>) = 0 [pid 7391] mkdir("./file1", 0777 [pid 7392] <... mkdir resumed>) = 0 [pid 7391] <... mkdir resumed>) = 0 [pid 7392] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7391] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7393] memfd_create("syzkaller", 0) = 3 [pid 7393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 280.798546][ T7391] loop1: detected capacity change from 0 to 1024 [ 280.810466][ T7392] loop4: detected capacity change from 0 to 1024 [pid 7393] munmap(0x7f943d000000, 138412032) = 0 [pid 7391] <... mount resumed>) = 0 [pid 7391] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7393] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 7391] <... openat resumed>) = 3 [pid 7393] ioctl(4, LOOP_SET_FD, 3 [pid 7391] chdir("./file1" [pid 5074] <... ioctl resumed>) = 0 [pid 7392] <... mount resumed>) = 0 [pid 7392] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7391] <... chdir resumed>) = 0 [pid 7391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7392] <... openat resumed>) = 3 [pid 7392] chdir("./file1") = 0 [pid 7391] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] close(3 [pid 7392] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7391] truncate("./file1", 0 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7394 attached [pid 7393] <... ioctl resumed>) = 0 [pid 7392] truncate("./file1", 0 [pid 7391] <... truncate resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7394 [pid 7391] memfd_create("syzkaller", 0) = 4 [pid 5076] close(3 [pid 7394] set_robust_list(0x555583d53660, 24 [pid 7391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 7394] <... set_robust_list resumed>) = 0 [pid 7391] <... mmap resumed>) = 0x7f943d000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7395 attached [pid 7394] chdir("./384" [pid 7393] close(3 [pid 7391] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7395] set_robust_list(0x555583d53660, 24 [pid 7394] <... chdir resumed>) = 0 [pid 7393] <... close resumed>) = 0 [pid 5073] close(3 [pid 7393] close(4) = 0 [pid 7393] mkdir("./file1", 0777 [pid 7394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7393] <... mkdir resumed>) = 0 [pid 7394] <... prctl resumed>) = 0 [pid 7394] setpgid(0, 0) = 0 [pid 7394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... close resumed>) = 0 [ 280.863419][ T7393] loop0: detected capacity change from 0 to 1024 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7394] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7395 [pid 7393] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7395] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 7396 attached [pid 7396] set_robust_list(0x555583d53660, 24) = 0 [pid 7394] write(3, "1000", 4 [pid 7396] chdir("./384" [pid 7394] <... write resumed>) = 4 [pid 7395] chdir("./379" [pid 7396] <... chdir resumed>) = 0 [pid 7394] close(3 [pid 7396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7394] <... close resumed>) = 0 [pid 7396] <... prctl resumed>) = 0 [pid 7394] symlink("/dev/binderfs", "./binderfs" [pid 7396] setpgid(0, 0 [pid 7394] <... symlink resumed>) = 0 [pid 7396] <... setpgid resumed>) = 0 [pid 7395] <... chdir resumed>) = 0 [pid 7394] memfd_create("syzkaller", 0 [pid 7392] <... truncate resumed>) = 0 [pid 7391] <... write resumed>) = 524288 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7396 [pid 7396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7394] <... memfd_create resumed>) = 3 [pid 7396] <... openat resumed>) = 3 [pid 7395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7392] memfd_create("syzkaller", 0 [pid 7396] write(3, "1000", 4 [pid 7395] <... prctl resumed>) = 0 [pid 7394] <... mmap resumed>) = 0x7f943d000000 [pid 7392] <... memfd_create resumed>) = 4 [pid 7396] <... write resumed>) = 4 [pid 7395] setpgid(0, 0 [pid 7392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7396] close(3) = 0 [pid 7395] <... setpgid resumed>) = 0 [pid 7392] <... mmap resumed>) = 0x7f943d000000 [pid 7396] symlink("/dev/binderfs", "./binderfs" [pid 7395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7396] <... symlink resumed>) = 0 [pid 7394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7393] <... mount resumed>) = 0 [pid 7392] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7396] memfd_create("syzkaller", 0) = 3 [pid 7395] <... openat resumed>) = 3 [pid 7396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7395] write(3, "1000", 4 [pid 7393] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7391] munmap(0x7f943d000000, 138412032 [pid 7396] <... mmap resumed>) = 0x7f943d000000 [pid 7395] <... write resumed>) = 4 [pid 7391] <... munmap resumed>) = 0 [pid 7395] close(3 [pid 7393] <... openat resumed>) = 3 [pid 7395] <... close resumed>) = 0 [pid 7393] chdir("./file1" [pid 7395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7395] memfd_create("syzkaller", 0 [pid 7393] <... chdir resumed>) = 0 [pid 7396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7395] <... memfd_create resumed>) = 3 [pid 7394] <... write resumed>) = 524288 [pid 7393] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7392] <... write resumed>) = 524288 [pid 7391] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7393] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7391] close(4) = 0 [pid 7393] truncate("./file1", 0 [pid 7392] munmap(0x7f943d000000, 138412032 [pid 7396] <... write resumed>) = 524288 [pid 7395] <... write resumed>) = 524288 [pid 7392] <... munmap resumed>) = 0 [pid 7393] <... truncate resumed>) = 0 [pid 7392] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7393] memfd_create("syzkaller", 0 [pid 7396] munmap(0x7f943d000000, 138412032) = 0 [pid 7393] <... memfd_create resumed>) = 4 [pid 7392] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7396] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7395] munmap(0x7f943d000000, 138412032 [pid 7393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7392] close(4 [pid 7396] <... openat resumed>) = 4 [pid 7395] <... munmap resumed>) = 0 [pid 7393] <... mmap resumed>) = 0x7f943d000000 [pid 7396] ioctl(4, LOOP_SET_FD, 3 [pid 7395] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7394] munmap(0x7f943d000000, 138412032 [pid 7393] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7392] <... close resumed>) = 0 [pid 7391] exit_group(0 [pid 7395] <... openat resumed>) = 4 [pid 7394] <... munmap resumed>) = 0 [pid 7395] ioctl(4, LOOP_SET_FD, 3 [pid 7396] <... ioctl resumed>) = 0 [pid 7394] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7393] <... write resumed>) = 524288 [pid 7392] exit_group(0 [pid 7391] <... exit_group resumed>) = ? [pid 7394] <... openat resumed>) = 4 [pid 7395] <... ioctl resumed>) = 0 [pid 7396] close(3 [pid 7394] ioctl(4, LOOP_SET_FD, 3 [pid 7393] munmap(0x7f943d000000, 138412032 [pid 7392] <... exit_group resumed>) = ? [pid 7391] +++ exited with 0 +++ [pid 7395] close(3 [pid 7393] <... munmap resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7391, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7395] <... close resumed>) = 0 [pid 5072] umount2("./384", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7395] close(4 [pid 5072] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7395] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7395] mkdir("./file1", 0777 [pid 7393] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] newfstatat(3, "", [pid 7395] <... mkdir resumed>) = 0 [pid 7393] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./384/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7395] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7393] close(4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./384/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./384/binderfs") = 0 [pid 7396] <... close resumed>) = 0 [pid 5072] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7392] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7392, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7396] close(4 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7396] <... close resumed>) = 0 [pid 5075] umount2("./382", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7396] mkdir("./file1", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./382/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./382/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7396] <... mkdir resumed>) = 0 [pid 5075] unlink("./382/binderfs" [pid 7394] <... ioctl resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7396] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7394] close(3 [pid 5075] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 7394] <... close resumed>) = 0 [pid 7395] <... mount resumed>) = 0 [pid 7394] close(4 [pid 7395] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7395] <... openat resumed>) = 3 [pid 7394] <... close resumed>) = 0 [pid 7395] chdir("./file1" [pid 7394] mkdir("./file1", 0777 [pid 7395] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7396] <... mount resumed>) = 0 [pid 7395] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7394] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./384/file1", [pid 7396] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7395] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7394] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7393] <... close resumed>) = 0 [pid 7395] truncate("./file1", 0 [pid 7396] <... openat resumed>) = 3 [pid 7396] chdir("./file1") = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7396] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7395] <... truncate resumed>) = 0 [pid 5072] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7396] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7395] memfd_create("syzkaller", 0 [pid 7393] exit_group(0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7396] truncate("./file1", 0 [pid 7395] <... memfd_create resumed>) = 4 [pid 7393] <... exit_group resumed>) = ? [pid 5075] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./384/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7396] <... truncate resumed>) = 0 [pid 7395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7393] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 4 [pid 7395] <... mmap resumed>) = 0x7f943d000000 [pid 5075] newfstatat(AT_FDCWD, "./382/file1", [pid 5072] newfstatat(4, "", [pid 7396] memfd_create("syzkaller", 0 [pid 7395] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7393, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5071] umount2("./383", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7396] <... memfd_create resumed>) = 4 [pid 5072] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] newfstatat(3, "", [pid 7396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7396] <... mmap resumed>) = 0x7f943d000000 [pid 5071] getdents64(3, [pid 7394] <... mount resumed>) = 0 [pid 5075] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 280.988557][ T7396] loop2: detected capacity change from 0 to 1024 [ 281.005802][ T7395] loop5: detected capacity change from 0 to 1024 [ 281.024029][ T7394] loop3: detected capacity change from 0 to 1024 [pid 5072] getdents64(4, [pid 5071] umount2("./383/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./382/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5072] close(4 [pid 5071] newfstatat(AT_FDCWD, "./383/binderfs", [pid 5075] newfstatat(4, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] unlink("./383/binderfs" [pid 5075] getdents64(4, [pid 5072] rmdir("./384/file1" [pid 5071] <... unlink resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5072] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5072] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./382/file1" [pid 5072] rmdir("./384" [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] mkdir("./385", 0777 [pid 5075] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./382" [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7396] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7394] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 7394] <... openat resumed>) = 3 [pid 5072] <... openat resumed>) = 3 [pid 5071] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7395] <... write resumed>) = 524288 [pid 7394] chdir("./file1" [pid 5075] mkdir("./383", 0777 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7394] <... chdir resumed>) = 0 [pid 7394] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./383/file1", [pid 7394] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7394] truncate("./file1", 0 [pid 5071] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./383/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... openat resumed>) = 4 [pid 7395] munmap(0x7f943d000000, 138412032 [pid 5075] <... openat resumed>) = 3 [pid 5071] newfstatat(4, "", [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 7395] <... munmap resumed>) = 0 [pid 5071] rmdir("./383/file1" [pid 7395] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] <... rmdir resumed>) = 0 [pid 7396] <... write resumed>) = 524288 [pid 7395] close(4 [pid 7394] <... truncate resumed>) = 0 [pid 7396] munmap(0x7f943d000000, 138412032 [pid 7394] memfd_create("syzkaller", 0 [pid 5071] getdents64(3, [pid 7396] <... munmap resumed>) = 0 [pid 7394] <... memfd_create resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] close(3 [pid 7396] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 7396] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] rmdir("./383" [pid 7396] close(4 [pid 5071] <... rmdir resumed>) = 0 [pid 7396] <... close resumed>) = 0 [pid 7394] <... mmap resumed>) = 0x7f943d000000 [pid 5071] mkdir("./384", 0777) = 0 [pid 7395] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7395] exit_group(0) = ? [pid 7396] exit_group(0) = ? [pid 7395] +++ exited with 0 +++ [pid 7394] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... ioctl resumed>) = 0 [pid 7394] <... write resumed>) = 524288 [pid 7396] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7395, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... ioctl resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7396, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7397 ./strace-static-x86_64: Process 7397 attached [pid 7394] munmap(0x7f943d000000, 138412032 [pid 5072] close(3 [pid 5076] umount2("./379", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] openat(AT_FDCWD, "./379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] umount2("./384", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7398 attached [pid 5076] newfstatat(3, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... ioctl resumed>) = 0 [pid 7398] set_robust_list(0x555583d53660, 24 [pid 5073] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7398] <... set_robust_list resumed>) = 0 [pid 7397] set_robust_list(0x555583d53660, 24 [pid 7394] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7398 [pid 7397] <... set_robust_list resumed>) = 0 [pid 7394] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7398] chdir("./385" [pid 5073] newfstatat(3, "", [pid 7397] chdir("./383" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7397] <... chdir resumed>) = 0 [pid 7394] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] getdents64(3, [pid 7397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7397] setpgid(0, 0 [pid 7394] close(4 [pid 5076] umount2("./379/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./384/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7398] <... chdir resumed>) = 0 [pid 7397] <... setpgid resumed>) = 0 [pid 7394] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./384/binderfs", [pid 7398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] newfstatat(AT_FDCWD, "./379/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7398] setpgid(0, 0) = 0 [pid 7397] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./384/binderfs" [pid 7397] write(3, "1000", 4 [pid 5076] unlink("./379/binderfs" [pid 7398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7397] <... write resumed>) = 4 [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7397] close(3 [pid 5076] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 7398] <... openat resumed>) = 3 [pid 7397] <... close resumed>) = 0 [pid 5073] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7397] memfd_create("syzkaller", 0 [pid 7398] write(3, "1000", 4 [pid 7397] <... memfd_create resumed>) = 3 [pid 7397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 7399 attached [pid 7398] <... write resumed>) = 4 [pid 7397] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = 0 [pid 7399] set_robust_list(0x555583d53660, 24 [pid 7398] close(3 [pid 7397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 7399] <... set_robust_list resumed>) = 0 [pid 7398] <... close resumed>) = 0 [pid 7399] chdir("./384") = 0 [pid 7399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7399] setpgid(0, 0 [pid 7398] symlink("/dev/binderfs", "./binderfs" [pid 7399] <... setpgid resumed>) = 0 [pid 7399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7398] <... symlink resumed>) = 0 [pid 7399] write(3, "1000", 4) = 4 [pid 7399] close(3) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7399 [pid 7399] symlink("/dev/binderfs", "./binderfs" [pid 7394] exit_group(0 [pid 7399] <... symlink resumed>) = 0 [pid 7394] <... exit_group resumed>) = ? [pid 7399] memfd_create("syzkaller", 0 [pid 7397] <... write resumed>) = 524288 [pid 7394] +++ exited with 0 +++ [pid 7399] <... memfd_create resumed>) = 3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7394, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7398] memfd_create("syzkaller", 0 [pid 5076] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./384", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./384/file1", [pid 5074] newfstatat(3, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] openat(AT_FDCWD, "./384/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./384/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 5074] newfstatat(AT_FDCWD, "./384/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 5074] unlink("./384/binderfs" [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(4, [pid 7399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7398] <... memfd_create resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./379/file1", [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7398] <... mmap resumed>) = 0x7f943d000000 [pid 5073] close(4 [pid 5076] umount2("./379/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./384/file1") = 0 [pid 7397] munmap(0x7f943d000000, 138412032 [pid 5073] getdents64(3, [pid 7398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7397] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7399] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7397] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] openat(AT_FDCWD, "./379/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] close(3 [pid 7397] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./384") = 0 [pid 5076] <... openat resumed>) = 4 [pid 7397] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(4, "", [pid 5074] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] mkdir("./385", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./384/file1", [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7399] munmap(0x7f943d000000, 138412032 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7399] <... munmap resumed>) = 0 [pid 7398] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./384/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7399] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(4, [pid 7399] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7399] ioctl(4, LOOP_SET_FD, 3 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./384/file1" [pid 7398] munmap(0x7f943d000000, 138412032 [pid 5076] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [pid 5076] close(4 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5076] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./384" [pid 5076] rmdir("./379/file1" [pid 5074] <... rmdir resumed>) = 0 [pid 7398] <... munmap resumed>) = 0 [pid 7397] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] mkdir("./385", 0777 [pid 7398] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] getdents64(3, [pid 7398] <... openat resumed>) = 4 [pid 7397] close(3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./379" [pid 7397] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7397] close(4 [pid 5076] mkdir("./380", 0777 [pid 7399] <... ioctl resumed>) = 0 [pid 7398] ioctl(4, LOOP_SET_FD, 3 [pid 7397] <... close resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7399] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7399] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7399] close(4) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7399] mkdir("./file1", 0777) = 0 [pid 7399] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7398] <... ioctl resumed>) = 0 [pid 7397] mkdir("./file1", 0777 [pid 5076] <... openat resumed>) = 3 [pid 7398] close(3 [pid 7397] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7398] <... close resumed>) = 0 [pid 7397] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7398] close(4 [pid 7399] <... mount resumed>) = 0 [pid 7398] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7398] mkdir("./file1", 0777) = 0 [pid 7398] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7399] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] close(3 [pid 7399] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 7399] chdir("./file1" [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7399] <... chdir resumed>) = 0 [pid 7399] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7400 [pid 7399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7399] truncate("./file1", 0) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7399] memfd_create("syzkaller", 0) = 4 [pid 7399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [ 281.223167][ T7397] loop4: detected capacity change from 0 to 1024 [ 281.239017][ T7399] loop0: detected capacity change from 0 to 1024 [ 281.246996][ T7398] loop1: detected capacity change from 0 to 1024 [pid 7399] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7401 attached [pid 7401] set_robust_list(0x555583d53660, 24) = 0 [pid 5076] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7400 attached [pid 7401] chdir("./385" [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7401 [pid 7401] <... chdir resumed>) = 0 [pid 7397] <... mount resumed>) = 0 [pid 7400] set_robust_list(0x555583d53660, 24 [pid 7401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7400] <... set_robust_list resumed>) = 0 [pid 7397] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7401] <... prctl resumed>) = 0 [pid 7400] chdir("./385" [pid 7398] <... mount resumed>) = 0 [pid 7397] <... openat resumed>) = 3 [pid 7401] setpgid(0, 0) = 0 [pid 7401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7400] <... chdir resumed>) = 0 [pid 7399] <... write resumed>) = 524288 [pid 7398] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7397] chdir("./file1" [pid 5076] close(3 [pid 7401] <... openat resumed>) = 3 [pid 7400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7398] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 7397] <... chdir resumed>) = 0 [pid 7400] <... prctl resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7397] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7398] chdir("./file1" [pid 7400] setpgid(0, 0 [pid 7397] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7401] write(3, "1000", 4) = 4 [pid 7401] close(3) = 0 [pid 7401] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 7402 attached ) = 0 [pid 7400] <... setpgid resumed>) = 0 [pid 7399] munmap(0x7f943d000000, 138412032 [pid 7398] <... chdir resumed>) = 0 [pid 7397] truncate("./file1", 0 [pid 7402] set_robust_list(0x555583d53660, 24 [pid 7400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7402] <... set_robust_list resumed>) = 0 [pid 7402] chdir("./380" [pid 7401] memfd_create("syzkaller", 0 [pid 7398] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7397] <... truncate resumed>) = 0 [pid 7402] <... chdir resumed>) = 0 [pid 7401] <... memfd_create resumed>) = 3 [pid 7400] <... openat resumed>) = 3 [pid 7399] <... munmap resumed>) = 0 [pid 7398] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7397] memfd_create("syzkaller", 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7402 [pid 7402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7400] write(3, "1000", 4 [pid 7398] truncate("./file1", 0 [pid 7397] <... memfd_create resumed>) = 4 [pid 7399] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7402] <... prctl resumed>) = 0 [pid 7401] <... mmap resumed>) = 0x7f943d000000 [pid 7400] <... write resumed>) = 4 [pid 7399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7402] setpgid(0, 0 [pid 7401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7400] close(3 [pid 7399] close(4 [pid 7397] <... mmap resumed>) = 0x7f943d000000 [pid 7402] <... setpgid resumed>) = 0 [pid 7400] <... close resumed>) = 0 [pid 7402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7400] symlink("/dev/binderfs", "./binderfs" [pid 7402] <... openat resumed>) = 3 [pid 7400] <... symlink resumed>) = 0 [pid 7398] <... truncate resumed>) = 0 [pid 7398] memfd_create("syzkaller", 0) = 4 [pid 7398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7402] write(3, "1000", 4 [pid 7398] <... mmap resumed>) = 0x7f943d000000 [pid 7402] <... write resumed>) = 4 [pid 7402] close(3) = 0 [pid 7402] symlink("/dev/binderfs", "./binderfs" [pid 7399] <... close resumed>) = 0 [pid 7402] <... symlink resumed>) = 0 [pid 7402] memfd_create("syzkaller", 0 [pid 7400] memfd_create("syzkaller", 0 [pid 7402] <... memfd_create resumed>) = 3 [pid 7402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7400] <... memfd_create resumed>) = 3 [pid 7398] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7397] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7399] exit_group(0) = ? [pid 7399] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7399, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7401] <... write resumed>) = 524288 [pid 7400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5071] umount2("./384", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 7402] <... write resumed>) = 524288 [pid 7401] munmap(0x7f943d000000, 138412032 [pid 7400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7398] <... write resumed>) = 524288 [pid 7397] <... write resumed>) = 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./384/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./384/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./384/binderfs") = 0 [pid 5071] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7401] <... munmap resumed>) = 0 [pid 7397] munmap(0x7f943d000000, 138412032 [pid 7401] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7397] <... munmap resumed>) = 0 [pid 7401] ioctl(4, LOOP_SET_FD, 3 [pid 7400] <... write resumed>) = 524288 [pid 7398] munmap(0x7f943d000000, 138412032 [pid 7397] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... umount2 resumed>) = 0 [pid 7400] munmap(0x7f943d000000, 138412032 [pid 7402] munmap(0x7f943d000000, 138412032 [pid 7398] <... munmap resumed>) = 0 [pid 7402] <... munmap resumed>) = 0 [pid 7400] <... munmap resumed>) = 0 [pid 7397] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7398] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7400] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7397] close(4 [pid 7402] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7402] ioctl(4, LOOP_SET_FD, 3 [pid 7400] <... openat resumed>) = 4 [pid 7398] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7397] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7400] ioctl(4, LOOP_SET_FD, 3 [pid 7398] close(4 [pid 5071] newfstatat(AT_FDCWD, "./384/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7401] <... ioctl resumed>) = 0 [pid 7401] close(3) = 0 [pid 5071] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7401] close(4) = 0 [pid 7398] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7401] mkdir("./file1", 0777 [pid 7397] exit_group(0 [pid 7401] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./384/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7402] <... ioctl resumed>) = 0 [pid 7401] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7398] exit_group(0 [pid 7397] <... exit_group resumed>) = ? [pid 5071] <... openat resumed>) = 4 [pid 7402] close(3 [pid 7398] <... exit_group resumed>) = ? [pid 7402] <... close resumed>) = 0 [pid 7402] close(4 [pid 7397] +++ exited with 0 +++ [pid 5071] newfstatat(4, "", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7397, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7402] <... close resumed>) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7402] mkdir("./file1", 0777 [pid 5075] <... restart_syscall resumed>) = 0 [pid 7402] <... mkdir resumed>) = 0 [pid 7398] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7398, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7402] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] umount2("./383", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./385", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 5072] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 5072] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./383/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] newfstatat(AT_FDCWD, "./383/binderfs", [pid 5072] umount2("./385/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] unlink("./383/binderfs" [pid 5072] newfstatat(AT_FDCWD, "./385/binderfs", [pid 5075] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] unlink("./385/binderfs") = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7400] <... ioctl resumed>) = 0 [pid 7400] close(3 [pid 7402] <... mount resumed>) = 0 [pid 5071] close(4 [pid 7400] <... close resumed>) = 0 [pid 7402] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7400] close(4 [pid 5071] <... close resumed>) = 0 [pid 7401] <... mount resumed>) = 0 [pid 7400] <... close resumed>) = 0 [pid 7402] <... openat resumed>) = 3 [pid 7400] mkdir("./file1", 0777 [pid 7402] chdir("./file1") = 0 [pid 7401] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] rmdir("./384/file1" [pid 7402] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7400] <... mkdir resumed>) = 0 [pid 7402] truncate("./file1", 0 [pid 7400] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7401] <... openat resumed>) = 3 [ 281.369158][ T7401] loop3: detected capacity change from 0 to 1024 [ 281.379271][ T7402] loop5: detected capacity change from 0 to 1024 [ 281.391558][ T7400] loop2: detected capacity change from 0 to 1024 [pid 7401] chdir("./file1" [pid 5071] <... rmdir resumed>) = 0 [pid 7401] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 7401] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7401] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7402] <... truncate resumed>) = 0 [pid 7401] truncate("./file1", 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7402] memfd_create("syzkaller", 0 [pid 5071] rmdir("./384" [pid 7402] <... memfd_create resumed>) = 4 [pid 7402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./385", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7402] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./383/file1", [pid 7401] <... truncate resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7401] memfd_create("syzkaller", 0 [pid 5075] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 7401] <... memfd_create resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7402] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7400] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./383/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7401] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7400] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] close(4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7400] <... openat resumed>) = 3 [pid 5075] <... close resumed>) = 0 [pid 7401] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] rmdir("./383/file1" [pid 5072] newfstatat(AT_FDCWD, "./385/file1", [pid 7400] chdir("./file1" [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7402] <... write resumed>) = 524288 [pid 7401] <... write resumed>) = 524288 [pid 5072] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./385/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7400] <... chdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7400] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] getdents64(3, [pid 5072] newfstatat(4, "", [pid 7400] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7400] truncate("./file1", 0 [pid 5075] close(3 [pid 5072] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] rmdir("./383" [pid 5072] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5075] mkdir("./384", 0777 [pid 5072] rmdir("./385/file1" [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7401] munmap(0x7f943d000000, 138412032) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] close(3) = 0 [pid 7402] munmap(0x7f943d000000, 138412032 [pid 5072] rmdir("./385") = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7402] <... munmap resumed>) = 0 [pid 5072] mkdir("./386", 0777 [pid 7401] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7402] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7401] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7400] <... truncate resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7400] memfd_create("syzkaller", 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7400] <... memfd_create resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 7402] close(4 [pid 7400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7402] <... close resumed>) = 0 [pid 7400] <... mmap resumed>) = 0x7f943d000000 [pid 7400] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7401] close(4 [pid 7402] exit_group(0) = ? [pid 7400] <... write resumed>) = 524288 [pid 7402] +++ exited with 0 +++ [pid 7401] <... close resumed>) = 0 [pid 5071] close(3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7402, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] umount2("./380", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./380/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./380/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./380/binderfs") = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7401] exit_group(0 [pid 7400] munmap(0x7f943d000000, 138412032./strace-static-x86_64: Process 7403 attached [pid 7401] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = 0 [pid 7400] <... munmap resumed>) = 0 [pid 7403] set_robust_list(0x555583d53660, 24 [pid 7401] +++ exited with 0 +++ [pid 5076] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7403 [pid 7400] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7401, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7403] <... set_robust_list resumed>) = 0 [pid 7400] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./380/file1", [pid 7403] chdir("./385" [pid 7400] close(4 [pid 5072] close(3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./385", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7403] <... chdir resumed>) = 0 [pid 7400] <... close resumed>) = 0 [pid 5076] umount2("./380/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./380/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 7403] <... prctl resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5072] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7404 attached [pid 7403] setpgid(0, 0 [pid 5076] newfstatat(4, "", [pid 5074] getdents64(3, ./strace-static-x86_64: Process 7405 attached [pid 7404] set_robust_list(0x555583d53660, 24 [pid 7403] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7404 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7405 [pid 7405] set_robust_list(0x555583d53660, 24 [pid 7404] <... set_robust_list resumed>) = 0 [pid 7403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] getdents64(4, [pid 5074] umount2("./385/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7405] <... set_robust_list resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7405] chdir("./386" [pid 7404] chdir("./384" [pid 7403] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7404] <... chdir resumed>) = 0 [pid 5076] close(4 [pid 7405] <... chdir resumed>) = 0 [pid 7405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7403] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./385/binderfs", [pid 7405] <... prctl resumed>) = 0 [pid 7404] <... prctl resumed>) = 0 [pid 5076] rmdir("./380/file1" [pid 7403] <... write resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7405] setpgid(0, 0 [pid 7404] setpgid(0, 0 [pid 7403] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] unlink("./385/binderfs" [pid 7405] <... setpgid resumed>) = 0 [pid 7404] <... setpgid resumed>) = 0 [pid 7403] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] <... unlink resumed>) = 0 [pid 7403] symlink("/dev/binderfs", "./binderfs" [pid 5074] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7403] <... symlink resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7404] <... openat resumed>) = 3 [pid 7403] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 7403] <... memfd_create resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 7404] write(3, "1000", 4 [pid 7405] <... openat resumed>) = 3 [pid 7403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7400] exit_group(0 [pid 5074] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7405] write(3, "1000", 4 [pid 7404] <... write resumed>) = 4 [pid 7403] <... mmap resumed>) = 0x7f943d000000 [pid 7400] <... exit_group resumed>) = ? [pid 5076] rmdir("./380" [pid 7405] <... write resumed>) = 4 [pid 7404] close(3 [pid 7403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7400] +++ exited with 0 +++ [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7405] close(3 [pid 7404] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7400, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7405] <... close resumed>) = 0 [pid 7404] symlink("/dev/binderfs", "./binderfs" [pid 5076] mkdir("./381", 0777 [pid 5074] newfstatat(AT_FDCWD, "./385/file1", [pid 7405] symlink("/dev/binderfs", "./binderfs" [pid 7404] <... symlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./385", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7405] <... symlink resumed>) = 0 [pid 7404] memfd_create("syzkaller", 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./385/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 7404] <... memfd_create resumed>) = 3 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7405] memfd_create("syzkaller", 0 [pid 7404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] newfstatat(4, "", [pid 5073] getdents64(3, [pid 7405] <... memfd_create resumed>) = 3 [pid 7404] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] getdents64(4, [pid 5073] umount2("./385/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./385/binderfs", [pid 7405] <... mmap resumed>) = 0x7f943d000000 [pid 7404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7403] <... write resumed>) = 524288 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4 [pid 5073] unlink("./385/binderfs" [pid 5074] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5074] rmdir("./385/file1" [pid 5073] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, [pid 7405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./385") = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7403] munmap(0x7f943d000000, 138412032 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] mkdir("./386", 0777) = 0 [pid 5073] newfstatat(AT_FDCWD, "./385/file1", [pid 7403] <... munmap resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7403] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7403] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7403] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./385/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7405] <... write resumed>) = 524288 [pid 7404] <... write resumed>) = 524288 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7405] munmap(0x7f943d000000, 138412032 [pid 7403] <... ioctl resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7404] munmap(0x7f943d000000, 138412032 [pid 7403] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7405] <... munmap resumed>) = 0 [pid 7404] <... munmap resumed>) = 0 [pid 7403] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 7405] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7404] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7403] close(4 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7405] <... openat resumed>) = 4 [pid 7404] <... openat resumed>) = 4 [pid 7403] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 7404] ioctl(4, LOOP_SET_FD, 3 [pid 7403] mkdir("./file1", 0777 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7405] ioctl(4, LOOP_SET_FD, 3 [pid 5073] close(4) = 0 [pid 5073] rmdir("./385/file1") = 0 [pid 7403] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./385") = 0 [pid 5073] mkdir("./386", 0777) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 7403] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7404] <... ioctl resumed>) = 0 [pid 7404] close(3) = 0 [pid 7404] close(4) = 0 [pid 7404] mkdir("./file1", 0777./strace-static-x86_64: Process 7406 attached [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7406 [pid 7403] <... mount resumed>) = 0 [pid 7406] set_robust_list(0x555583d53660, 24 [pid 7403] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7406] <... set_robust_list resumed>) = 0 [pid 7403] <... openat resumed>) = 3 [pid 7403] chdir("./file1" [pid 7406] chdir("./381" [pid 7404] <... mkdir resumed>) = 0 [pid 7403] <... chdir resumed>) = 0 [pid 7403] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7406] <... chdir resumed>) = 0 [pid 7403] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] close(3 [pid 7406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7405] <... ioctl resumed>) = 0 [pid 7404] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7403] truncate("./file1", 0 [pid 5074] <... close resumed>) = 0 [pid 7406] <... prctl resumed>) = 0 [pid 7405] close(3 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7406] setpgid(0, 0 [pid 7405] <... close resumed>) = 0 ./strace-static-x86_64: Process 7407 attached [pid 7405] close(4 [pid 7403] <... truncate resumed>) = 0 [pid 7406] <... setpgid resumed>) = 0 [pid 7405] <... close resumed>) = 0 [pid 7403] memfd_create("syzkaller", 0) = 4 [pid 7406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7405] mkdir("./file1", 0777 [pid 7403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7407] set_robust_list(0x555583d53660, 24 [pid 7406] <... openat resumed>) = 3 [pid 7405] <... mkdir resumed>) = 0 [pid 7403] <... mmap resumed>) = 0x7f943d000000 [pid 7407] <... set_robust_list resumed>) = 0 [pid 7406] write(3, "1000", 4 [pid 7404] <... mount resumed>) = 0 [pid 7407] chdir("./386" [pid 7406] <... write resumed>) = 4 [pid 7405] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7404] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7407 [pid 7407] <... chdir resumed>) = 0 [pid 7406] close(3 [pid 7404] <... openat resumed>) = 3 [pid 7403] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7404] chdir("./file1" [pid 7407] <... prctl resumed>) = 0 [pid 7407] setpgid(0, 0 [pid 7404] <... chdir resumed>) = 0 [pid 7406] <... close resumed>) = 0 [pid 7406] symlink("/dev/binderfs", "./binderfs" [pid 7404] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7407] <... setpgid resumed>) = 0 [pid 7406] <... symlink resumed>) = 0 [pid 7404] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7404] truncate("./file1", 0 [pid 7407] <... openat resumed>) = 3 [ 281.636118][ T7403] loop0: detected capacity change from 0 to 1024 [ 281.656479][ T7404] loop4: detected capacity change from 0 to 1024 [ 281.667088][ T7405] loop1: detected capacity change from 0 to 1024 [pid 7406] memfd_create("syzkaller", 0 [pid 7407] write(3, "1000", 4 [pid 7406] <... memfd_create resumed>) = 3 [pid 7403] <... write resumed>) = 524288 [pid 7407] <... write resumed>) = 4 [pid 7407] close(3) = 0 [pid 7407] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7405] <... mount resumed>) = 0 [pid 7407] memfd_create("syzkaller", 0 [pid 7405] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7407] <... memfd_create resumed>) = 3 [pid 7405] <... openat resumed>) = 3 [pid 7407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7405] chdir("./file1" [pid 7407] <... mmap resumed>) = 0x7f943d000000 [pid 7405] <... chdir resumed>) = 0 [pid 7406] <... mmap resumed>) = 0x7f943d000000 [pid 7405] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7405] truncate("./file1", 0 [pid 7407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 7406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7404] <... truncate resumed>) = 0 [pid 7404] memfd_create("syzkaller", 0) = 4 [pid 7404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7405] <... truncate resumed>) = 0 [pid 7405] memfd_create("syzkaller", 0) = 4 [pid 7405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7405] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7403] munmap(0x7f943d000000, 138412032 [pid 5073] close(3 [pid 7403] <... munmap resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7408 attached [pid 7404] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7403] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7408 [pid 7403] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7403] close(4 [pid 7406] <... write resumed>) = 524288 [pid 7408] set_robust_list(0x555583d53660, 24) = 0 [pid 7408] chdir("./386") = 0 [pid 7408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7408] setpgid(0, 0) = 0 [pid 7404] <... write resumed>) = 524288 [pid 7408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7407] munmap(0x7f943d000000, 138412032) = 0 [pid 7408] <... openat resumed>) = 3 [pid 7407] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7407] ioctl(4, LOOP_SET_FD, 3 [pid 7403] <... close resumed>) = 0 [pid 7408] write(3, "1000", 4 [pid 7403] exit_group(0 [pid 7406] munmap(0x7f943d000000, 138412032 [pid 7408] <... write resumed>) = 4 [pid 7403] <... exit_group resumed>) = ? [pid 7408] close(3 [pid 7403] +++ exited with 0 +++ [pid 7408] <... close resumed>) = 0 [pid 7404] munmap(0x7f943d000000, 138412032 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7403, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7406] <... munmap resumed>) = 0 [pid 7406] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7408] symlink("/dev/binderfs", "./binderfs" [pid 7404] <... munmap resumed>) = 0 [pid 7408] <... symlink resumed>) = 0 [pid 7406] <... openat resumed>) = 4 [pid 7404] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7408] memfd_create("syzkaller", 0 [pid 7404] close(4 [pid 7406] ioctl(4, LOOP_SET_FD, 3 [pid 7404] <... close resumed>) = 0 [pid 5071] umount2("./385", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7408] <... memfd_create resumed>) = 3 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] umount2("./385/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./385/binderfs", [pid 7408] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./385/binderfs") = 0 [pid 5071] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7405] <... write resumed>) = 524288 [pid 7405] munmap(0x7f943d000000, 138412032 [pid 7404] exit_group(0 [pid 5071] <... umount2 resumed>) = 0 [pid 7407] <... ioctl resumed>) = 0 [pid 7407] close(3 [pid 7404] <... exit_group resumed>) = ? [pid 7407] <... close resumed>) = 0 [pid 7405] <... munmap resumed>) = 0 [pid 7407] close(4 [pid 5071] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7407] <... close resumed>) = 0 [pid 7406] <... ioctl resumed>) = 0 [pid 7405] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7406] close(3 [pid 7405] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7407] mkdir("./file1", 0777 [pid 7406] <... close resumed>) = 0 [pid 7405] close(4 [pid 7404] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7406] close(4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7404, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] newfstatat(AT_FDCWD, "./385/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7407] <... mkdir resumed>) = 0 [pid 5075] umount2("./384", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7406] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7407] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7406] mkdir("./file1", 0777 [pid 7405] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7408] <... write resumed>) = 524288 [pid 7406] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./385/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 281.756684][ T7407] loop3: detected capacity change from 0 to 1024 [ 281.770041][ T7406] loop5: detected capacity change from 0 to 1024 [pid 5075] newfstatat(3, "", [pid 7406] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5075] getdents64(3, [pid 5071] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./384/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 5075] newfstatat(AT_FDCWD, "./384/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] unlink("./384/binderfs") = 0 [pid 5071] getdents64(4, [pid 7405] exit_group(0 [pid 5075] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7408] munmap(0x7f943d000000, 138412032 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7408] <... munmap resumed>) = 0 [pid 7405] <... exit_group resumed>) = ? [pid 5071] close(4) = 0 [pid 5071] rmdir("./385/file1") = 0 [pid 5071] getdents64(3, [pid 7408] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7407] <... mount resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7408] <... openat resumed>) = 4 [pid 5071] close(3 [pid 7408] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... close resumed>) = 0 [pid 7407] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] rmdir("./385" [pid 7407] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7407] chdir("./file1") = 0 [pid 7407] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7407] truncate("./file1", 0 [pid 5075] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] mkdir("./386", 0777 [pid 7407] <... truncate resumed>) = 0 [pid 7405] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7407] memfd_create("syzkaller", 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7405, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./384/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7407] <... memfd_create resumed>) = 4 [pid 7406] <... mount resumed>) = 0 [pid 5075] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./386", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7406] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7407] <... mmap resumed>) = 0x7f943d000000 [pid 7406] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./384/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7407] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7406] chdir("./file1" [pid 5075] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 7406] <... chdir resumed>) = 0 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(3, "", [pid 5075] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./386/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7406] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(4, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(AT_FDCWD, "./386/binderfs", [pid 7406] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./386/binderfs" [pid 7406] truncate("./file1", 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./384/file1" [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./384") = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7406] <... truncate resumed>) = 0 [pid 5075] mkdir("./385", 0777 [pid 5072] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... ioctl resumed>) = 0 [pid 7406] memfd_create("syzkaller", 0) = 4 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] newfstatat(AT_FDCWD, "./386/file1", [pid 7408] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7408] close(3 [pid 7406] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7408] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./386/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7408] close(4) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7408] mkdir("./file1", 0777) = 0 [ 281.831362][ T7408] loop2: detected capacity change from 0 to 1024 [pid 7408] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7407] <... write resumed>) = 524288 [pid 5072] newfstatat(4, "", [pid 7406] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] close(3 [pid 7407] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] <... close resumed>) = 0 [pid 7407] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7409 attached [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7407] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7407] close(4 [pid 7409] set_robust_list(0x555583d53660, 24 [pid 7407] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 7409] <... set_robust_list resumed>) = 0 [pid 5075] close(3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7409 [pid 7409] chdir("./386" [pid 5072] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7407] exit_group(0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 7407] <... exit_group resumed>) = ? [pid 5072] rmdir("./386/file1" [pid 7409] <... chdir resumed>) = 0 [pid 7408] <... mount resumed>) = 0 [pid 7406] <... write resumed>) = 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 7409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7408] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7410 [pid 7409] <... prctl resumed>) = 0 [pid 7408] <... openat resumed>) = 3 [pid 7409] setpgid(0, 0 [pid 7408] chdir("./file1" [pid 7409] <... setpgid resumed>) = 0 [pid 7408] <... chdir resumed>) = 0 [pid 7408] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7408] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 7410 attached [pid 7409] <... openat resumed>) = 3 [pid 7408] truncate("./file1", 0 [pid 7406] munmap(0x7f943d000000, 138412032 [pid 5072] getdents64(3, [pid 7407] +++ exited with 0 +++ [pid 7406] <... munmap resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7407, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7410] set_robust_list(0x555583d53660, 24 [pid 7409] write(3, "1000", 4 [pid 7406] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7410] <... set_robust_list resumed>) = 0 [pid 7409] <... write resumed>) = 4 [pid 7408] <... truncate resumed>) = 0 [pid 7406] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(3 [pid 7408] memfd_create("syzkaller", 0 [pid 7409] close(3 [pid 7408] <... memfd_create resumed>) = 4 [pid 7406] close(4 [pid 5072] <... close resumed>) = 0 [pid 7408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] umount2("./386", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7408] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7408] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7409] <... close resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5072] rmdir("./386" [pid 7410] chdir("./385" [pid 7409] symlink("/dev/binderfs", "./binderfs" [pid 7408] <... write resumed>) = 524288 [pid 7406] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7410] <... chdir resumed>) = 0 [pid 5074] getdents64(3, [pid 7410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7409] <... symlink resumed>) = 0 [pid 7406] exit_group(0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... rmdir resumed>) = 0 [pid 5074] umount2("./386/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./386/binderfs") = 0 [pid 5074] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7408] munmap(0x7f943d000000, 138412032 [pid 7410] <... prctl resumed>) = 0 [pid 7409] memfd_create("syzkaller", 0 [pid 7406] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = 0 [pid 5072] mkdir("./387", 0777 [pid 7408] <... munmap resumed>) = 0 [pid 5074] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./386/file1", [pid 7406] +++ exited with 0 +++ [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7410] setpgid(0, 0 [pid 7409] <... memfd_create resumed>) = 3 [pid 7408] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7406, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... mkdir resumed>) = 0 [pid 7410] <... setpgid resumed>) = 0 [pid 7409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7408] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "./386/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7408] close(4 [pid 5074] <... openat resumed>) = 4 [pid 7410] <... openat resumed>) = 3 [pid 7409] <... mmap resumed>) = 0x7f943d000000 [pid 7408] <... close resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5072] <... openat resumed>) = 3 [pid 7410] write(3, "1000", 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5076] umount2("./381", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5076] openat(AT_FDCWD, "./381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] close(4 [pid 5076] newfstatat(3, "", [pid 5074] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] rmdir("./386/file1" [pid 7410] <... write resumed>) = 4 [pid 7409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7410] close(3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] getdents64(3, [pid 7410] <... close resumed>) = 0 [pid 5076] umount2("./381/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7410] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 5076] newfstatat(AT_FDCWD, "./381/binderfs", [pid 5074] <... close resumed>) = 0 [pid 7410] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./386" [pid 7410] memfd_create("syzkaller", 0 [pid 5076] unlink("./381/binderfs" [pid 5074] <... rmdir resumed>) = 0 [pid 7410] <... memfd_create resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 5074] mkdir("./387", 0777 [pid 7410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7408] exit_group(0 [pid 5076] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 7410] <... mmap resumed>) = 0x7f943d000000 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7408] <... exit_group resumed>) = ? [pid 5074] <... openat resumed>) = 3 [pid 7408] +++ exited with 0 +++ [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7408, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./386", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./386/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./386/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./386/binderfs") = 0 [pid 5073] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5076] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./381/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./381/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7410] <... write resumed>) = 524288 [pid 7409] <... write resumed>) = 524288 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7409] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "./381/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./386/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./386/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7410] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./386/file1" [pid 7410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7409] <... munmap resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7410] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 4 [pid 7410] ioctl(4, LOOP_SET_FD, 3 [pid 5073] getdents64(3, [pid 5072] close(3 [pid 5076] newfstatat(4, "", [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5073] close(3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./386" [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7411 [pid 5073] <... rmdir resumed>) = 0 [pid 5073] mkdir("./387", 0777) = 0 ./strace-static-x86_64: Process 7411 attached [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7411] set_robust_list(0x555583d53660, 24 [pid 5073] <... openat resumed>) = 3 [pid 7411] <... set_robust_list resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7411] chdir("./387" [pid 5073] <... ioctl resumed>) = 0 [pid 7411] <... chdir resumed>) = 0 [pid 5073] close(3 [pid 7411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... close resumed>) = 0 [pid 7411] <... prctl resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7412 attached [pid 7411] setpgid(0, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(3 [pid 7412] set_robust_list(0x555583d53660, 24 [pid 7411] <... setpgid resumed>) = 0 [pid 7412] <... set_robust_list resumed>) = 0 [pid 7411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7412] chdir("./387" [pid 7411] <... openat resumed>) = 3 [pid 7411] write(3, "1000", 4) = 4 [pid 7411] close(3) = 0 [pid 7411] symlink("/dev/binderfs", "./binderfs" [pid 7412] <... chdir resumed>) = 0 [pid 7411] <... symlink resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7412 [pid 7411] memfd_create("syzkaller", 0) = 3 [pid 7411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7412] setpgid(0, 0) = 0 [pid 7412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7409] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 7412] write(3, "1000", 4) = 4 [pid 7412] close(3) = 0 [pid 7412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7412] memfd_create("syzkaller", 0) = 3 [pid 7411] <... write resumed>) = 524288 [pid 7410] <... ioctl resumed>) = 0 [pid 7412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7410] close(3 [pid 7412] <... mmap resumed>) = 0x7f943d000000 [pid 7410] <... close resumed>) = 0 [pid 7412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7409] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7409] ioctl(4, LOOP_SET_FD, 3 [pid 7410] close(4) = 0 [pid 7410] mkdir("./file1", 0777) = 0 [ 282.026504][ T7410] loop4: detected capacity change from 0 to 1024 [pid 7410] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] getdents64(4, [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7413 ./strace-static-x86_64: Process 7413 attached [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 7413] set_robust_list(0x555583d53660, 24 [pid 7410] <... mount resumed>) = 0 [pid 7409] <... ioctl resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./381/file1" [pid 7409] close(3 [pid 7410] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7411] munmap(0x7f943d000000, 138412032 [pid 7410] <... openat resumed>) = 3 [pid 7409] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7413] <... set_robust_list resumed>) = 0 [pid 7411] <... munmap resumed>) = 0 [pid 7410] chdir("./file1" [pid 7409] close(4 [pid 5076] getdents64(3, [pid 7410] <... chdir resumed>) = 0 [pid 7409] <... close resumed>) = 0 [pid 7410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7409] mkdir("./file1", 0777 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7413] chdir("./387" [pid 7411] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7411] ioctl(4, LOOP_SET_FD, 3 [pid 7409] <... mkdir resumed>) = 0 [pid 7413] <... chdir resumed>) = 0 [pid 7410] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7409] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] close(3 [pid 7410] truncate("./file1", 0 [pid 5076] <... close resumed>) = 0 [pid 7413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] rmdir("./381" [pid 7413] <... prctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7413] setpgid(0, 0) = 0 [pid 7412] <... write resumed>) = 524288 [pid 7410] <... truncate resumed>) = 0 [pid 5076] mkdir("./382", 0777 [pid 7410] memfd_create("syzkaller", 0) = 4 [pid 7410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 7413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7410] <... mmap resumed>) = 0x7f943d000000 [pid 7413] <... openat resumed>) = 3 [pid 7412] munmap(0x7f943d000000, 138412032 [pid 7410] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... openat resumed>) = 3 [pid 7413] write(3, "1000", 4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7413] <... write resumed>) = 4 [pid 7412] <... munmap resumed>) = 0 [pid 7413] close(3) = 0 [pid 7412] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7412] <... openat resumed>) = 4 [pid 7413] memfd_create("syzkaller", 0 [pid 7412] ioctl(4, LOOP_SET_FD, 3 [pid 7413] <... memfd_create resumed>) = 3 [pid 7413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7411] <... ioctl resumed>) = 0 [pid 7410] <... write resumed>) = 524288 [pid 7409] <... mount resumed>) = 0 [pid 7411] close(3) = 0 [pid 7411] close(4) = 0 [pid 7411] mkdir("./file1", 0777 [pid 7409] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7411] <... mkdir resumed>) = 0 [pid 7409] <... openat resumed>) = 3 [pid 7409] chdir("./file1" [pid 7411] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 7409] <... chdir resumed>) = 0 [pid 7411] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7409] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7411] <... openat resumed>) = 3 [pid 7409] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7409] truncate("./file1", 0 [pid 7410] munmap(0x7f943d000000, 138412032) = 0 [pid 7411] chdir("./file1") = 0 [pid 7411] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7410] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7409] <... truncate resumed>) = 0 [pid 7412] <... ioctl resumed>) = 0 [pid 7411] truncate("./file1", 0 [pid 7410] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7409] memfd_create("syzkaller", 0 [pid 7412] close(3 [pid 7410] close(4 [pid 7412] <... close resumed>) = 0 [pid 7409] <... memfd_create resumed>) = 4 [pid 7412] close(4 [pid 7411] <... truncate resumed>) = 0 [pid 7409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7412] <... close resumed>) = 0 [pid 7411] memfd_create("syzkaller", 0 [pid 7409] <... mmap resumed>) = 0x7f943d000000 [pid 7412] mkdir("./file1", 0777 [pid 7411] <... memfd_create resumed>) = 4 [pid 7413] <... write resumed>) = 524288 [pid 7411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7412] <... mkdir resumed>) = 0 [pid 7411] <... mmap resumed>) = 0x7f943d000000 [ 282.068869][ T7409] loop0: detected capacity change from 0 to 1024 [ 282.086751][ T7411] loop1: detected capacity change from 0 to 1024 [ 282.108449][ T7412] loop2: detected capacity change from 0 to 1024 [pid 5076] <... ioctl resumed>) = 0 [pid 7413] munmap(0x7f943d000000, 138412032) = 0 [pid 5076] close(3 [pid 7413] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7412] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7411] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7413] <... openat resumed>) = 4 [pid 7410] <... close resumed>) = 0 [pid 7409] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7413] ioctl(4, LOOP_SET_FD, 3 [pid 7412] <... mount resumed>) = 0 [pid 7412] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 7414 attached ) = 3 [pid 7410] exit_group(0 [pid 7414] set_robust_list(0x555583d53660, 24 [pid 7412] chdir("./file1" [pid 7410] <... exit_group resumed>) = ? [pid 7414] <... set_robust_list resumed>) = 0 [pid 7412] <... chdir resumed>) = 0 [pid 7411] <... write resumed>) = 524288 [pid 7410] +++ exited with 0 +++ [pid 7412] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7410, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7414] chdir("./382") = 0 [pid 7412] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7412] truncate("./file1", 0 [pid 5075] umount2("./385", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 7414] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7414] <... prctl resumed>) = 0 [pid 5075] getdents64(3, [pid 7414] setpgid(0, 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7414] <... setpgid resumed>) = 0 [pid 7414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./385/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7414] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7414] write(3, "1000", 4 [pid 7412] <... truncate resumed>) = 0 [pid 7409] <... write resumed>) = 524288 [pid 5075] newfstatat(AT_FDCWD, "./385/binderfs", [pid 7414] <... write resumed>) = 4 [pid 7412] memfd_create("syzkaller", 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7414 [pid 7414] close(3 [pid 7412] <... memfd_create resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7414] <... close resumed>) = 0 [pid 7412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] unlink("./385/binderfs" [pid 7414] symlink("/dev/binderfs", "./binderfs" [pid 7412] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... unlink resumed>) = 0 [pid 7414] <... symlink resumed>) = 0 [pid 7412] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7414] memfd_create("syzkaller", 0 [pid 7411] munmap(0x7f943d000000, 138412032 [pid 7414] <... memfd_create resumed>) = 3 [pid 7411] <... munmap resumed>) = 0 [pid 7414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7411] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = 0 [pid 7411] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7411] close(4) = 0 [pid 7413] <... ioctl resumed>) = 0 [pid 7413] close(3 [pid 7412] <... write resumed>) = 524288 [pid 5075] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./385/file1", [pid 7413] <... close resumed>) = 0 [pid 7409] munmap(0x7f943d000000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7413] close(4 [pid 7409] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7414] <... write resumed>) = 524288 [pid 7413] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./385/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 7413] mkdir("./file1", 0777 [pid 7411] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 282.160416][ T7413] loop3: detected capacity change from 0 to 1024 [pid 7411] <... exit_group resumed>) = ? [pid 5075] getdents64(4, [pid 7413] <... mkdir resumed>) = 0 [pid 7411] +++ exited with 0 +++ [pid 7409] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 7409] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7409] close(4 [pid 5075] close(4 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7411, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./387", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7413] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7412] munmap(0x7f943d000000, 138412032 [pid 5075] rmdir("./385/file1" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7414] munmap(0x7f943d000000, 138412032 [pid 7412] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 7414] <... munmap resumed>) = 0 [pid 7414] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7414] ioctl(4, LOOP_SET_FD, 3 [pid 7409] <... close resumed>) = 0 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] close(3 [pid 5072] umount2("./387/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7412] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] rmdir("./385" [pid 5072] newfstatat(AT_FDCWD, "./387/binderfs", [pid 7412] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7412] close(4 [pid 5075] mkdir("./386", 0777 [pid 5072] unlink("./387/binderfs" [pid 7412] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 7409] exit_group(0 [pid 5075] ioctl(3, LOOP_CLR_FD) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7409] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7415 attached [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7415 [pid 7415] set_robust_list(0x555583d53660, 24 [pid 7414] <... ioctl resumed>) = 0 [pid 7415] <... set_robust_list resumed>) = 0 [pid 7414] close(3 [pid 7415] chdir("./386" [pid 7414] <... close resumed>) = 0 [pid 7414] close(4) = 0 [pid 7415] <... chdir resumed>) = 0 [pid 7414] mkdir("./file1", 0777 [pid 7412] exit_group(0 [pid 7415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7414] <... mkdir resumed>) = 0 [pid 7412] <... exit_group resumed>) = ? [pid 7415] <... prctl resumed>) = 0 [pid 7412] +++ exited with 0 +++ [pid 7415] setpgid(0, 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7412, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 7415] <... setpgid resumed>) = 0 [pid 5073] umount2("./387", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7414] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7409] +++ exited with 0 +++ [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7415] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7415] write(3, "1000", 4 [pid 7414] <... mount resumed>) = 0 [pid 7413] <... mount resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] newfstatat(AT_FDCWD, "./387/file1", [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7409, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 7415] <... write resumed>) = 4 [pid 7414] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7413] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] newfstatat(3, "", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7415] close(3 [pid 7414] <... openat resumed>) = 3 [pid 7413] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... restart_syscall resumed>) = 0 [pid 7415] <... close resumed>) = 0 [pid 7414] chdir("./file1" [pid 7413] chdir("./file1" [pid 5073] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7415] symlink("/dev/binderfs", "./binderfs" [pid 7414] <... chdir resumed>) = 0 [pid 7413] <... chdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] openat(AT_FDCWD, "./387/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7415] <... symlink resumed>) = 0 [pid 7414] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] umount2("./387/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 4 [pid 7414] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7413] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(4, "", [pid 5071] umount2("./386", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7415] memfd_create("syzkaller", 0 [pid 7414] truncate("./file1", 0 [pid 7413] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] newfstatat(AT_FDCWD, "./387/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7415] <... memfd_create resumed>) = 3 [pid 7413] truncate("./file1", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] unlink("./387/binderfs" [pid 5072] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 7415] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... unlink resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 7415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7414] <... truncate resumed>) = 0 [pid 5073] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 282.240283][ T7414] loop5: detected capacity change from 0 to 1024 [pid 5071] getdents64(3, [pid 7413] <... truncate resumed>) = 0 [pid 7414] memfd_create("syzkaller", 0 [pid 7413] memfd_create("syzkaller", 0 [pid 5072] getdents64(4, [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./386/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7414] <... memfd_create resumed>) = 4 [pid 7413] <... memfd_create resumed>) = 4 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./386/binderfs", [pid 7414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7414] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... close resumed>) = 0 [pid 5071] unlink("./386/binderfs" [pid 7415] <... write resumed>) = 524288 [pid 7413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] rmdir("./387/file1" [pid 5071] <... unlink resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7413] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] getdents64(3, [pid 5071] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7414] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./387") = 0 [pid 5073] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] mkdir("./388", 0777 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./387/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./387/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 7413] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7415] munmap(0x7f943d000000, 138412032 [pid 5073] close(4) = 0 [pid 5073] rmdir("./387/file1") = 0 [pid 7415] <... munmap resumed>) = 0 [pid 5073] getdents64(3, [pid 7414] <... write resumed>) = 524288 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7415] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] close(3 [pid 7415] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 7415] ioctl(4, LOOP_SET_FD, 3 [pid 5073] rmdir("./387") = 0 [pid 7414] munmap(0x7f943d000000, 138412032) = 0 [pid 5073] mkdir("./388", 0777) = 0 [pid 7414] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7414] close(4 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7414] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7413] <... write resumed>) = 524288 [pid 5071] <... umount2 resumed>) = 0 [pid 7413] munmap(0x7f943d000000, 138412032 [pid 5071] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7413] <... munmap resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./386/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7414] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./386/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7414] <... exit_group resumed>) = ? [pid 5071] <... openat resumed>) = 4 [pid 7414] +++ exited with 0 +++ [pid 7413] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] newfstatat(4, "", [pid 7415] <... ioctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7414, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7415] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7415] <... close resumed>) = 0 [pid 7415] close(4) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 7415] mkdir("./file1", 0777) = 0 [pid 5072] close(3) = 0 [pid 7415] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./382", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 7413] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7413] close(4 [pid 5076] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(4 [pid 5076] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7416 [pid 5071] rmdir("./386/file1"./strace-static-x86_64: Process 7416 attached [pid 7416] set_robust_list(0x555583d53660, 24 [pid 5071] <... rmdir resumed>) = 0 [pid 7416] <... set_robust_list resumed>) = 0 [pid 7415] <... mount resumed>) = 0 [pid 7416] chdir("./388" [pid 7415] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7416] <... chdir resumed>) = 0 [pid 7415] chdir("./file1" [pid 7416] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7415] <... chdir resumed>) = 0 [pid 7416] <... prctl resumed>) = 0 [pid 5071] getdents64(3, [pid 7416] setpgid(0, 0 [pid 5076] umount2("./382/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 7416] <... setpgid resumed>) = 0 [pid 7415] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./382/binderfs", [pid 5071] <... close resumed>) = 0 [pid 7416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7415] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] rmdir("./386" [pid 7416] <... openat resumed>) = 3 [pid 7415] truncate("./file1", 0 [pid 7416] write(3, "1000", 4 [pid 5071] <... rmdir resumed>) = 0 [pid 7416] <... write resumed>) = 4 [pid 5071] mkdir("./387", 0777 [pid 5076] unlink("./382/binderfs" [pid 7416] close(3 [pid 5071] <... mkdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7416] <... close resumed>) = 0 [pid 7416] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... openat resumed>) = 3 [pid 7416] <... symlink resumed>) = 0 [ 282.339287][ T7415] loop4: detected capacity change from 0 to 1024 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7416] memfd_create("syzkaller", 0 [pid 7415] <... truncate resumed>) = 0 [pid 7415] memfd_create("syzkaller", 0) = 4 [pid 7416] <... memfd_create resumed>) = 3 [pid 7415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7415] <... mmap resumed>) = 0x7f943d000000 [pid 7416] <... mmap resumed>) = 0x7f943d000000 [pid 7416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7415] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7413] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7417 attached [pid 7417] set_robust_list(0x555583d53660, 24) = 0 [pid 7417] chdir("./388" [pid 7413] exit_group(0 [pid 5076] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7417] <... chdir resumed>) = 0 [pid 7417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7416] <... write resumed>) = 524288 [pid 7413] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7417 [pid 7417] <... prctl resumed>) = 0 [pid 7417] setpgid(0, 0 [pid 7415] <... write resumed>) = 524288 [pid 7413] +++ exited with 0 +++ [pid 5076] newfstatat(AT_FDCWD, "./382/file1", [pid 7417] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7413, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] umount2("./387", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7417] <... openat resumed>) = 3 [pid 5076] umount2("./382/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 7417] write(3, "1000", 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7417] <... write resumed>) = 4 [pid 5074] getdents64(3, [pid 7417] close(3) = 0 [pid 7417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7417] memfd_create("syzkaller", 0) = 3 [pid 7417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7416] munmap(0x7f943d000000, 138412032) = 0 [pid 7416] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7415] munmap(0x7f943d000000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./387/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7415] <... munmap resumed>) = 0 [pid 7416] <... openat resumed>) = 4 [pid 7416] ioctl(4, LOOP_SET_FD, 3 [pid 5076] openat(AT_FDCWD, "./382/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 7415] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] newfstatat(4, "", [pid 5074] newfstatat(AT_FDCWD, "./387/binderfs", [pid 7415] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7415] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] getdents64(4, [pid 5074] unlink("./387/binderfs" [pid 5071] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7417] <... write resumed>) = 524288 [pid 7415] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5074] <... unlink resumed>) = 0 [pid 5071] close(3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] close(4 [pid 5071] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] rmdir("./382/file1" [pid 7417] munmap(0x7f943d000000, 138412032./strace-static-x86_64: Process 7418 attached [pid 7415] exit_group(0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 7417] <... munmap resumed>) = 0 [pid 7415] <... exit_group resumed>) = ? [pid 7417] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7418] set_robust_list(0x555583d53660, 24 [pid 7417] <... openat resumed>) = 4 [pid 7416] <... ioctl resumed>) = 0 [pid 5076] getdents64(3, [pid 5074] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7418 [pid 7418] <... set_robust_list resumed>) = 0 [pid 7415] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] close(3 [pid 7418] chdir("./387" [pid 5076] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./387/file1", [pid 5076] rmdir("./382" [pid 7417] ioctl(4, LOOP_SET_FD, 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7415, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7418] <... chdir resumed>) = 0 [pid 7418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] mkdir("./383", 0777 [pid 5075] umount2("./386", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7418] <... prctl resumed>) = 0 [pid 7418] setpgid(0, 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7418] <... setpgid resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./387/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] <... openat resumed>) = 4 [pid 7418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] newfstatat(4, "", [pid 7418] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 7418] write(3, "1000", 4 [pid 7416] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7418] <... write resumed>) = 4 [pid 7416] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 7418] close(3 [pid 7416] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7418] <... close resumed>) = 0 [pid 7416] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] getdents64(4, [pid 7418] symlink("/dev/binderfs", "./binderfs" [pid 7416] mkdir("./file1", 0777 [pid 5076] close(3 [pid 7418] <... symlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7416] <... mkdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./386/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7419 attached [pid 7418] memfd_create("syzkaller", 0 [pid 7416] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] newfstatat(AT_FDCWD, "./386/binderfs", [pid 5074] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./386/binderfs") = 0 [pid 7418] <... memfd_create resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 7419] set_robust_list(0x555583d53660, 24 [pid 7418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7419 [pid 5075] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] rmdir("./387/file1" [pid 7419] <... set_robust_list resumed>) = 0 [pid 7418] <... mmap resumed>) = 0x7f943d000000 [pid 7416] <... mount resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7419] chdir("./383" [pid 7418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7417] <... ioctl resumed>) = 0 [pid 7416] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 7419] <... chdir resumed>) = 0 [pid 5074] getdents64(3, [pid 7419] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7417] close(3 [pid 7416] <... openat resumed>) = 3 [pid 5075] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7419] <... prctl resumed>) = 0 [pid 7417] <... close resumed>) = 0 [pid 7416] chdir("./file1" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(3 [pid 7419] setpgid(0, 0 [pid 7417] close(4 [pid 7416] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./386/file1", [pid 5074] <... close resumed>) = 0 [pid 7419] <... setpgid resumed>) = 0 [pid 7417] <... close resumed>) = 0 [pid 7416] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] rmdir("./387" [pid 7419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7417] mkdir("./file1", 0777 [pid 5075] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7417] <... mkdir resumed>) = 0 [ 282.474878][ T7416] loop1: detected capacity change from 0 to 1024 [ 282.485318][ T7417] loop2: detected capacity change from 0 to 1024 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7419] <... openat resumed>) = 3 [pid 7417] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] openat(AT_FDCWD, "./386/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 7419] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 4 [pid 7416] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(4, "", [pid 7419] <... write resumed>) = 4 [pid 7418] <... write resumed>) = 524288 [pid 7416] truncate("./file1", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] mkdir("./388", 0777 [pid 7419] close(3 [pid 7417] <... mount resumed>) = 0 [pid 5075] getdents64(4, [pid 7419] <... close resumed>) = 0 [pid 7418] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] <... mkdir resumed>) = 0 [pid 7417] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7419] symlink("/dev/binderfs", "./binderfs" [pid 7418] <... munmap resumed>) = 0 [pid 7416] <... truncate resumed>) = 0 [pid 5075] getdents64(4, [pid 7419] <... symlink resumed>) = 0 [pid 7417] <... openat resumed>) = 3 [pid 7417] chdir("./file1" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7419] memfd_create("syzkaller", 0 [pid 7416] memfd_create("syzkaller", 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7419] <... memfd_create resumed>) = 3 [pid 7418] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7417] <... chdir resumed>) = 0 [pid 7416] <... memfd_create resumed>) = 4 [pid 5075] close(4 [pid 5074] <... openat resumed>) = 3 [pid 7419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7418] <... openat resumed>) = 4 [pid 7416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7419] <... mmap resumed>) = 0x7f943d000000 [pid 7418] ioctl(4, LOOP_SET_FD, 3 [pid 7417] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7416] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... close resumed>) = 0 [pid 7419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7418] <... ioctl resumed>) = 0 [pid 7417] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7416] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] rmdir("./386/file1" [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7417] truncate("./file1", 0 [pid 7419] <... write resumed>) = 524288 [pid 5075] <... rmdir resumed>) = 0 [pid 7417] <... truncate resumed>) = 0 [pid 7416] <... write resumed>) = 524288 [pid 7418] close(3) = 0 [pid 7418] close(4) = 0 [pid 7418] mkdir("./file1", 0777) = 0 [pid 5075] getdents64(3, [pid 7419] munmap(0x7f943d000000, 138412032) = 0 [pid 7418] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7419] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 7419] <... openat resumed>) = 4 [pid 7419] ioctl(4, LOOP_SET_FD, 3 [pid 7417] memfd_create("syzkaller", 0 [pid 5075] <... close resumed>) = 0 [pid 7416] munmap(0x7f943d000000, 138412032 [pid 7417] <... memfd_create resumed>) = 4 [pid 7416] <... munmap resumed>) = 0 [pid 5075] rmdir("./386" [pid 7416] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7416] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7416] close(4 [pid 5074] close(3 [pid 7417] <... mmap resumed>) = 0x7f943d000000 [pid 7416] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5075] mkdir("./387", 0777 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 7420 [pid 7417] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 7420 attached [pid 7420] set_robust_list(0x555583d53660, 24) = 0 [pid 7420] chdir("./388") = 0 [pid 7416] exit_group(0 [pid 7420] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7416] <... exit_group resumed>) = ? [pid 7420] <... prctl resumed>) = 0 [pid 7420] setpgid(0, 0) = 0 [pid 7420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7419] <... ioctl resumed>) = 0 [pid 7420] write(3, "1000", 4) = 4 [pid 7420] close(3) = 0 [pid 7419] close(3 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7420] symlink("/dev/binderfs", "./binderfs" [pid 7419] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7418] <... mount resumed>) = 0 [pid 7420] <... symlink resumed>) = 0 [pid 7419] close(4 [pid 7417] <... write resumed>) = 524288 [pid 7416] +++ exited with 0 +++ [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7419] <... close resumed>) = 0 [pid 7419] mkdir("./file1", 0777) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7416, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7420] memfd_create("syzkaller", 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7418] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7420] <... memfd_create resumed>) = 3 [pid 7418] <... openat resumed>) = 3 [pid 7420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7419] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7418] chdir("./file1" [pid 7420] <... mmap resumed>) = 0x7f943d000000 [pid 7418] <... chdir resumed>) = 0 [pid 5072] umount2("./388", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7418] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7418] truncate("./file1", 0 [pid 7417] munmap(0x7f943d000000, 138412032 [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 282.556650][ T7418] loop0: detected capacity change from 0 to 1024 [ 282.583576][ T7419] loop5: detected capacity change from 0 to 1024 [pid 7420] <... write resumed>) = 524288 [pid 7418] <... truncate resumed>) = 0 [pid 7417] <... munmap resumed>) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./388/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7418] memfd_create("syzkaller", 0) = 4 [pid 7417] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] newfstatat(AT_FDCWD, "./388/binderfs", [pid 7418] <... mmap resumed>) = 0x7f943d000000 [pid 7417] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7418] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7417] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./388/binderfs" [pid 7419] <... mount resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7419] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7417] <... close resumed>) = 0 [pid 7420] munmap(0x7f943d000000, 138412032 [pid 7419] <... openat resumed>) = 3 [pid 7420] <... munmap resumed>) = 0 [pid 7419] chdir("./file1" [pid 7417] exit_group(0 [pid 7419] <... chdir resumed>) = 0 [pid 7419] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7419] truncate("./file1", 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7417] <... exit_group resumed>) = ? [pid 7420] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7420] ioctl(4, LOOP_SET_FD, 3 [pid 7417] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 5072] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7417, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7418] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5072] newfstatat(AT_FDCWD, "./388/file1", [pid 5073] umount2("./388", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7418] munmap(0x7f943d000000, 138412032) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7418] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] newfstatat(3, "", [pid 5072] openat(AT_FDCWD, "./388/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7419] <... truncate resumed>) = 0 [pid 7418] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7419] memfd_create("syzkaller", 0 [pid 7418] close(4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7421 attached [pid 7419] <... memfd_create resumed>) = 4 [pid 7419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7421] set_robust_list(0x555583d53660, 24 [pid 7419] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7421 [pid 5073] getdents64(3, [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7421] <... set_robust_list resumed>) = 0 [pid 7418] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] getdents64(4, [pid 7421] chdir("./387") = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] umount2("./388/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 7421] <... prctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7421] setpgid(0, 0 [pid 5072] close(4 [pid 7421] <... setpgid resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./388/binderfs", [pid 5072] <... close resumed>) = 0 [pid 7421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] rmdir("./388/file1" [pid 7418] exit_group(0 [pid 5073] unlink("./388/binderfs" [pid 5072] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] getdents64(3, [pid 7421] <... openat resumed>) = 3 [pid 7420] <... ioctl resumed>) = 0 [pid 7418] <... exit_group resumed>) = ? [pid 5073] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7421] write(3, "1000", 4 [pid 7420] close(3 [pid 7418] +++ exited with 0 +++ [pid 7421] <... write resumed>) = 4 [pid 7420] <... close resumed>) = 0 [pid 5072] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7418, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7421] close(3 [pid 7420] close(4) = 0 [pid 7421] <... close resumed>) = 0 [pid 7420] mkdir("./file1", 0777 [pid 5072] <... close resumed>) = 0 [pid 7421] symlink("/dev/binderfs", "./binderfs" [pid 7420] <... mkdir resumed>) = 0 [pid 5072] rmdir("./388" [pid 7421] <... symlink resumed>) = 0 [pid 7420] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7421] memfd_create("syzkaller", 0 [pid 7419] <... write resumed>) = 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 7421] <... memfd_create resumed>) = 3 [pid 5072] mkdir("./389", 0777 [pid 7421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7420] <... mount resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7421] <... mmap resumed>) = 0x7f943d000000 [pid 7421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] umount2("./387", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7420] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7420] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7420] chdir("./file1" [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 7420] <... chdir resumed>) = 0 [pid 7420] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./388/file1", [pid 5071] getdents64(3, [pid 7420] truncate("./file1", 0 [pid 7419] munmap(0x7f943d000000, 138412032 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7419] <... munmap resumed>) = 0 [pid 5073] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [ 282.661442][ T7420] loop3: detected capacity change from 0 to 1024 [pid 7419] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./387/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./388/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7419] close(4 [pid 5073] <... openat resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./387/binderfs", [pid 7421] <... write resumed>) = 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(4, "", [pid 7419] <... close resumed>) = 0 [pid 7421] munmap(0x7f943d000000, 138412032 [pid 7420] <... truncate resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] unlink("./387/binderfs" [pid 7420] memfd_create("syzkaller", 0) = 4 [pid 5073] getdents64(4, [pid 7420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... unlink resumed>) = 0 [pid 7421] <... munmap resumed>) = 0 [pid 7420] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(4, [pid 5071] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 7419] exit_group(0 [pid 5073] <... close resumed>) = 0 [pid 7421] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... umount2 resumed>) = 0 [pid 7419] <... exit_group resumed>) = ? [pid 7419] +++ exited with 0 +++ [pid 5073] rmdir("./388/file1" [pid 5072] <... ioctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7419, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] umount2("./383", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7421] <... openat resumed>) = 4 [pid 5076] umount2("./383/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7421] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./387/file1", [pid 5076] newfstatat(AT_FDCWD, "./383/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] unlink("./383/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./387/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", [pid 5076] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 7421] <... ioctl resumed>) = 0 [pid 7420] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] close(3 [pid 5072] close(3 [pid 7421] close(3) = 0 [pid 7421] close(4 [pid 7420] munmap(0x7f943d000000, 138412032 [pid 5071] rmdir("./387/file1" [pid 7421] <... close resumed>) = 0 [pid 7420] <... munmap resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7421] mkdir("./file1", 0777 [pid 5073] rmdir("./388" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7421] <... mkdir resumed>) = 0 [pid 7420] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] getdents64(3, ./strace-static-x86_64: Process 7422 attached [pid 7421] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7420] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7420] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 7422] set_robust_list(0x555583d53660, 24 [pid 7420] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./383/file1", [pid 5073] mkdir("./389", 0777 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7422 [pid 5071] <... close resumed>) = 0 [pid 7422] <... set_robust_list resumed>) = 0 [pid 7422] chdir("./389" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5071] rmdir("./387" [pid 7422] <... chdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7422] setpgid(0, 0 [pid 7420] exit_group(0 [pid 5076] umount2("./383/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 7422] <... setpgid resumed>) = 0 [pid 7420] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7421] <... mount resumed>) = 0 [pid 7420] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./383/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] mkdir("./388", 0777 [pid 7422] <... openat resumed>) = 3 [pid 7421] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... openat resumed>) = 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7420, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7422] write(3, "1000", 4 [pid 7421] <... openat resumed>) = 3 [pid 5076] newfstatat(4, "", [pid 5071] <... mkdir resumed>) = 0 [pid 7421] chdir("./file1") = 0 [pid 7422] <... write resumed>) = 4 [pid 7421] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7422] close(3 [pid 7421] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(4, [pid 7422] <... close resumed>) = 0 [pid 7421] truncate("./file1", 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... openat resumed>) = 3 [pid 7422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] getdents64(4, [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./388", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7422] memfd_create("syzkaller", 0 [pid 5076] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7422] <... memfd_create resumed>) = 3 [pid 7421] <... truncate resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7421] memfd_create("syzkaller", 0 [pid 5076] rmdir("./383/file1" [pid 5074] <... openat resumed>) = 3 [pid 7421] <... memfd_create resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 7421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7421] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(3, [ 282.755325][ T7421] loop4: detected capacity change from 0 to 1024 [pid 7422] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./388/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(3 [pid 5074] unlink("./388/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5076] rmdir("./383" [pid 5074] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./384", 0777 [pid 7422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7421] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7422] <... write resumed>) = 524288 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 5074] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./388/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./388/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... openat resumed>) = 4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./388/file1") = 0 ./strace-static-x86_64: Process 7423 attached [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7423 [pid 5074] rmdir("./388") = 0 [pid 7423] set_robust_list(0x555583d53660, 24) = 0 [pid 7422] munmap(0x7f943d000000, 138412032 [pid 5074] mkdir("./389", 0777 [pid 7423] chdir("./389" [pid 7422] <... munmap resumed>) = 0 [pid 7421] <... write resumed>) = 524288 [pid 5071] <... ioctl resumed>) = 0 [pid 7421] munmap(0x7f943d000000, 138412032) = 0 [pid 7422] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7421] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7423] <... chdir resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7422] <... openat resumed>) = 4 [pid 7423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7422] ioctl(4, LOOP_SET_FD, 3 [pid 7421] close(4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7424 ./strace-static-x86_64: Process 7424 attached [pid 7424] set_robust_list(0x555583d53660, 24) = 0 [pid 7424] chdir("./388") = 0 [pid 7424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7424] setpgid(0, 0) = 0 [pid 7424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7423] <... prctl resumed>) = 0 [pid 7422] <... ioctl resumed>) = 0 [pid 7421] <... close resumed>) = 0 [pid 7423] setpgid(0, 0) = 0 [pid 7422] close(3 [pid 7423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7422] <... close resumed>) = 0 [pid 7424] <... openat resumed>) = 3 [pid 7423] <... openat resumed>) = 3 [pid 7421] exit_group(0 [pid 7423] write(3, "1000", 4 [pid 7421] <... exit_group resumed>) = ? [pid 7422] close(4 [pid 7424] write(3, "1000", 4 [pid 7423] <... write resumed>) = 4 [pid 7424] <... write resumed>) = 4 [pid 7423] close(3 [pid 7422] <... close resumed>) = 0 [pid 7421] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 7423] <... close resumed>) = 0 [pid 7422] mkdir("./file1", 0777 [pid 5076] close(3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7421, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7424] close(3 [pid 7423] symlink("/dev/binderfs", "./binderfs" [pid 7422] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7423] <... symlink resumed>) = 0 [pid 7422] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7425 attached [pid 7424] <... close resumed>) = 0 [pid 7423] memfd_create("syzkaller", 0 [pid 7422] <... mount resumed>) = 0 [pid 7424] symlink("/dev/binderfs", "./binderfs" [pid 7423] <... memfd_create resumed>) = 3 [pid 7422] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] close(3 [pid 7425] set_robust_list(0x555583d53660, 24) = 0 [pid 7424] <... symlink resumed>) = 0 [pid 7423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7422] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 7423] <... mmap resumed>) = 0x7f943d000000 [pid 7422] chdir("./file1" [pid 5075] umount2("./387", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7425] chdir("./384" [pid 7424] memfd_create("syzkaller", 0 [pid 7423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7422] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7425 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, ./strace-static-x86_64: Process 7426 attached [pid 7425] <... chdir resumed>) = 0 [pid 7424] <... memfd_create resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7426] set_robust_list(0x555583d53660, 24 [pid 7425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7422] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./387/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7426] <... set_robust_list resumed>) = 0 [pid 7425] <... prctl resumed>) = 0 [pid 7424] <... mmap resumed>) = 0x7f943d000000 [pid 7422] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7426 [pid 7425] setpgid(0, 0 [pid 7422] truncate("./file1", 0 [pid 5075] newfstatat(AT_FDCWD, "./387/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./387/binderfs" [pid 7426] chdir("./389" [pid 7425] <... setpgid resumed>) = 0 [ 282.870936][ T7422] loop1: detected capacity change from 0 to 1024 [pid 7424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... unlink resumed>) = 0 [pid 7426] <... chdir resumed>) = 0 [pid 7425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7422] <... truncate resumed>) = 0 [pid 5075] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7425] <... openat resumed>) = 3 [pid 7424] <... write resumed>) = 524288 [pid 7423] <... write resumed>) = 524288 [pid 7422] memfd_create("syzkaller", 0 [pid 7426] <... prctl resumed>) = 0 [pid 7425] write(3, "1000", 4 [pid 7424] munmap(0x7f943d000000, 138412032 [pid 7426] setpgid(0, 0 [pid 7425] <... write resumed>) = 4 [pid 7426] <... setpgid resumed>) = 0 [pid 7425] close(3 [pid 7424] <... munmap resumed>) = 0 [pid 7425] <... close resumed>) = 0 [pid 7425] symlink("/dev/binderfs", "./binderfs" [pid 7426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7425] <... symlink resumed>) = 0 [pid 7424] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7423] munmap(0x7f943d000000, 138412032 [pid 7422] <... memfd_create resumed>) = 4 [pid 7426] write(3, "1000", 4 [pid 7425] memfd_create("syzkaller", 0 [pid 7424] <... openat resumed>) = 4 [pid 7422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7426] <... write resumed>) = 4 [pid 7425] <... memfd_create resumed>) = 3 [pid 7424] ioctl(4, LOOP_SET_FD, 3 [pid 7423] <... munmap resumed>) = 0 [pid 7422] <... mmap resumed>) = 0x7f943d000000 [pid 7426] close(3 [pid 7422] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7425] <... mmap resumed>) = 0x7f943d000000 [pid 5075] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7426] <... close resumed>) = 0 [pid 7425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7423] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7426] symlink("/dev/binderfs", "./binderfs" [pid 7423] <... openat resumed>) = 4 [pid 7426] <... symlink resumed>) = 0 [pid 7423] ioctl(4, LOOP_SET_FD, 3 [pid 7426] memfd_create("syzkaller", 0 [pid 5075] newfstatat(AT_FDCWD, "./387/file1", [pid 7426] <... memfd_create resumed>) = 3 [pid 7422] <... write resumed>) = 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7422] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7424] <... ioctl resumed>) = 0 [pid 7422] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./387/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7424] close(3 [pid 7422] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] newfstatat(4, "", [pid 7422] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7424] <... close resumed>) = 0 [pid 5075] getdents64(4, [pid 7425] <... write resumed>) = 524288 [pid 7424] close(4 [pid 7423] <... ioctl resumed>) = 0 [pid 7422] close(4 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7426] <... write resumed>) = 524288 [pid 7425] munmap(0x7f943d000000, 138412032 [pid 7424] <... close resumed>) = 0 [pid 7426] munmap(0x7f943d000000, 138412032 [pid 7424] mkdir("./file1", 0777 [pid 7426] <... munmap resumed>) = 0 [pid 7425] <... munmap resumed>) = 0 [pid 7423] close(3) = 0 [pid 7426] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7423] close(4 [pid 7425] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(4, [pid 7426] <... openat resumed>) = 4 [pid 7425] <... openat resumed>) = 4 [pid 7423] <... close resumed>) = 0 [pid 7426] ioctl(4, LOOP_SET_FD, 3 [pid 7425] ioctl(4, LOOP_SET_FD, 3 [pid 7424] <... mkdir resumed>) = 0 [pid 7423] mkdir("./file1", 0777 [pid 7422] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [ 282.949975][ T7424] loop0: detected capacity change from 0 to 1024 [ 282.962671][ T7423] loop2: detected capacity change from 0 to 1024 [ 282.988175][ T7426] loop3: detected capacity change from 0 to 1024 [pid 7426] <... ioctl resumed>) = 0 [pid 7425] <... ioctl resumed>) = 0 [pid 7424] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7423] <... mkdir resumed>) = 0 [pid 7422] exit_group(0 [pid 5075] rmdir("./387/file1" [pid 7422] <... exit_group resumed>) = ? [pid 7426] close(3) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7426] close(4) = 0 [pid 7426] mkdir("./file1", 0777) = 0 [pid 7426] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7422] +++ exited with 0 +++ [pid 7423] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] getdents64(3, [pid 7425] close(3) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7425] close(4 [pid 5075] close(3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7422, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] <... close resumed>) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7425] <... close resumed>) = 0 [pid 5075] rmdir("./387" [pid 5072] <... restart_syscall resumed>) = 0 [pid 7425] mkdir("./file1", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 7426] <... mount resumed>) = 0 [pid 5072] umount2("./389", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7426] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] mkdir("./388", 0777 [pid 5072] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7426] <... openat resumed>) = 3 [pid 7425] <... mkdir resumed>) = 0 [pid 7424] <... mount resumed>) = 0 [pid 7423] <... mount resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7426] chdir("./file1" [pid 7425] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7424] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7423] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] newfstatat(3, "", [pid 7426] <... chdir resumed>) = 0 [pid 7424] <... openat resumed>) = 3 [pid 7423] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7426] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7424] chdir("./file1" [pid 7423] chdir("./file1" [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] getdents64(3, [pid 7426] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7424] <... chdir resumed>) = 0 [pid 7423] <... chdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7426] truncate("./file1", 0 [pid 7424] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7423] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] umount2("./389/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7424] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7423] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./389/binderfs", [pid 7426] <... truncate resumed>) = 0 [pid 7424] truncate("./file1", 0 [ 282.995307][ T7425] loop5: detected capacity change from 0 to 1024 [pid 7423] truncate("./file1", 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7426] memfd_create("syzkaller", 0 [pid 5072] unlink("./389/binderfs" [pid 7426] <... memfd_create resumed>) = 4 [pid 5072] <... unlink resumed>) = 0 [pid 7426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7426] <... mmap resumed>) = 0x7f943d000000 [pid 7425] <... mount resumed>) = 0 [pid 7424] <... truncate resumed>) = 0 [pid 7423] <... truncate resumed>) = 0 [pid 7425] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7424] memfd_create("syzkaller", 0 [pid 7423] memfd_create("syzkaller", 0 [pid 7425] <... openat resumed>) = 3 [pid 7424] <... memfd_create resumed>) = 4 [pid 7423] <... memfd_create resumed>) = 4 [pid 7425] chdir("./file1" [pid 7424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7425] <... chdir resumed>) = 0 [pid 7424] <... mmap resumed>) = 0x7f943d000000 [pid 7423] <... mmap resumed>) = 0x7f943d000000 [pid 7425] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7426] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7425] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7423] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7424] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7425] truncate("./file1", 0 [pid 5072] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./389/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7425] <... truncate resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./389/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7426] <... write resumed>) = 524288 [pid 5072] <... openat resumed>) = 4 [pid 7423] <... write resumed>) = 524288 [pid 5072] newfstatat(4, "", [pid 7425] memfd_create("syzkaller", 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7425] <... memfd_create resumed>) = 4 [pid 7426] munmap(0x7f943d000000, 138412032 [pid 5072] getdents64(4, [pid 7425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7425] <... mmap resumed>) = 0x7f943d000000 [pid 5072] getdents64(4, [pid 7426] <... munmap resumed>) = 0 [pid 7425] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7426] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] <... ioctl resumed>) = 0 [pid 5072] close(4 [pid 7426] close(4 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./389/file1") = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./389") = 0 [pid 5072] mkdir("./390", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 7424] <... write resumed>) = 524288 [pid 7423] munmap(0x7f943d000000, 138412032) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7424] munmap(0x7f943d000000, 138412032) = 0 [pid 5075] close(3 [pid 7426] <... close resumed>) = 0 [pid 7425] <... write resumed>) = 524288 [pid 7424] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7423] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7425] munmap(0x7f943d000000, 138412032 [pid 7424] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7423] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7426] exit_group(0 [pid 7424] close(4 [pid 7426] <... exit_group resumed>) = ? [pid 7425] <... munmap resumed>) = 0 [pid 7423] close(4 [pid 7426] +++ exited with 0 +++ ./strace-static-x86_64: Process 7427 attached [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7426, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7427 [pid 7427] set_robust_list(0x555583d53660, 24) = 0 [pid 7425] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] umount2("./389", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7425] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7427] chdir("./388" [pid 7425] close(4 [pid 5074] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7427] <... chdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 7427] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] newfstatat(3, "", [pid 7427] <... prctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7427] setpgid(0, 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7424] <... close resumed>) = 0 [pid 7427] <... setpgid resumed>) = 0 [pid 7425] <... close resumed>) = 0 [pid 5074] umount2("./389/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./389/binderfs" [pid 7427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7424] exit_group(0 [pid 7423] <... close resumed>) = 0 [pid 7423] exit_group(0) = ? [pid 7425] exit_group(0 [pid 5072] <... ioctl resumed>) = 0 [pid 7424] <... exit_group resumed>) = ? [pid 7423] +++ exited with 0 +++ [pid 7425] <... exit_group resumed>) = ? [pid 7427] <... openat resumed>) = 3 [pid 7425] +++ exited with 0 +++ [pid 7424] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7424, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5071] umount2("./388", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7427] write(3, "1000", 4 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7425, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5074] <... umount2 resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7423, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] umount2("./388/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./388/binderfs") = 0 [pid 5071] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7427] <... write resumed>) = 4 [pid 5074] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7427] close(3 [pid 5076] umount2("./384", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./389", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./389/file1", [pid 5076] openat(AT_FDCWD, "./384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7427] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7427] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7427] <... symlink resumed>) = 0 [pid 5074] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7427] memfd_create("syzkaller", 0 [pid 5076] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 7427] <... memfd_create resumed>) = 3 [pid 5071] <... umount2 resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "./389/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(3, [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./389/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] close(3 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7427] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./388/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./388/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(AT_FDCWD, "./389/binderfs", [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] getdents64(4, [pid 5076] umount2("./384/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(4, "", [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./388/file1" [pid 5076] newfstatat(AT_FDCWD, "./384/binderfs", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7428 attached [pid 5076] unlink("./384/binderfs" [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] unlink("./389/binderfs" [pid 7428] set_robust_list(0x555583d53660, 24 [pid 5071] <... rmdir resumed>) = 0 [pid 7428] <... set_robust_list resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7428] chdir("./390" [pid 5074] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7428 [pid 7428] <... chdir resumed>) = 0 [pid 5076] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 7428] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] close(4) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7428] <... prctl resumed>) = 0 [pid 7428] setpgid(0, 0 [pid 5074] rmdir("./389/file1" [pid 7428] <... setpgid resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] close(3 [pid 7428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5071] rmdir("./388" [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7428] <... openat resumed>) = 3 [pid 5074] close(3 [pid 7428] write(3, "1000", 4 [pid 5074] <... close resumed>) = 0 [pid 7428] <... write resumed>) = 4 [pid 7428] close(3 [pid 7427] <... write resumed>) = 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] rmdir("./389" [pid 7427] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7428] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] mkdir("./389", 0777 [pid 7428] symlink("/dev/binderfs", "./binderfs" [pid 5076] newfstatat(AT_FDCWD, "./384/file1", [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 7428] <... symlink resumed>) = 0 [pid 7427] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./390", 0777 [pid 5073] newfstatat(AT_FDCWD, "./389/file1", [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7428] memfd_create("syzkaller", 0 [pid 7427] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] umount2("./384/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7428] <... memfd_create resumed>) = 3 [pid 7427] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7427] ioctl(4, LOOP_SET_FD, 3 [pid 5076] openat(AT_FDCWD, "./384/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7428] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./389/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./389/file1" [pid 5076] newfstatat(4, "", [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./389") = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 5073] mkdir("./390", 0777 [pid 7427] <... ioctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... mkdir resumed>) = 0 [pid 7427] close(3 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] close(4) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] rmdir("./384/file1" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7428] <... write resumed>) = 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 7428] munmap(0x7f943d000000, 138412032 [pid 7427] <... close resumed>) = 0 [pid 7428] <... munmap resumed>) = 0 [pid 7427] close(4 [pid 5076] getdents64(3, [pid 7428] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7427] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7428] <... openat resumed>) = 4 [pid 5076] close(3 [pid 7428] ioctl(4, LOOP_SET_FD, 3 [pid 7427] mkdir("./file1", 0777 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./384") = 0 [pid 5076] mkdir("./385", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 7427] <... mkdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7427] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 7427] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7427] chdir("./file1") = 0 [pid 7427] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7427] truncate("./file1", 0) = 0 [pid 7427] memfd_create("syzkaller", 0) = 4 [pid 7427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7428] <... ioctl resumed>) = 0 [pid 7428] close(3) = 0 [pid 7427] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5073] close(3 [pid 7428] close(4) = 0 [pid 7428] mkdir("./file1", 0777) = 0 [pid 7427] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] close(3./strace-static-x86_64: Process 7429 attached ) = 0 [pid 7429] set_robust_list(0x555583d53660, 24 [pid 5074] close(3 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7429 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7428] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... close resumed>) = 0 [ 283.190838][ T7427] loop4: detected capacity change from 0 to 1024 [ 283.212458][ T7428] loop1: detected capacity change from 0 to 1024 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7431 ./strace-static-x86_64: Process 7431 attached [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7430 ./strace-static-x86_64: Process 7430 attached ./strace-static-x86_64: Process 7432 attached [pid 7431] set_robust_list(0x555583d53660, 24 [pid 7430] set_robust_list(0x555583d53660, 24 [pid 7429] <... set_robust_list resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7432 [pid 7432] set_robust_list(0x555583d53660, 24 [pid 7431] <... set_robust_list resumed>) = 0 [pid 7430] <... set_robust_list resumed>) = 0 [pid 7429] chdir("./390" [pid 7427] munmap(0x7f943d000000, 138412032 [pid 7432] <... set_robust_list resumed>) = 0 [pid 7429] <... chdir resumed>) = 0 [pid 7432] chdir("./385" [pid 7431] chdir("./390" [pid 7430] chdir("./389" [pid 7429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7430] <... chdir resumed>) = 0 [pid 7429] <... prctl resumed>) = 0 [pid 7431] <... chdir resumed>) = 0 [pid 7430] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7429] setpgid(0, 0 [pid 7431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7430] <... prctl resumed>) = 0 [pid 7429] <... setpgid resumed>) = 0 [pid 7432] <... chdir resumed>) = 0 [pid 7432] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7431] <... prctl resumed>) = 0 [pid 7430] setpgid(0, 0 [pid 7429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7428] <... mount resumed>) = 0 [pid 7427] <... munmap resumed>) = 0 [pid 7432] <... prctl resumed>) = 0 [pid 7431] setpgid(0, 0 [pid 7428] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7432] setpgid(0, 0 [pid 7431] <... setpgid resumed>) = 0 [pid 7430] <... setpgid resumed>) = 0 [pid 7429] <... openat resumed>) = 3 [pid 7428] <... openat resumed>) = 3 [pid 7427] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7432] <... setpgid resumed>) = 0 [pid 7432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7429] write(3, "1000", 4 [pid 7428] chdir("./file1" [pid 7427] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7427] close(4 [pid 7430] <... openat resumed>) = 3 [pid 7428] <... chdir resumed>) = 0 [pid 7428] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7428] truncate("./file1", 0 [pid 7429] <... write resumed>) = 4 [pid 7431] <... openat resumed>) = 3 [pid 7429] close(3 [pid 7432] <... openat resumed>) = 3 [pid 7432] write(3, "1000", 4 [pid 7431] write(3, "1000", 4 [pid 7430] write(3, "1000", 4 [pid 7429] <... close resumed>) = 0 [pid 7428] <... truncate resumed>) = 0 [pid 7427] <... close resumed>) = 0 [pid 7432] <... write resumed>) = 4 [pid 7431] <... write resumed>) = 4 [pid 7430] <... write resumed>) = 4 [pid 7429] symlink("/dev/binderfs", "./binderfs" [pid 7428] memfd_create("syzkaller", 0 [pid 7427] exit_group(0 [pid 7432] close(3 [pid 7431] close(3 [pid 7430] close(3 [pid 7428] <... memfd_create resumed>) = 4 [pid 7431] <... close resumed>) = 0 [pid 7430] <... close resumed>) = 0 [pid 7429] <... symlink resumed>) = 0 [pid 7428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7427] <... exit_group resumed>) = ? [pid 7432] <... close resumed>) = 0 [pid 7432] symlink("/dev/binderfs", "./binderfs" [pid 7431] symlink("/dev/binderfs", "./binderfs" [pid 7430] symlink("/dev/binderfs", "./binderfs" [pid 7428] <... mmap resumed>) = 0x7f943d000000 [pid 7432] <... symlink resumed>) = 0 [pid 7431] <... symlink resumed>) = 0 [pid 7430] <... symlink resumed>) = 0 [pid 7429] memfd_create("syzkaller", 0 [pid 7428] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7427] +++ exited with 0 +++ [pid 7432] memfd_create("syzkaller", 0 [pid 7431] memfd_create("syzkaller", 0 [pid 7430] memfd_create("syzkaller", 0 [pid 7429] <... memfd_create resumed>) = 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7427, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7432] <... memfd_create resumed>) = 3 [pid 7431] <... memfd_create resumed>) = 3 [pid 7430] <... memfd_create resumed>) = 3 [pid 7429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7429] <... mmap resumed>) = 0x7f943d000000 [pid 7432] <... mmap resumed>) = 0x7f943d000000 [pid 7431] <... mmap resumed>) = 0x7f943d000000 [pid 7430] <... mmap resumed>) = 0x7f943d000000 [pid 7429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./388", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./388/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./388/binderfs" [pid 7432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./388/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7429] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7428] <... write resumed>) = 524288 [pid 5075] openat(AT_FDCWD, "./388/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./388/file1" [pid 7428] munmap(0x7f943d000000, 138412032 [pid 5075] <... rmdir resumed>) = 0 [pid 7432] <... write resumed>) = 524288 [pid 7431] <... write resumed>) = 524288 [pid 7430] <... write resumed>) = 524288 [pid 7429] munmap(0x7f943d000000, 138412032 [pid 7428] <... munmap resumed>) = 0 [pid 5075] getdents64(3, [pid 7432] munmap(0x7f943d000000, 138412032 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7428] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] close(3 [pid 7431] munmap(0x7f943d000000, 138412032 [pid 7430] munmap(0x7f943d000000, 138412032 [pid 7428] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7428] close(4 [pid 5075] <... close resumed>) = 0 [pid 7431] <... munmap resumed>) = 0 [pid 7430] <... munmap resumed>) = 0 [pid 7429] <... munmap resumed>) = 0 [pid 5075] rmdir("./388" [pid 7432] <... munmap resumed>) = 0 [pid 7432] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7432] ioctl(4, LOOP_SET_FD, 3 [pid 7428] <... close resumed>) = 0 [pid 7432] <... ioctl resumed>) = 0 [pid 7431] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7430] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7429] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 7432] close(3 [pid 7431] <... openat resumed>) = 4 [pid 7428] exit_group(0 [pid 7432] <... close resumed>) = 0 [pid 7431] ioctl(4, LOOP_SET_FD, 3 [pid 7430] <... openat resumed>) = 4 [pid 7429] <... openat resumed>) = 4 [pid 7428] <... exit_group resumed>) = ? [pid 5075] mkdir("./389", 0777 [pid 7432] close(4) = 0 [pid 7432] mkdir("./file1", 0777) = 0 [pid 7430] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... mkdir resumed>) = 0 [pid 7432] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 7429] ioctl(4, LOOP_SET_FD, 3 [pid 7428] +++ exited with 0 +++ [pid 7432] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7432] chdir("./file1") = 0 [pid 7432] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7432] truncate("./file1", 0) = 0 [pid 7432] memfd_create("syzkaller", 0) = 4 [pid 7432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7432] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7431] <... ioctl resumed>) = 0 [pid 7430] <... ioctl resumed>) = 0 [pid 7429] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7428, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7431] close(3 [pid 7430] close(3) = 0 [pid 5072] umount2("./390", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7431] <... close resumed>) = 0 [pid 7430] close(4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7430] <... close resumed>) = 0 [pid 7431] close(4 [pid 5072] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7430] mkdir("./file1", 0777 [pid 7432] <... write resumed>) = 524288 [pid 7431] <... close resumed>) = 0 [pid 7430] <... mkdir resumed>) = 0 [pid 7429] close(3 [pid 5072] <... openat resumed>) = 3 [pid 7432] munmap(0x7f943d000000, 138412032 [pid 7431] mkdir("./file1", 0777 [pid 7430] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7429] <... close resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 7432] <... munmap resumed>) = 0 [pid 7431] <... mkdir resumed>) = 0 [pid 7429] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7432] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7431] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7429] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 7432] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7429] mkdir("./file1", 0777 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./390/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./390/binderfs", [pid 7432] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7430] <... mount resumed>) = 0 [pid 7429] <... mkdir resumed>) = 0 [pid 7430] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] unlink("./390/binderfs" [pid 7430] <... openat resumed>) = 3 [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7430] chdir("./file1") = 0 [pid 7429] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7431] <... mount resumed>) = 0 [pid 7430] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7431] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7430] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7430] truncate("./file1", 0 [pid 7431] <... openat resumed>) = 3 [ 283.385672][ T7432] loop5: detected capacity change from 0 to 1024 [ 283.398447][ T7431] loop3: detected capacity change from 0 to 1024 [ 283.408075][ T7430] loop0: detected capacity change from 0 to 1024 [ 283.414759][ T7429] loop2: detected capacity change from 0 to 1024 [pid 7432] <... close resumed>) = 0 [pid 7431] chdir("./file1" [pid 7430] <... truncate resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7430] memfd_create("syzkaller", 0 [pid 7432] exit_group(0 [pid 7430] <... memfd_create resumed>) = 4 [pid 7432] <... exit_group resumed>) = ? [pid 7430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7431] <... chdir resumed>) = 0 [pid 7432] +++ exited with 0 +++ [pid 7431] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7430] <... mmap resumed>) = 0x7f943d000000 [pid 7429] <... mount resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7432, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7431] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./385", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./385/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./385/binderfs", [pid 7431] truncate("./file1", 0 [pid 7430] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7429] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7429] <... openat resumed>) = 3 [pid 7429] chdir("./file1" [pid 5076] unlink("./385/binderfs" [pid 7429] <... chdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7429] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7429] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7429] truncate("./file1", 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7431] <... truncate resumed>) = 0 [pid 7430] <... write resumed>) = 524288 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7431] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7433 attached ) = 4 [pid 7429] <... truncate resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./390/file1", [pid 7433] set_robust_list(0x555583d53660, 24 [pid 7431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7429] memfd_create("syzkaller", 0) = 4 [pid 7431] <... mmap resumed>) = 0x7f943d000000 [pid 7429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7429] <... mmap resumed>) = 0x7f943d000000 [pid 7433] <... set_robust_list resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7433 [pid 5072] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7433] chdir("./389") = 0 [pid 7433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7429] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7433] setpgid(0, 0) = 0 [pid 7433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./390/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7433] write(3, "1000", 4) = 4 [pid 7433] close(3) = 0 [pid 7433] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7433] <... symlink resumed>) = 0 [pid 7433] memfd_create("syzkaller", 0 [pid 7429] <... write resumed>) = 524288 [pid 5072] newfstatat(4, "", [pid 7433] <... memfd_create resumed>) = 3 [pid 7431] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7430] munmap(0x7f943d000000, 138412032 [pid 7429] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7430] <... munmap resumed>) = 0 [pid 7429] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5076] newfstatat(AT_FDCWD, "./385/file1", [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(4, [pid 5076] umount2("./385/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(4 [pid 7430] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] openat(AT_FDCWD, "./385/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... close resumed>) = 0 [pid 7433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7430] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7429] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... openat resumed>) = 4 [pid 5072] rmdir("./390/file1" [pid 7431] <... write resumed>) = 524288 [pid 7430] close(4 [pid 7429] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(4, "", [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 7430] <... close resumed>) = 0 [pid 7429] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5076] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 7431] munmap(0x7f943d000000, 138412032) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7431] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] rmdir("./390" [pid 7431] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... rmdir resumed>) = 0 [pid 7431] close(4 [pid 5076] getdents64(4, [pid 7433] <... write resumed>) = 524288 [pid 7431] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7433] munmap(0x7f943d000000, 138412032 [pid 7429] <... close resumed>) = 0 [pid 5076] close(4 [pid 5072] mkdir("./391", 0777 [pid 7433] <... munmap resumed>) = 0 [pid 7430] exit_group(0 [pid 5076] <... close resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7430] <... exit_group resumed>) = ? [pid 7429] exit_group(0 [pid 5076] rmdir("./385/file1" [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 7430] +++ exited with 0 +++ [pid 7429] <... exit_group resumed>) = ? [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7429] +++ exited with 0 +++ [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./385") = 0 [pid 5076] mkdir("./386", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7429, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7430, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7433] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7433] <... openat resumed>) = 4 [pid 7431] exit_group(0 [pid 7433] ioctl(4, LOOP_SET_FD, 3 [pid 7431] <... exit_group resumed>) = ? [pid 5072] <... ioctl resumed>) = 0 [pid 5071] umount2("./389", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./390", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 5072] close(3 [pid 5071] newfstatat(3, "", [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5072] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 7431] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] getdents64(3, [pid 5071] umount2("./389/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7431, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./390/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./389/binderfs", [pid 5074] umount2("./390", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] unlink("./390/binderfs" [pid 5071] unlink("./389/binderfs" [pid 5073] <... unlink resumed>) = 0 [pid 7433] <... ioctl resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5073] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 7433] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7433] <... close resumed>) = 0 ./strace-static-x86_64: Process 7434 attached [pid 7434] set_robust_list(0x555583d53660, 24) = 0 [pid 7434] chdir("./391" [pid 7433] close(4 [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7434 [pid 7434] <... chdir resumed>) = 0 [pid 7433] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7434] setpgid(0, 0) = 0 [pid 7434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7433] mkdir("./file1", 0777 [pid 5076] <... ioctl resumed>) = 0 [pid 5074] umount2("./390/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7434] <... openat resumed>) = 3 [pid 7433] <... mkdir resumed>) = 0 [pid 7434] write(3, "1000", 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7433] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7434] <... write resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./390/binderfs", [pid 5073] newfstatat(AT_FDCWD, "./390/file1", [pid 7434] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./390/binderfs" [pid 5073] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7434] <... close resumed>) = 0 [pid 5076] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7434] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./390/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7434] <... symlink resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 4 [pid 7434] memfd_create("syzkaller", 0 [pid 5074] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 7435 attached [pid 7434] <... memfd_create resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7435] set_robust_list(0x555583d53660, 24 [pid 7434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7435] <... set_robust_list resumed>) = 0 [pid 7434] <... mmap resumed>) = 0x7f943d000000 [pid 5073] getdents64(4, [pid 7435] chdir("./386" [pid 7434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7435] <... chdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7435 [pid 5073] close(4 [pid 7435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] <... close resumed>) = 0 [pid 7435] setpgid(0, 0 [pid 5073] rmdir("./390/file1" [pid 7435] <... setpgid resumed>) = 0 [pid 7435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... rmdir resumed>) = 0 [pid 7435] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] getdents64(3, [pid 5071] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5071] newfstatat(AT_FDCWD, "./389/file1", [pid 7435] write(3, "1000", 4 [pid 7434] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7435] <... write resumed>) = 4 [pid 7433] <... mount resumed>) = 0 [pid 5073] rmdir("./390" [pid 5071] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7435] close(3) = 0 [pid 7435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7435] memfd_create("syzkaller", 0) = 3 [ 283.573039][ T7433] loop4: detected capacity change from 0 to 1024 [pid 7435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7433] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] mkdir("./391", 0777 [pid 5071] openat(AT_FDCWD, "./389/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7433] <... openat resumed>) = 3 [pid 7434] munmap(0x7f943d000000, 138412032) = 0 [pid 7433] chdir("./file1" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 7433] <... chdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./390/file1", [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] newfstatat(4, "", [pid 7433] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7434] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7433] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5071] getdents64(4, [pid 7434] <... openat resumed>) = 4 [pid 7433] truncate("./file1", 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7434] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7433] <... truncate resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./390/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7433] memfd_create("syzkaller", 0 [pid 5071] getdents64(4, [pid 7435] <... write resumed>) = 524288 [pid 7433] <... memfd_create resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(4, "", [pid 7433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] close(4 [pid 7433] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7435] munmap(0x7f943d000000, 138412032 [pid 5071] rmdir("./389/file1" [pid 5074] getdents64(4, [pid 7435] <... munmap resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7433] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 7435] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7435] <... openat resumed>) = 4 [pid 5074] close(4 [pid 7435] ioctl(4, LOOP_SET_FD, 3 [pid 7434] <... ioctl resumed>) = 0 [pid 7433] <... write resumed>) = 524288 [pid 5074] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 5074] rmdir("./390/file1" [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] close(3 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] close(3 [pid 5071] rmdir("./389" [pid 7435] <... ioctl resumed>) = 0 [pid 7434] close(3 [pid 7433] munmap(0x7f943d000000, 138412032 [pid 5074] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7435] close(3 [pid 7434] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7435] <... close resumed>) = 0 [pid 7435] close(4) = 0 [pid 7435] mkdir("./file1", 0777 [pid 5071] mkdir("./390", 0777 [pid 7435] <... mkdir resumed>) = 0 [pid 5074] rmdir("./390" [pid 5071] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 7434] close(4 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7434] <... close resumed>) = 0 [pid 5074] mkdir("./391", 0777 [pid 5071] <... openat resumed>) = 3 [pid 7434] mkdir("./file1", 0777 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 7435] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7434] <... mkdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7434] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7436 [pid 7433] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 7436 attached [pid 7436] set_robust_list(0x555583d53660, 24) = 0 [pid 7436] chdir("./391" [pid 7433] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7436] <... chdir resumed>) = 0 [pid 7433] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7436] setpgid(0, 0) = 0 [pid 7436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7436] write(3, "1000", 4) = 4 [pid 7433] close(4 [pid 7436] close(3) = 0 [pid 7433] <... close resumed>) = 0 [pid 7436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7435] <... mount resumed>) = 0 [ 283.646944][ T7434] loop1: detected capacity change from 0 to 1024 [ 283.668450][ T7435] loop5: detected capacity change from 0 to 1024 [pid 7433] exit_group(0 [pid 7436] memfd_create("syzkaller", 0 [pid 7433] <... exit_group resumed>) = ? [pid 7435] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7436] <... memfd_create resumed>) = 3 [pid 7435] <... openat resumed>) = 3 [pid 7436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7435] chdir("./file1") = 0 [pid 7436] <... mmap resumed>) = 0x7f943d000000 [pid 7435] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7433] +++ exited with 0 +++ [pid 7435] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7433, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7435] truncate("./file1", 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 7436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./389", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7434] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... ioctl resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 7434] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] newfstatat(3, "", [pid 7434] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7434] chdir("./file1" [pid 5075] getdents64(3, [pid 7434] <... chdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7434] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./389/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7434] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7435] <... truncate resumed>) = 0 [pid 7434] truncate("./file1", 0 [pid 5075] newfstatat(AT_FDCWD, "./389/binderfs", [pid 5074] <... ioctl resumed>) = 0 [pid 7435] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] close(3 [pid 7436] <... write resumed>) = 524288 [pid 5071] <... close resumed>) = 0 [pid 7435] <... memfd_create resumed>) = 4 [pid 5075] unlink("./389/binderfs") = 0 [pid 7435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7436] munmap(0x7f943d000000, 138412032 [pid 7435] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7436] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 7437 attached [pid 7436] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7437] set_robust_list(0x555583d53660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7437 [pid 7437] <... set_robust_list resumed>) = 0 [pid 7434] <... truncate resumed>) = 0 [pid 5074] close(3) = 0 [pid 7437] chdir("./390" [pid 7434] memfd_create("syzkaller", 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7437] <... chdir resumed>) = 0 [pid 7434] <... memfd_create resumed>) = 4 [pid 7434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7434] <... mmap resumed>) = 0x7f943d000000 [pid 7437] setpgid(0, 0) = 0 [pid 7437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7436] <... openat resumed>) = 4 [pid 7434] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = 0 [pid 7437] <... openat resumed>) = 3 [pid 7436] ioctl(4, LOOP_SET_FD, 3 [pid 5075] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./389/file1", [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7438 ./strace-static-x86_64: Process 7438 attached [pid 7438] set_robust_list(0x555583d53660, 24) = 0 [pid 7438] chdir("./391") = 0 [pid 7437] write(3, "1000", 4 [pid 7435] <... write resumed>) = 524288 [pid 7434] <... write resumed>) = 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7437] <... write resumed>) = 4 [pid 7438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7438] setpgid(0, 0) = 0 [pid 7438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7435] munmap(0x7f943d000000, 138412032 [pid 7437] close(3 [pid 7435] <... munmap resumed>) = 0 [pid 5075] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7437] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./389/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7437] symlink("/dev/binderfs", "./binderfs" [pid 5075] newfstatat(4, "", [pid 7438] <... openat resumed>) = 3 [pid 7437] <... symlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7438] write(3, "1000", 4) = 4 [pid 7438] close(3) = 0 [pid 5075] getdents64(4, [pid 7438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7437] memfd_create("syzkaller", 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7437] <... memfd_create resumed>) = 3 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 7438] memfd_create("syzkaller", 0 [pid 7435] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./389/file1" [pid 7438] <... memfd_create resumed>) = 3 [pid 7435] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7435] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 7438] <... mmap resumed>) = 0x7f943d000000 [pid 7437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7436] <... ioctl resumed>) = 0 [pid 7435] <... close resumed>) = 0 [pid 7437] <... mmap resumed>) = 0x7f943d000000 [pid 7436] close(3 [pid 5075] getdents64(3, [pid 7436] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7436] close(4 [pid 7434] munmap(0x7f943d000000, 138412032 [pid 5075] close(3 [pid 7434] <... munmap resumed>) = 0 [pid 7436] <... close resumed>) = 0 [pid 7436] mkdir("./file1", 0777 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./389" [pid 7434] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7436] <... mkdir resumed>) = 0 [pid 7437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7436] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7434] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] mkdir("./390", 0777 [pid 7436] <... mount resumed>) = 0 [pid 7435] exit_group(0 [pid 5075] <... mkdir resumed>) = 0 [pid 7436] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7436] chdir("./file1" [pid 7435] <... exit_group resumed>) = ? [pid 7434] <... close resumed>) = 0 [pid 7436] <... chdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7438] <... write resumed>) = 524288 [pid 7436] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 7436] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7436] truncate("./file1", 0 [pid 7435] +++ exited with 0 +++ [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7435, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5076] umount2("./386", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7436] <... truncate resumed>) = 0 [pid 7436] memfd_create("syzkaller", 0) = 4 [pid 7436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7436] <... mmap resumed>) = 0x7f943d000000 [pid 5076] openat(AT_FDCWD, "./386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", [pid 7434] exit_group(0 [pid 7437] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7438] munmap(0x7f943d000000, 138412032 [pid 7437] munmap(0x7f943d000000, 138412032 [ 283.785048][ T7436] loop2: detected capacity change from 0 to 1024 [pid 5076] getdents64(3, [pid 7438] <... munmap resumed>) = 0 [pid 7437] <... munmap resumed>) = 0 [pid 7436] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7434] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7437] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7434] +++ exited with 0 +++ [pid 5076] umount2("./386/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7438] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7437] <... openat resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7434, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 7438] ioctl(4, LOOP_SET_FD, 3 [pid 7437] ioctl(4, LOOP_SET_FD, 3 [pid 5076] newfstatat(AT_FDCWD, "./386/binderfs", [pid 7436] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7436] munmap(0x7f943d000000, 138412032 [pid 5076] unlink("./386/binderfs" [pid 5072] umount2("./391", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7436] <... munmap resumed>) = 0 [pid 7436] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7436] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7436] close(4) = 0 [pid 5076] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7438] <... ioctl resumed>) = 0 [pid 7438] close(3) = 0 [pid 5072] newfstatat(3, "", [pid 7438] close(4) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7438] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = 0 [pid 7438] <... mkdir resumed>) = 0 [pid 7437] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5072] getdents64(3, [pid 7436] exit_group(0 [pid 5075] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7436] <... exit_group resumed>) = ? [pid 7437] close(3 [pid 7436] +++ exited with 0 +++ [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] umount2("./391/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7437] <... close resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7436, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5073] umount2("./391", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7438] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7439 attached [pid 7437] close(4 [pid 5073] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7439] set_robust_list(0x555583d53660, 24 [pid 7437] <... close resumed>) = 0 [pid 7439] <... set_robust_list resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./391/binderfs", [pid 7437] mkdir("./file1", 0777 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7439] chdir("./390" [pid 5072] unlink("./391/binderfs" [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7437] <... mkdir resumed>) = 0 [pid 5073] getdents64(3, [pid 7439] <... chdir resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5076] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./391/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./391/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./391/binderfs" [pid 5076] newfstatat(AT_FDCWD, "./386/file1", [pid 5073] <... unlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7439] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7437] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] umount2("./386/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7439 [pid 5072] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7439] <... prctl resumed>) = 0 [pid 7439] setpgid(0, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7439] <... setpgid resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./386/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... openat resumed>) = 4 [ 283.848787][ T7438] loop3: detected capacity change from 0 to 1024 [ 283.848899][ T7437] loop0: detected capacity change from 0 to 1024 [pid 5076] newfstatat(4, "", [pid 7439] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7439] write(3, "1000", 4 [pid 5076] getdents64(4, [pid 7439] <... write resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7439] close(3 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7439] <... close resumed>) = 0 [pid 5076] close(4 [pid 7439] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./386/file1" [pid 7439] <... symlink resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7439] memfd_create("syzkaller", 0 [pid 5076] close(3 [pid 7439] <... memfd_create resumed>) = 3 [pid 7437] <... mount resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./386" [pid 7439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7437] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... rmdir resumed>) = 0 [pid 7439] <... mmap resumed>) = 0x7f943d000000 [pid 7438] <... mount resumed>) = 0 [pid 7437] <... openat resumed>) = 3 [pid 5076] mkdir("./387", 0777 [pid 5073] <... umount2 resumed>) = 0 [pid 7438] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... mkdir resumed>) = 0 [pid 7438] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7438] chdir("./file1" [pid 5076] <... openat resumed>) = 3 [pid 7438] <... chdir resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7438] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7437] chdir("./file1" [pid 7438] truncate("./file1", 0 [pid 7437] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7437] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7438] <... truncate resumed>) = 0 [pid 5073] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7438] memfd_create("syzkaller", 0 [pid 7437] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7438] <... memfd_create resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./391/file1", [pid 7438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7438] <... mmap resumed>) = 0x7f943d000000 [pid 5073] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7437] truncate("./file1", 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./391/file1", [pid 5076] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./391/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7439] <... write resumed>) = 524288 [pid 7438] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7437] <... truncate resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7439] munmap(0x7f943d000000, 138412032 [pid 7437] memfd_create("syzkaller", 0 [pid 5072] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7439] <... munmap resumed>) = 0 [pid 7437] <... memfd_create resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] openat(AT_FDCWD, "./391/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7437] <... mmap resumed>) = 0x7f943d000000 [pid 7438] <... write resumed>) = 524288 [pid 5072] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./391/file1" [pid 5072] newfstatat(4, "", ./strace-static-x86_64: Process 7440 attached [pid 7439] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7437] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7440] set_robust_list(0x555583d53660, 24 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7440 [pid 5073] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./391") = 0 [pid 5073] mkdir("./392", 0777 [pid 7440] <... set_robust_list resumed>) = 0 [pid 7439] <... openat resumed>) = 4 [pid 7437] <... write resumed>) = 524288 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] getdents64(4, [pid 7440] chdir("./387" [pid 7439] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7438] munmap(0x7f943d000000, 138412032 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7438] <... munmap resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7438] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7438] close(4 [pid 7439] <... ioctl resumed>) = 0 [pid 7438] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 7440] <... chdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] close(4 [pid 7438] exit_group(0 [pid 7440] setpgid(0, 0 [pid 7439] close(3 [pid 7437] munmap(0x7f943d000000, 138412032 [pid 5072] <... close resumed>) = 0 [pid 7440] <... setpgid resumed>) = 0 [pid 5072] rmdir("./391/file1" [pid 7440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7439] <... close resumed>) = 0 [pid 7438] <... exit_group resumed>) = ? [pid 7437] <... munmap resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7440] write(3, "1000", 4 [pid 7439] close(4 [pid 7437] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] getdents64(3, [pid 7440] <... write resumed>) = 4 [pid 7439] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7440] close(3 [pid 7437] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7438] +++ exited with 0 +++ [pid 5072] close(3 [pid 7440] <... close resumed>) = 0 [pid 7439] mkdir("./file1", 0777 [pid 7437] close(4 [pid 5072] <... close resumed>) = 0 [pid 7440] symlink("/dev/binderfs", "./binderfs" [pid 5072] rmdir("./391" [pid 7440] <... symlink resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7440] memfd_create("syzkaller", 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7438, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] mkdir("./392", 0777 [pid 7440] <... memfd_create resumed>) = 3 [pid 7439] <... mkdir resumed>) = 0 [pid 5074] umount2("./391", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... mkdir resumed>) = 0 [pid 7440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7440] <... mmap resumed>) = 0x7f943d000000 [pid 7439] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... openat resumed>) = 3 [pid 7440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./391/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 283.975735][ T7439] loop4: detected capacity change from 0 to 1024 [pid 7440] <... write resumed>) = 524288 [pid 7439] <... mount resumed>) = 0 [pid 7437] <... close resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./391/binderfs", [pid 5073] <... ioctl resumed>) = 0 [pid 7439] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7440] munmap(0x7f943d000000, 138412032 [pid 7439] <... openat resumed>) = 3 [pid 7440] <... munmap resumed>) = 0 [pid 7437] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7439] chdir("./file1" [pid 5074] unlink("./391/binderfs" [pid 5073] close(3 [pid 7439] <... chdir resumed>) = 0 [pid 7439] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7437] <... exit_group resumed>) = ? [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 7440] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 7439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7440] ioctl(4, LOOP_SET_FD, 3 [pid 7437] +++ exited with 0 +++ [pid 5074] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7437, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7439] truncate("./file1", 0./strace-static-x86_64: Process 7441 attached [pid 7440] <... ioctl resumed>) = 0 [pid 7439] <... truncate resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7441 [pid 7440] close(3) = 0 [pid 7440] close(4) = 0 [pid 7439] memfd_create("syzkaller", 0 [pid 7440] mkdir("./file1", 0777 [pid 7439] <... memfd_create resumed>) = 4 [pid 5074] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7440] <... mkdir resumed>) = 0 [pid 7439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7440] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7439] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./390", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7441] set_robust_list(0x555583d53660, 24 [pid 5074] newfstatat(AT_FDCWD, "./391/file1", [pid 7441] <... set_robust_list resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7441] chdir("./392" [pid 5074] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7439] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7441] <... chdir resumed>) = 0 [pid 7440] <... mount resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 7441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7440] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./391/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(3, "", [pid 7440] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 7441] <... prctl resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7440] chdir("./file1" [pid 7441] setpgid(0, 0 [pid 7440] <... chdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5071] getdents64(3, [pid 7441] <... setpgid resumed>) = 0 [pid 7440] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7440] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(4, [pid 5072] close(3 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7441] <... openat resumed>) = 3 [pid 7440] truncate("./file1", 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] umount2("./390/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 7441] write(3, "1000", 4 [pid 5074] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7441] <... write resumed>) = 4 [pid 5074] rmdir("./391/file1" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7441] close(3 [pid 5071] newfstatat(AT_FDCWD, "./390/binderfs", [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./390/binderfs"./strace-static-x86_64: Process 7442 attached [pid 7441] <... close resumed>) = 0 [pid 7442] set_robust_list(0x555583d53660, 24 [pid 7441] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 7442] <... set_robust_list resumed>) = 0 [pid 7441] <... symlink resumed>) = 0 [pid 5071] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7442] chdir("./392" [pid 7440] <... truncate resumed>) = 0 [pid 7439] <... write resumed>) = 524288 [ 284.045456][ T7440] loop5: detected capacity change from 0 to 1024 [pid 5074] getdents64(3, [pid 7442] <... chdir resumed>) = 0 [pid 7441] memfd_create("syzkaller", 0 [pid 7440] memfd_create("syzkaller", 0 [pid 7439] munmap(0x7f943d000000, 138412032 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7442 [pid 5071] <... umount2 resumed>) = 0 [pid 7442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7441] <... memfd_create resumed>) = 3 [pid 7440] <... memfd_create resumed>) = 4 [pid 5074] close(3 [pid 5071] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7442] <... prctl resumed>) = 0 [pid 7440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7439] <... munmap resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 7442] setpgid(0, 0 [pid 7441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7440] <... mmap resumed>) = 0x7f943d000000 [pid 5074] rmdir("./391" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7442] <... setpgid resumed>) = 0 [pid 7441] <... mmap resumed>) = 0x7f943d000000 [pid 7440] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./390/file1", [pid 7442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7442] <... openat resumed>) = 3 [pid 7439] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] openat(AT_FDCWD, "./390/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] newfstatat(4, "", [pid 7439] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] mkdir("./392", 0777) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7442] write(3, "1000", 4 [pid 5071] getdents64(4, [pid 7442] <... write resumed>) = 4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7442] close(3 [pid 7441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7442] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] close(4 [pid 7442] symlink("/dev/binderfs", "./binderfs" [pid 7441] <... write resumed>) = 524288 [pid 7439] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7442] <... symlink resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7442] memfd_create("syzkaller", 0 [pid 5071] rmdir("./390/file1" [pid 7439] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 7442] <... memfd_create resumed>) = 3 [pid 7440] <... write resumed>) = 524288 [pid 7439] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] close(3 [pid 7442] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... close resumed>) = 0 [pid 7442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7439] +++ exited with 0 +++ [pid 5071] rmdir("./390") = 0 [pid 5071] mkdir("./391", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7439, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7440] munmap(0x7f943d000000, 138412032) = 0 [pid 5075] umount2("./390", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7441] munmap(0x7f943d000000, 138412032 [pid 5075] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7441] <... munmap resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7440] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] getdents64(3, [pid 7441] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7440] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7441] <... openat resumed>) = 4 [pid 7440] close(4 [pid 7441] ioctl(4, LOOP_SET_FD, 3 [pid 7440] <... close resumed>) = 0 [pid 5075] umount2("./390/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7440] exit_group(0 [pid 7442] <... write resumed>) = 524288 [pid 7441] <... ioctl resumed>) = 0 [pid 7440] <... exit_group resumed>) = ? [pid 5075] unlink("./390/binderfs" [pid 7441] close(3 [pid 7442] munmap(0x7f943d000000, 138412032 [pid 7441] <... close resumed>) = 0 [pid 7441] close(4 [pid 7442] <... munmap resumed>) = 0 [pid 7441] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7441] mkdir("./file1", 0777 [pid 7442] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7441] <... mkdir resumed>) = 0 [pid 7440] +++ exited with 0 +++ [pid 5075] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7440, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7441] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7442] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 7442] ioctl(4, LOOP_SET_FD, 3 [pid 5074] close(3 [pid 5075] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./387", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./390/file1", [pid 5076] openat(AT_FDCWD, "./387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./390/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(3, [pid 5075] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./387/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(AT_FDCWD, "./387/binderfs", [pid 5075] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] unlink("./387/binderfs" [pid 5075] getdents64(4, [pid 5071] close(3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 7442] <... ioctl resumed>) = 0 [pid 7441] <... mount resumed>) = 0 [pid 5075] rmdir("./390/file1" [pid 5074] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7442] close(3 [pid 7441] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7443 attached [pid 7441] <... openat resumed>) = 3 [pid 7443] set_robust_list(0x555583d53660, 24 [pid 7441] chdir("./file1"./strace-static-x86_64: Process 7444 attached [pid 7443] <... set_robust_list resumed>) = 0 [pid 7442] <... close resumed>) = 0 [pid 7441] <... chdir resumed>) = 0 [pid 7442] close(4 [pid 7444] set_robust_list(0x555583d53660, 24 [pid 7443] chdir("./391" [pid 7442] <... close resumed>) = 0 [pid 7441] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... umount2 resumed>) = 0 [pid 7443] <... chdir resumed>) = 0 [pid 7441] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] getdents64(3, [pid 7443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7441] truncate("./file1", 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7444] <... set_robust_list resumed>) = 0 [pid 7443] <... prctl resumed>) = 0 [pid 7442] mkdir("./file1", 0777 [pid 5075] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7444 [pid 7443] setpgid(0, 0 [pid 5075] <... close resumed>) = 0 [pid 7443] <... setpgid resumed>) = 0 [pid 5075] rmdir("./390" [pid 7444] chdir("./392" [pid 7443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7442] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 7444] <... chdir resumed>) = 0 [pid 7442] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7441] <... truncate resumed>) = 0 [ 284.152385][ T7441] loop2: detected capacity change from 0 to 1024 [ 284.189989][ T7442] loop1: detected capacity change from 0 to 1024 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7443 [pid 7444] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7443] <... openat resumed>) = 3 [pid 7441] memfd_create("syzkaller", 0 [pid 5076] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] mkdir("./391", 0777 [pid 7444] <... prctl resumed>) = 0 [pid 7443] write(3, "1000", 4 [pid 7441] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... mkdir resumed>) = 0 [pid 7444] setpgid(0, 0 [pid 7443] <... write resumed>) = 4 [pid 7441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] newfstatat(AT_FDCWD, "./387/file1", [pid 7444] <... setpgid resumed>) = 0 [pid 7443] close(3 [pid 7441] <... mmap resumed>) = 0x7f943d000000 [pid 7444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7443] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7444] <... openat resumed>) = 3 [pid 5076] umount2("./387/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7444] write(3, "1000", 4 [pid 5075] <... openat resumed>) = 3 [pid 7444] <... write resumed>) = 4 [pid 7443] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7444] close(3 [pid 5076] openat(AT_FDCWD, "./387/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7444] <... close resumed>) = 0 [pid 7443] <... symlink resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 7444] symlink("/dev/binderfs", "./binderfs" [pid 7442] <... mount resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 7444] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7442] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(4, [pid 7441] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7444] memfd_create("syzkaller", 0 [pid 7443] memfd_create("syzkaller", 0 [pid 7442] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7444] <... memfd_create resumed>) = 3 [pid 7443] <... memfd_create resumed>) = 3 [pid 7442] chdir("./file1" [pid 5076] getdents64(4, [pid 7444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7442] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(4 [pid 7444] <... mmap resumed>) = 0x7f943d000000 [pid 7443] <... mmap resumed>) = 0x7f943d000000 [pid 7442] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 7442] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] rmdir("./387/file1" [pid 7444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7442] truncate("./file1", 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./387" [pid 7442] <... truncate resumed>) = 0 [pid 7442] memfd_create("syzkaller", 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7442] <... memfd_create resumed>) = 4 [pid 5076] mkdir("./388", 0777 [pid 7442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... mkdir resumed>) = 0 [pid 7442] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7441] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7441] munmap(0x7f943d000000, 138412032 [pid 5076] <... openat resumed>) = 3 [pid 7441] <... munmap resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7441] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7443] <... write resumed>) = 524288 [pid 7441] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7443] munmap(0x7f943d000000, 138412032 [pid 7441] close(4 [pid 7444] <... write resumed>) = 524288 [pid 7443] <... munmap resumed>) = 0 [pid 7442] <... write resumed>) = 524288 [pid 7441] <... close resumed>) = 0 [pid 7444] munmap(0x7f943d000000, 138412032 [pid 7443] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7442] munmap(0x7f943d000000, 138412032 [pid 7441] exit_group(0 [pid 7444] <... munmap resumed>) = 0 [pid 7443] <... openat resumed>) = 4 [pid 7442] <... munmap resumed>) = 0 [pid 7441] <... exit_group resumed>) = ? [pid 7443] ioctl(4, LOOP_SET_FD, 3 [pid 7444] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7443] <... ioctl resumed>) = 0 [pid 7442] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7441] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 7444] <... openat resumed>) = 4 [pid 7443] close(3 [pid 7442] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7441, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7443] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 7444] ioctl(4, LOOP_SET_FD, 3 [pid 7443] close(4 [pid 7442] close(4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7443] <... close resumed>) = 0 [pid 5073] umount2("./392", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7445 attached [pid 7444] <... ioctl resumed>) = 0 [pid 7443] mkdir("./file1", 0777 [pid 5076] <... ioctl resumed>) = 0 [pid 7445] set_robust_list(0x555583d53660, 24) = 0 [pid 7444] close(3 [pid 7443] <... mkdir resumed>) = 0 [pid 7442] <... close resumed>) = 0 [pid 5076] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7445 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7445] chdir("./391" [pid 7444] <... close resumed>) = 0 [pid 7443] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... openat resumed>) = 3 [pid 7444] close(4 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 7444] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] <... close resumed>) = 0 [pid 7444] mkdir("./file1", 0777 [pid 7442] exit_group(0 [pid 5073] umount2("./392/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./392/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7445] <... chdir resumed>) = 0 [pid 5073] unlink("./392/binderfs" [pid 7445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7444] <... mkdir resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... unlink resumed>) = 0 [pid 7442] <... exit_group resumed>) = ? [pid 5073] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7445] <... prctl resumed>) = 0 [pid 7444] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7445] setpgid(0, 0./strace-static-x86_64: Process 7446 attached ) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7446] set_robust_list(0x555583d53660, 24) = 0 [pid 7446] chdir("./388" [pid 7445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7446] <... chdir resumed>) = 0 [pid 7446] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7446] setpgid(0, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7446] <... setpgid resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./392/file1", [pid 7446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7445] <... openat resumed>) = 3 [pid 7442] +++ exited with 0 +++ [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7446 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7446] <... openat resumed>) = 3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7442, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7445] write(3, "1000", 4 [pid 5073] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7446] write(3, "1000", 4 [pid 7445] <... write resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7446] <... write resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./392/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7446] close(3 [pid 7445] close(3 [pid 5073] <... openat resumed>) = 4 [pid 7446] <... close resumed>) = 0 [pid 7445] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7446] symlink("/dev/binderfs", "./binderfs" [pid 7445] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7446] <... symlink resumed>) = 0 [pid 7443] <... mount resumed>) = 0 [pid 5072] umount2("./392", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7445] <... symlink resumed>) = 0 [pid 7443] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] getdents64(4, [pid 5072] <... openat resumed>) = 3 [pid 7443] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(3, "", [pid 5073] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7446] memfd_create("syzkaller", 0 [pid 7443] chdir("./file1" [pid 5073] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 7446] <... memfd_create resumed>) = 3 [pid 7445] memfd_create("syzkaller", 0 [pid 5073] rmdir("./392/file1" [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7443] <... chdir resumed>) = 0 [pid 7446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7444] <... mount resumed>) = 0 [pid 7443] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 5072] umount2("./392/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7446] <... mmap resumed>) = 0x7f943d000000 [pid 7445] <... memfd_create resumed>) = 3 [ 284.299692][ T7443] loop0: detected capacity change from 0 to 1024 [ 284.312119][ T7444] loop3: detected capacity change from 0 to 1024 [pid 7444] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7443] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7444] <... openat resumed>) = 3 [pid 7443] truncate("./file1", 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(AT_FDCWD, "./392/binderfs", [pid 7445] <... mmap resumed>) = 0x7f943d000000 [pid 7444] chdir("./file1" [pid 5073] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7444] <... chdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] unlink("./392/binderfs" [pid 5073] rmdir("./392" [pid 5072] <... unlink resumed>) = 0 [pid 5072] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7444] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7443] <... truncate resumed>) = 0 [pid 7443] memfd_create("syzkaller", 0) = 4 [pid 7444] truncate("./file1", 0 [pid 7443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7443] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... umount2 resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7445] <... write resumed>) = 524288 [pid 7443] <... write resumed>) = 524288 [pid 5073] mkdir("./393", 0777 [pid 5072] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7446] <... write resumed>) = 524288 [pid 7444] <... truncate resumed>) = 0 [pid 7444] memfd_create("syzkaller", 0 [pid 7446] munmap(0x7f943d000000, 138412032 [pid 7444] <... memfd_create resumed>) = 4 [pid 7443] munmap(0x7f943d000000, 138412032 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] newfstatat(AT_FDCWD, "./392/file1", [pid 7444] <... mmap resumed>) = 0x7f943d000000 [pid 7446] <... munmap resumed>) = 0 [pid 7444] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7443] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7443] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] openat(AT_FDCWD, "./392/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 7445] munmap(0x7f943d000000, 138412032) = 0 [pid 7444] <... write resumed>) = 524288 [pid 7445] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 7445] <... openat resumed>) = 4 [pid 5072] rmdir("./392/file1" [pid 7443] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7445] ioctl(4, LOOP_SET_FD, 3 [pid 7446] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7444] munmap(0x7f943d000000, 138412032 [pid 7443] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 7446] <... openat resumed>) = 4 [pid 7444] <... munmap resumed>) = 0 [pid 7443] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 7446] ioctl(4, LOOP_SET_FD, 3 [pid 7445] <... ioctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7445] close(3) = 0 [pid 7445] close(4 [pid 5072] close(3 [pid 7445] <... close resumed>) = 0 [pid 7444] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 7445] mkdir("./file1", 0777 [pid 7444] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] rmdir("./392" [pid 7445] <... mkdir resumed>) = 0 [pid 7444] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 7446] <... ioctl resumed>) = 0 [pid 7445] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7444] <... close resumed>) = 0 [pid 7443] exit_group(0 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] mkdir("./393", 0777 [pid 5073] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 7443] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7447 attached [pid 7447] set_robust_list(0x555583d53660, 24 [pid 7446] close(3 [pid 7447] <... set_robust_list resumed>) = 0 [pid 7446] <... close resumed>) = 0 [pid 7446] close(4 [pid 7444] exit_group(0 [pid 7447] chdir("./393" [pid 7446] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7447 [pid 7447] <... chdir resumed>) = 0 [pid 7446] mkdir("./file1", 0777 [pid 7444] <... exit_group resumed>) = ? [pid 7446] <... mkdir resumed>) = 0 [pid 7447] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7446] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7445] <... mount resumed>) = 0 [pid 7444] +++ exited with 0 +++ [pid 7443] +++ exited with 0 +++ [pid 7447] <... prctl resumed>) = 0 [pid 7445] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7444, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7443, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7447] setpgid(0, 0 [pid 7445] <... openat resumed>) = 3 [pid 7447] <... setpgid resumed>) = 0 [pid 5074] umount2("./392", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 5071] umount2("./391", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7447] <... openat resumed>) = 3 [pid 5074] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7447] write(3, "1000", 4 [pid 7445] chdir("./file1" [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7447] <... write resumed>) = 4 [pid 7445] <... chdir resumed>) = 0 [pid 5074] umount2("./392/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7447] close(3 [pid 7445] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 7447] <... close resumed>) = 0 [pid 7445] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./392/binderfs", [pid 7447] symlink("/dev/binderfs", "./binderfs" [pid 7445] truncate("./file1", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(3, "", [pid 7447] <... symlink resumed>) = 0 [pid 7446] <... mount resumed>) = 0 [pid 5074] unlink("./392/binderfs" [pid 7447] memfd_create("syzkaller", 0 [pid 7446] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7447] <... memfd_create resumed>) = 3 [pid 7446] <... openat resumed>) = 3 [pid 5074] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7445] <... truncate resumed>) = 0 [pid 5071] getdents64(3, [pid 7447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7446] chdir("./file1") = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7447] <... mmap resumed>) = 0x7f943d000000 [pid 7446] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7445] memfd_create("syzkaller", 0 [pid 5071] umount2("./391/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7445] <... memfd_create resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7446] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] newfstatat(AT_FDCWD, "./391/binderfs", [pid 7446] truncate("./file1", 0 [pid 7445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 284.406045][ T7445] loop4: detected capacity change from 0 to 1024 [ 284.417529][ T7446] loop5: detected capacity change from 0 to 1024 [pid 7445] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... umount2 resumed>) = 0 [pid 5071] unlink("./391/binderfs" [pid 5074] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7446] <... truncate resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 7446] memfd_create("syzkaller", 0 [pid 5071] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7446] <... memfd_create resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./392/file1", [pid 7446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7446] <... mmap resumed>) = 0x7f943d000000 [pid 7445] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./392/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./392/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./392" [pid 5071] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7447] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7446] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] close(3 [pid 5071] newfstatat(AT_FDCWD, "./391/file1", [pid 7446] <... write resumed>) = 524288 [pid 7445] <... write resumed>) = 524288 [pid 5074] mkdir("./393", 0777 [pid 5072] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7447] munmap(0x7f943d000000, 138412032 [pid 7446] munmap(0x7f943d000000, 138412032 [pid 7445] munmap(0x7f943d000000, 138412032) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7447] <... munmap resumed>) = 0 [pid 7446] <... munmap resumed>) = 0 [pid 7445] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7446] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 7448 attached [pid 7447] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7446] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7445] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./391/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7448 [pid 7447] <... openat resumed>) = 4 [pid 7446] close(4 [pid 5071] <... openat resumed>) = 4 [pid 7448] set_robust_list(0x555583d53660, 24 [pid 5071] newfstatat(4, "", [pid 7448] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7448] chdir("./393" [pid 7447] ioctl(4, LOOP_SET_FD, 3 [pid 7445] close(4 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7448] <... chdir resumed>) = 0 [pid 5071] getdents64(4, [pid 7448] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7448] <... prctl resumed>) = 0 [pid 5071] close(4 [pid 7448] setpgid(0, 0 [pid 5071] <... close resumed>) = 0 [pid 7448] <... setpgid resumed>) = 0 [pid 5071] rmdir("./391/file1" [pid 7448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 7448] <... openat resumed>) = 3 [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./391" [pid 7448] write(3, "1000", 4 [pid 5071] <... rmdir resumed>) = 0 [pid 7448] <... write resumed>) = 4 [pid 5071] mkdir("./392", 0777 [pid 7448] close(3 [pid 5071] <... mkdir resumed>) = 0 [pid 7448] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7448] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... openat resumed>) = 3 [pid 7448] <... symlink resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7448] memfd_create("syzkaller", 0) = 3 [pid 7448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7446] <... close resumed>) = 0 [pid 7445] <... close resumed>) = 0 [pid 7445] exit_group(0 [pid 7446] exit_group(0) = ? [pid 7446] +++ exited with 0 +++ [pid 7448] <... write resumed>) = 524288 [pid 7445] <... exit_group resumed>) = ? [pid 7447] <... ioctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7446, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 7447] close(3) = 0 [pid 7448] munmap(0x7f943d000000, 138412032) = 0 [pid 7447] close(4 [pid 7445] +++ exited with 0 +++ [pid 7448] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7447] <... close resumed>) = 0 [pid 7448] ioctl(4, LOOP_SET_FD, 3 [pid 7447] mkdir("./file1", 0777 [pid 5076] umount2("./388", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7448] <... ioctl resumed>) = 0 [pid 7447] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7445, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5074] <... ioctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... openat resumed>) = 3 [pid 7447] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... restart_syscall resumed>) = 0 [pid 5074] close(3 [pid 7448] close(3) = 0 [pid 5076] newfstatat(3, "", [pid 5074] <... close resumed>) = 0 [pid 7448] close(4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7448] <... close resumed>) = 0 [pid 5075] umount2("./391", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7448] mkdir("./file1", 0777) = 0 ./strace-static-x86_64: Process 7449 attached [pid 7448] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7449] set_robust_list(0x555583d53660, 24 [pid 5076] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7449] <... set_robust_list resumed>) = 0 [pid 7448] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7448] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7448] chdir("./file1") = 0 [pid 7448] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7449] chdir("./393" [pid 7447] <... mount resumed>) = 0 [pid 5076] umount2("./388/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7449 [pid 5071] <... ioctl resumed>) = 0 [pid 7449] <... chdir resumed>) = 0 [pid 7447] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(3, "", [pid 7449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7448] truncate("./file1", 0 [pid 7447] <... openat resumed>) = 3 [pid 5076] newfstatat(AT_FDCWD, "./388/binderfs", [pid 7449] setpgid(0, 0 [pid 7447] chdir("./file1" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(3 [pid 7449] <... setpgid resumed>) = 0 [pid 7447] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 7449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7447] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] unlink("./388/binderfs" [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7449] <... openat resumed>) = 3 [pid 7448] <... truncate resumed>) = 0 [pid 7447] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... unlink resumed>) = 0 [ 284.528708][ T7447] loop2: detected capacity change from 0 to 1024 [ 284.559870][ T7448] loop1: detected capacity change from 0 to 1024 [pid 5075] umount2("./391/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7449] write(3, "1000", 4 [pid 7448] memfd_create("syzkaller", 0 [pid 7447] truncate("./file1", 0 [pid 5076] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./391/binderfs", [pid 7448] <... memfd_create resumed>) = 4 [pid 7448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7449] <... write resumed>) = 4 [pid 7448] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] unlink("./391/binderfs" [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7450 ./strace-static-x86_64: Process 7450 attached [pid 5075] <... unlink resumed>) = 0 [pid 7450] set_robust_list(0x555583d53660, 24) = 0 [pid 7449] close(3 [pid 7447] <... truncate resumed>) = 0 [pid 5075] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7449] <... close resumed>) = 0 [pid 7447] memfd_create("syzkaller", 0) = 4 [pid 7447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7449] symlink("/dev/binderfs", "./binderfs" [pid 7450] chdir("./392" [pid 7449] <... symlink resumed>) = 0 [pid 7449] memfd_create("syzkaller", 0) = 3 [pid 7449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7447] <... mmap resumed>) = 0x7f943d000000 [pid 7449] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7450] <... chdir resumed>) = 0 [pid 7449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7448] <... write resumed>) = 524288 [pid 7447] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7450] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7448] munmap(0x7f943d000000, 138412032 [pid 7450] <... prctl resumed>) = 0 [pid 7449] <... write resumed>) = 524288 [pid 7447] <... write resumed>) = 524288 [pid 5076] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7450] setpgid(0, 0 [pid 7448] <... munmap resumed>) = 0 [pid 7450] <... setpgid resumed>) = 0 [pid 7448] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7448] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7447] munmap(0x7f943d000000, 138412032 [pid 7450] <... openat resumed>) = 3 [pid 7447] <... munmap resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./388/file1", [pid 5075] newfstatat(AT_FDCWD, "./391/file1", [pid 7450] write(3, "1000", 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7450] <... write resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7450] close(3) = 0 [pid 7450] symlink("/dev/binderfs", "./binderfs" [pid 7447] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./391/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7449] munmap(0x7f943d000000, 138412032 [pid 7447] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] umount2("./388/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 4 [pid 7450] <... symlink resumed>) = 0 [pid 7449] <... munmap resumed>) = 0 [pid 7447] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(4, "", [pid 5076] openat(AT_FDCWD, "./388/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 7449] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7449] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 7449] ioctl(4, LOOP_SET_FD, 3 [pid 7447] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7450] memfd_create("syzkaller", 0 [pid 7448] <... close resumed>) = 0 [pid 7448] exit_group(0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] close(4 [pid 5076] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./391/file1") = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./388/file1" [pid 7448] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 7448] +++ exited with 0 +++ [pid 7450] <... memfd_create resumed>) = 3 [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7448, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5076] close(3 [pid 5075] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./388") = 0 [pid 5076] mkdir("./389", 0777 [pid 5072] umount2("./393", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] rmdir("./391" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] mkdir("./392", 0777 [pid 5072] newfstatat(3, "", [pid 5076] <... openat resumed>) = 3 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./393/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./393/binderfs") = 0 [pid 5072] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7449] <... ioctl resumed>) = 0 [pid 7447] exit_group(0 [pid 5072] <... umount2 resumed>) = 0 [pid 7449] close(3 [pid 7447] <... exit_group resumed>) = ? [pid 7449] <... close resumed>) = 0 [pid 7447] +++ exited with 0 +++ [pid 7449] close(4) = 0 [pid 7449] mkdir("./file1", 0777 [pid 7450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7447, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./393", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./393/file1", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 284.659348][ T7449] loop3: detected capacity change from 0 to 1024 [pid 7449] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] openat(AT_FDCWD, "./393/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7450] <... write resumed>) = 524288 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] <... openat resumed>) = 4 [pid 7449] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] newfstatat(4, "", [pid 7450] munmap(0x7f943d000000, 138412032 [pid 5073] umount2("./393/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] unlink("./393/binderfs" [pid 5072] getdents64(4, [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7450] <... munmap resumed>) = 0 [pid 5073] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7450] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] close(4) = 0 [pid 7450] <... openat resumed>) = 4 [pid 5072] rmdir("./393/file1" [pid 7450] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... rmdir resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3./strace-static-x86_64: Process 7451 attached ) = 0 [pid 7451] set_robust_list(0x555583d53660, 24 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] getdents64(3, [pid 7451] <... set_robust_list resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7451] chdir("./392" [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7451 [pid 7451] <... chdir resumed>) = 0 [pid 7451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7451] setpgid(0, 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] close(3 [pid 7451] <... setpgid resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7452 ./strace-static-x86_64: Process 7452 attached [pid 7449] <... mount resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 7451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7451] write(3, "1000", 4) = 4 [pid 7451] close(3) = 0 [pid 7451] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7451] memfd_create("syzkaller", 0 [pid 7452] set_robust_list(0x555583d53660, 24 [pid 7451] <... memfd_create resumed>) = 3 [pid 7449] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] rmdir("./393" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 7449] <... openat resumed>) = 3 [pid 5073] newfstatat(AT_FDCWD, "./393/file1", [pid 7452] <... set_robust_list resumed>) = 0 [pid 5072] mkdir("./394", 0777 [pid 7450] <... ioctl resumed>) = 0 [pid 7449] chdir("./file1" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7451] <... mmap resumed>) = 0x7f943d000000 [pid 7452] chdir("./389" [pid 7450] close(3 [pid 7449] <... chdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7452] <... chdir resumed>) = 0 [pid 7451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7450] <... close resumed>) = 0 [pid 7449] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7452] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7450] close(4 [pid 7449] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 7452] <... prctl resumed>) = 0 [pid 7450] <... close resumed>) = 0 [pid 7449] truncate("./file1", 0 [pid 5073] openat(AT_FDCWD, "./393/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7452] setpgid(0, 0 [pid 7450] mkdir("./file1", 0777 [pid 7452] <... setpgid resumed>) = 0 [pid 7450] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 7452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7450] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7452] <... openat resumed>) = 3 [pid 7452] write(3, "1000", 4 [pid 5073] getdents64(4, [pid 7452] <... write resumed>) = 4 [pid 7450] <... mount resumed>) = 0 [pid 7449] <... truncate resumed>) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7452] close(3 [pid 7450] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7449] memfd_create("syzkaller", 0 [pid 5073] close(4 [pid 7452] <... close resumed>) = 0 [pid 7450] <... openat resumed>) = 3 [pid 7449] <... memfd_create resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 7452] symlink("/dev/binderfs", "./binderfs" [pid 7450] chdir("./file1" [pid 7449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] rmdir("./393/file1" [pid 7452] <... symlink resumed>) = 0 [pid 7450] <... chdir resumed>) = 0 [pid 7449] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... rmdir resumed>) = 0 [pid 7452] memfd_create("syzkaller", 0 [pid 7451] <... write resumed>) = 524288 [pid 7450] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7449] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] getdents64(3, [pid 7452] <... memfd_create resumed>) = 3 [pid 7450] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 7452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 284.731659][ T7450] loop0: detected capacity change from 0 to 1024 [pid 7450] truncate("./file1", 0 [pid 7451] munmap(0x7f943d000000, 138412032 [pid 7449] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 7451] <... munmap resumed>) = 0 [pid 7452] <... mmap resumed>) = 0x7f943d000000 [pid 5073] rmdir("./393" [pid 7452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] <... rmdir resumed>) = 0 [pid 7451] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7450] <... truncate resumed>) = 0 [pid 5073] mkdir("./394", 0777 [pid 7450] memfd_create("syzkaller", 0 [pid 7449] munmap(0x7f943d000000, 138412032 [pid 7450] <... memfd_create resumed>) = 4 [pid 5073] <... mkdir resumed>) = 0 [pid 7452] <... write resumed>) = 524288 [pid 7451] <... openat resumed>) = 4 [pid 7450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7449] <... munmap resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7452] munmap(0x7f943d000000, 138412032 [pid 7450] <... mmap resumed>) = 0x7f943d000000 [pid 5073] <... openat resumed>) = 3 [pid 7451] ioctl(4, LOOP_SET_FD, 3 [pid 7452] <... munmap resumed>) = 0 [pid 7450] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7449] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... ioctl resumed>) = 0 [pid 7452] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] close(3 [pid 7452] <... openat resumed>) = 4 [pid 7449] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... close resumed>) = 0 [pid 7452] ioctl(4, LOOP_SET_FD, 3 [pid 7449] close(4 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7451] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7453 attached [pid 7450] <... write resumed>) = 524288 [pid 7453] set_robust_list(0x555583d53660, 24 [pid 7451] close(3 [pid 7453] <... set_robust_list resumed>) = 0 [pid 7451] <... close resumed>) = 0 [pid 7453] chdir("./394" [pid 7451] close(4 [pid 7453] <... chdir resumed>) = 0 [pid 7451] <... close resumed>) = 0 [pid 7453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7451] mkdir("./file1", 0777 [pid 7453] <... prctl resumed>) = 0 [pid 7451] <... mkdir resumed>) = 0 [pid 7453] setpgid(0, 0 [pid 7451] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7449] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7453 [pid 7452] <... ioctl resumed>) = 0 [pid 7452] close(3 [pid 5073] close(3 [pid 7452] <... close resumed>) = 0 [pid 7452] close(4 [pid 7450] munmap(0x7f943d000000, 138412032 [pid 5073] <... close resumed>) = 0 [pid 7452] <... close resumed>) = 0 [pid 7449] exit_group(0 [pid 7453] <... setpgid resumed>) = 0 [pid 7452] mkdir("./file1", 0777 [pid 7451] <... mount resumed>) = 0 [pid 7450] <... munmap resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7450] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7453] <... openat resumed>) = 3 [pid 7452] <... mkdir resumed>) = 0 [pid 7450] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7453] write(3, "1000", 4 [pid 7450] close(4 [pid 7453] <... write resumed>) = 4 [ 284.811637][ T7451] loop4: detected capacity change from 0 to 1024 [ 284.825783][ T7452] loop5: detected capacity change from 0 to 1024 [pid 7451] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7450] <... close resumed>) = 0 [pid 7452] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7449] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 7454 attached [pid 7453] close(3 [pid 7451] <... openat resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7454 [pid 7454] set_robust_list(0x555583d53660, 24 [pid 7453] <... close resumed>) = 0 [pid 7452] <... mount resumed>) = 0 [pid 7451] chdir("./file1" [pid 7449] +++ exited with 0 +++ [pid 7454] <... set_robust_list resumed>) = 0 [pid 7453] symlink("/dev/binderfs", "./binderfs" [pid 7452] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7454] chdir("./394" [pid 7453] <... symlink resumed>) = 0 [pid 7451] <... chdir resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7449, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7454] <... chdir resumed>) = 0 [pid 7453] memfd_create("syzkaller", 0 [pid 7452] <... openat resumed>) = 3 [pid 7454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7450] exit_group(0 [pid 7453] <... memfd_create resumed>) = 3 [pid 7450] <... exit_group resumed>) = ? [pid 7454] <... prctl resumed>) = 0 [pid 7450] +++ exited with 0 +++ [pid 7454] setpgid(0, 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7450, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] umount2("./393", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7453] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7454] <... setpgid resumed>) = 0 [pid 7453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7452] chdir("./file1" [pid 5074] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./392", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7452] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7451] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7452] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] newfstatat(3, "", [pid 5071] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(3, "", [pid 5074] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7452] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7452] truncate("./file1", 0 [pid 7451] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] getdents64(3, [pid 5074] umount2("./393/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./392/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./393/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./392/binderfs", [pid 7454] <... openat resumed>) = 3 [pid 7451] truncate("./file1", 0 [pid 5074] unlink("./393/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7454] write(3, "1000", 4 [pid 5074] <... unlink resumed>) = 0 [pid 5071] unlink("./392/binderfs" [pid 5074] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 7454] <... write resumed>) = 4 [pid 7454] close(3 [pid 7452] <... truncate resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5071] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7454] <... close resumed>) = 0 [pid 7453] <... write resumed>) = 524288 [pid 7452] memfd_create("syzkaller", 0 [pid 7451] <... truncate resumed>) = 0 [pid 7454] symlink("/dev/binderfs", "./binderfs" [pid 7452] <... memfd_create resumed>) = 4 [pid 7452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7451] memfd_create("syzkaller", 0 [pid 7454] <... symlink resumed>) = 0 [pid 7454] memfd_create("syzkaller", 0 [pid 7451] <... memfd_create resumed>) = 4 [pid 5074] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7452] <... mmap resumed>) = 0x7f943d000000 [pid 7451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7451] <... mmap resumed>) = 0x7f943d000000 [pid 5074] newfstatat(AT_FDCWD, "./393/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./393/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7454] <... memfd_create resumed>) = 3 [pid 7452] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7451] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 4 [pid 7454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] newfstatat(4, "", [pid 7454] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./393/file1") = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./393") = 0 [pid 5074] mkdir("./394", 0777) = 0 [pid 5071] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5071] newfstatat(AT_FDCWD, "./392/file1", [pid 5074] ioctl(3, LOOP_CLR_FD [pid 7454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7452] <... write resumed>) = 524288 [pid 7451] <... write resumed>) = 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7453] munmap(0x7f943d000000, 138412032) = 0 [pid 5071] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7453] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 7453] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./392/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7452] munmap(0x7f943d000000, 138412032 [pid 5071] <... openat resumed>) = 4 [pid 7452] <... munmap resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 7454] <... write resumed>) = 524288 [pid 7454] munmap(0x7f943d000000, 138412032 [pid 7452] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7452] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] getdents64(4, [pid 7452] close(4 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 7451] munmap(0x7f943d000000, 138412032 [pid 5071] <... close resumed>) = 0 [pid 7454] <... munmap resumed>) = 0 [pid 7451] <... munmap resumed>) = 0 [pid 5071] rmdir("./392/file1") = 0 [pid 5071] getdents64(3, [pid 7451] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7454] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7451] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7454] <... openat resumed>) = 4 [pid 7452] <... close resumed>) = 0 [pid 7451] close(4 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7454] ioctl(4, LOOP_SET_FD, 3 [pid 7453] <... ioctl resumed>) = 0 [pid 7452] exit_group(0 [pid 5071] close(3 [pid 7451] <... close resumed>) = 0 [pid 7451] exit_group(0) = ? [pid 7454] <... ioctl resumed>) = 0 [pid 7453] close(3 [pid 7452] <... exit_group resumed>) = ? [pid 7451] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 7454] close(3 [pid 7453] <... close resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7451, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7454] <... close resumed>) = 0 [pid 7453] close(4 [pid 5071] rmdir("./392" [pid 7454] close(4) = 0 [pid 7454] mkdir("./file1", 0777) = 0 [pid 7454] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7453] <... close resumed>) = 0 [pid 7452] +++ exited with 0 +++ [pid 5075] umount2("./392", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7453] mkdir("./file1", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(3 [pid 7453] <... mkdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7452, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5071] mkdir("./393", 0777 [pid 7453] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] newfstatat(3, "", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 284.938604][ T7453] loop1: detected capacity change from 0 to 1024 [ 284.955909][ T7454] loop2: detected capacity change from 0 to 1024 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./389", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./389/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./389/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./389/binderfs") = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 7455 attached [pid 7454] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7455 [pid 7455] set_robust_list(0x555583d53660, 24) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7454] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7454] chdir("./file1") = 0 [pid 7454] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7454] truncate("./file1", 0 [pid 5076] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./389/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./389/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./389/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 7454] <... truncate resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7455] chdir("./394" [pid 7454] memfd_create("syzkaller", 0 [pid 5076] getdents64(4, [pid 7455] <... chdir resumed>) = 0 [pid 7455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] umount2("./392/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7455] <... prctl resumed>) = 0 [pid 7454] <... memfd_create resumed>) = 4 [pid 7453] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7455] setpgid(0, 0 [pid 7454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] close(4 [pid 5075] newfstatat(AT_FDCWD, "./392/binderfs", [pid 7455] <... setpgid resumed>) = 0 [pid 7454] <... mmap resumed>) = 0x7f943d000000 [pid 7453] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7454] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7453] <... openat resumed>) = 3 [pid 5076] rmdir("./389/file1" [pid 5075] unlink("./392/binderfs" [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 7453] chdir("./file1") = 0 [pid 7453] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7453] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7455] <... openat resumed>) = 3 [pid 7453] truncate("./file1", 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./389") = 0 [pid 5076] mkdir("./390", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7455] write(3, "1000", 4 [pid 7454] <... write resumed>) = 524288 [pid 5071] <... ioctl resumed>) = 0 [pid 5071] close(3) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7453] <... truncate resumed>) = 0 [pid 7453] memfd_create("syzkaller", 0) = 4 [pid 7453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 7456 attached [pid 7456] set_robust_list(0x555583d53660, 24) = 0 [pid 7456] chdir("./393" [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7456 [pid 7456] <... chdir resumed>) = 0 [pid 7456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7456] setpgid(0, 0) = 0 [pid 7456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7453] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7456] <... openat resumed>) = 3 [pid 7456] write(3, "1000", 4 [pid 7454] munmap(0x7f943d000000, 138412032 [pid 7456] <... write resumed>) = 4 [pid 7455] <... write resumed>) = 4 [pid 7454] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7455] close(3 [pid 5075] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7455] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7455] symlink("/dev/binderfs", "./binderfs" [pid 5075] newfstatat(AT_FDCWD, "./392/file1", [pid 7456] close(3 [pid 7454] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7456] <... close resumed>) = 0 [pid 7455] <... symlink resumed>) = 0 [pid 7454] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7456] symlink("/dev/binderfs", "./binderfs" [pid 7454] close(4 [pid 5075] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7456] <... symlink resumed>) = 0 [pid 7455] memfd_create("syzkaller", 0 [pid 7454] <... close resumed>) = 0 [pid 7456] memfd_create("syzkaller", 0 [pid 7455] <... memfd_create resumed>) = 3 [pid 7453] <... write resumed>) = 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7454] exit_group(0 [pid 5076] <... ioctl resumed>) = 0 [pid 7456] <... memfd_create resumed>) = 3 [pid 7456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] openat(AT_FDCWD, "./392/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 7455] <... mmap resumed>) = 0x7f943d000000 [pid 7454] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7454] +++ exited with 0 +++ [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7457 ./strace-static-x86_64: Process 7457 attached [pid 7455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7454, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] getdents64(4, [pid 7457] set_robust_list(0x555583d53660, 24 [pid 7453] munmap(0x7f943d000000, 138412032 [pid 7457] <... set_robust_list resumed>) = 0 [pid 7456] <... write resumed>) = 524288 [pid 7453] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7457] chdir("./390" [pid 5075] getdents64(4, [pid 7453] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5073] umount2("./394", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7453] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7457] <... chdir resumed>) = 0 [pid 7457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5075] <... close resumed>) = 0 [pid 7457] setpgid(0, 0 [pid 7453] close(4 [pid 5075] rmdir("./392/file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7457] <... setpgid resumed>) = 0 [pid 7457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7457] <... openat resumed>) = 3 [pid 7457] write(3, "1000", 4) = 4 [pid 7457] close(3) = 0 [pid 7457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7457] memfd_create("syzkaller", 0 [pid 7453] <... close resumed>) = 0 [pid 7457] <... memfd_create resumed>) = 3 [pid 5075] getdents64(3, [pid 5073] <... openat resumed>) = 3 [pid 7457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 7457] <... mmap resumed>) = 0x7f943d000000 [pid 7456] munmap(0x7f943d000000, 138412032 [pid 7455] <... write resumed>) = 524288 [pid 7453] exit_group(0 [pid 5075] close(3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7456] <... munmap resumed>) = 0 [pid 7455] munmap(0x7f943d000000, 138412032 [pid 7453] <... exit_group resumed>) = ? [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./394/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] rmdir("./392" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./394/binderfs", [pid 7455] <... munmap resumed>) = 0 [pid 7453] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./394/binderfs" [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7453, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7456] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7455] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] umount2("./394", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 7456] <... openat resumed>) = 4 [pid 7455] <... openat resumed>) = 4 [pid 7456] ioctl(4, LOOP_SET_FD, 3 [pid 7455] ioctl(4, LOOP_SET_FD, 3 [pid 7457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] mkdir("./393", 0777 [pid 5073] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7457] <... write resumed>) = 524288 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./394/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./394/binderfs" [pid 7457] munmap(0x7f943d000000, 138412032 [pid 7456] <... ioctl resumed>) = 0 [pid 7455] <... ioctl resumed>) = 0 [pid 7457] <... munmap resumed>) = 0 [pid 7456] close(3 [pid 7457] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7456] <... close resumed>) = 0 [pid 7455] close(3 [pid 7457] <... openat resumed>) = 4 [pid 7456] close(4 [pid 7457] ioctl(4, LOOP_SET_FD, 3 [pid 7456] <... close resumed>) = 0 [pid 7455] <... close resumed>) = 0 [pid 7456] mkdir("./file1", 0777) = 0 [pid 7455] close(4 [pid 7456] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7455] <... close resumed>) = 0 [pid 7455] mkdir("./file1", 0777 [pid 5072] <... unlink resumed>) = 0 [pid 7455] <... mkdir resumed>) = 0 [pid 7455] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7457] <... ioctl resumed>) = 0 [pid 7456] <... mount resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./394/file1", [pid 7456] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./394/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7456] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7455] <... mount resumed>) = 0 [pid 5072] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7457] close(3 [pid 5073] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7457] <... close resumed>) = 0 [pid 7456] chdir("./file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7457] close(4 [pid 7456] <... chdir resumed>) = 0 [pid 5075] close(3 [pid 5073] openat(AT_FDCWD, "./394/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7457] <... close resumed>) = 0 [pid 7455] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./394/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7457] mkdir("./file1", 0777 [pid 7456] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7455] <... openat resumed>) = 3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... openat resumed>) = 4 ./strace-static-x86_64: Process 7458 attached [pid 7457] <... mkdir resumed>) = 0 [pid 7456] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7455] chdir("./file1" [pid 5073] newfstatat(4, "", [pid 5072] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5072] getdents64(4, [pid 7458] set_robust_list(0x555583d53660, 24 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7458 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7458] <... set_robust_list resumed>) = 0 [pid 5072] getdents64(4, [pid 7456] truncate("./file1", 0 [pid 7455] <... chdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7458] chdir("./393" [pid 5072] close(4 [pid 7458] <... chdir resumed>) = 0 [pid 7455] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 7458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7455] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] close(4 [pid 5072] rmdir("./394/file1" [pid 7458] <... prctl resumed>) = 0 [pid 7457] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7455] truncate("./file1", 0 [pid 5073] <... close resumed>) = 0 [pid 7458] setpgid(0, 0 [pid 7456] <... truncate resumed>) = 0 [ 285.121236][ T7456] loop0: detected capacity change from 0 to 1024 [ 285.128059][ T7455] loop3: detected capacity change from 0 to 1024 [ 285.138363][ T7457] loop5: detected capacity change from 0 to 1024 [pid 5073] rmdir("./394/file1" [pid 5072] <... rmdir resumed>) = 0 [pid 7458] <... setpgid resumed>) = 0 [pid 7456] memfd_create("syzkaller", 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 7458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7456] <... memfd_create resumed>) = 4 [pid 7455] <... truncate resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7458] <... openat resumed>) = 3 [pid 7456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7455] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 7458] write(3, "1000", 4 [pid 7456] <... mmap resumed>) = 0x7f943d000000 [pid 7455] <... memfd_create resumed>) = 4 [pid 7458] <... write resumed>) = 4 [pid 7456] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] close(3 [pid 5072] <... close resumed>) = 0 [pid 7455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] rmdir("./394" [pid 7458] close(3 [pid 7455] <... mmap resumed>) = 0x7f943d000000 [pid 7458] <... close resumed>) = 0 [pid 7457] <... mount resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 7458] symlink("/dev/binderfs", "./binderfs" [pid 5072] mkdir("./395", 0777 [pid 7458] <... symlink resumed>) = 0 [pid 7457] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] rmdir("./394" [pid 7457] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7458] memfd_create("syzkaller", 0 [pid 7457] chdir("./file1" [pid 7456] <... write resumed>) = 524288 [pid 7455] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7458] <... memfd_create resumed>) = 3 [pid 7457] <... chdir resumed>) = 0 [pid 5073] mkdir("./395", 0777 [pid 5072] <... openat resumed>) = 3 [pid 7457] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7455] <... write resumed>) = 524288 [pid 5073] <... mkdir resumed>) = 0 [pid 7457] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7457] truncate("./file1", 0 [pid 5073] <... openat resumed>) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7455] munmap(0x7f943d000000, 138412032 [pid 7458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7457] <... truncate resumed>) = 0 [pid 7456] munmap(0x7f943d000000, 138412032 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7458] <... mmap resumed>) = 0x7f943d000000 [pid 7457] memfd_create("syzkaller", 0 [pid 7456] <... munmap resumed>) = 0 [pid 7455] <... munmap resumed>) = 0 [pid 7456] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7457] <... memfd_create resumed>) = 4 [pid 7456] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7456] close(4 [pid 7457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7456] <... close resumed>) = 0 [pid 7455] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7457] <... mmap resumed>) = 0x7f943d000000 [pid 7455] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7455] close(4 [pid 7457] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7456] exit_group(0 [pid 7458] <... write resumed>) = 524288 [pid 7457] <... write resumed>) = 524288 [pid 7455] <... close resumed>) = 0 [pid 7456] <... exit_group resumed>) = ? [pid 7455] exit_group(0 [pid 7457] munmap(0x7f943d000000, 138412032 [pid 7455] <... exit_group resumed>) = ? [pid 7457] <... munmap resumed>) = 0 [pid 7456] +++ exited with 0 +++ [pid 7457] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7456, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] umount2("./393", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./393/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./393/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./393/binderfs") = 0 [pid 5071] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 7458] munmap(0x7f943d000000, 138412032 [pid 7457] close(4 [pid 7455] +++ exited with 0 +++ [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5072] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7455, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5072] <... close resumed>) = 0 [pid 5074] umount2("./394", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./393/file1", [pid 5074] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7459 attached [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7459 [pid 7458] <... munmap resumed>) = 0 [pid 5073] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7459] set_robust_list(0x555583d53660, 24 [pid 7457] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5071] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7459] <... set_robust_list resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7459] chdir("./395" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] openat(AT_FDCWD, "./393/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 7460 attached [pid 7459] <... chdir resumed>) = 0 [pid 7458] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] getdents64(3, [pid 5071] <... openat resumed>) = 4 [pid 7460] set_robust_list(0x555583d53660, 24 [pid 7459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7458] <... openat resumed>) = 4 [pid 7460] <... set_robust_list resumed>) = 0 [pid 7459] <... prctl resumed>) = 0 [pid 7458] ioctl(4, LOOP_SET_FD, 3 [pid 5071] newfstatat(4, "", [pid 7459] setpgid(0, 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7460] chdir("./395" [pid 7459] <... setpgid resumed>) = 0 [pid 5074] umount2("./394/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7460 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 7459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] newfstatat(AT_FDCWD, "./394/binderfs", [pid 7459] <... openat resumed>) = 3 [pid 5071] getdents64(4, [pid 7460] <... chdir resumed>) = 0 [pid 7459] write(3, "1000", 4 [pid 7457] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7459] <... write resumed>) = 4 [pid 5074] unlink("./394/binderfs" [pid 5071] close(4 [pid 7460] <... prctl resumed>) = 0 [pid 7459] close(3 [pid 7457] <... exit_group resumed>) = ? [pid 7460] setpgid(0, 0 [pid 7459] <... close resumed>) = 0 [pid 7457] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7460] <... setpgid resumed>) = 0 [pid 7459] symlink("/dev/binderfs", "./binderfs" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7457, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] rmdir("./393/file1" [pid 7460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7459] <... symlink resumed>) = 0 [pid 5074] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 7459] memfd_create("syzkaller", 0 [pid 5076] umount2("./390", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7459] <... memfd_create resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "./390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7460] <... openat resumed>) = 3 [pid 5071] close(3 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./390/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./390/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] rmdir("./393" [pid 5076] unlink("./390/binderfs" [pid 7459] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7460] write(3, "1000", 4 [pid 7459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7458] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7460] <... write resumed>) = 4 [pid 7460] close(3 [pid 5071] mkdir("./394", 0777 [pid 5076] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7460] <... close resumed>) = 0 [ 285.295258][ T7458] loop4: detected capacity change from 0 to 1024 [pid 7459] <... write resumed>) = 524288 [pid 7458] close(3 [pid 5074] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 [pid 7460] symlink("/dev/binderfs", "./binderfs" [pid 7459] munmap(0x7f943d000000, 138412032 [pid 7458] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7460] <... symlink resumed>) = 0 [pid 7459] <... munmap resumed>) = 0 [pid 7458] close(4 [pid 5076] newfstatat(AT_FDCWD, "./390/file1", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./394/file1", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7458] <... close resumed>) = 0 [pid 7460] memfd_create("syzkaller", 0 [pid 5076] umount2("./390/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 7458] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7459] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7458] <... mkdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./390/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7460] <... memfd_create resumed>) = 3 [pid 7459] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./394/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 7460] <... mmap resumed>) = 0x7f943d000000 [pid 7459] ioctl(4, LOOP_SET_FD, 3 [pid 7458] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 7460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./390/file1") = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5074] close(4) = 0 [pid 5074] rmdir("./394/file1" [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5076] rmdir("./390") = 0 [pid 5074] getdents64(3, [pid 7460] <... write resumed>) = 524288 [pid 7459] <... ioctl resumed>) = 0 [pid 7458] <... mount resumed>) = 0 [pid 5076] mkdir("./391", 0777 [pid 7460] munmap(0x7f943d000000, 138412032 [pid 7459] close(3 [pid 7458] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7459] <... close resumed>) = 0 [pid 7458] <... openat resumed>) = 3 [pid 5074] close(3 [pid 7460] <... munmap resumed>) = 0 [pid 7459] close(4 [pid 7458] chdir("./file1" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7458] <... chdir resumed>) = 0 [pid 7458] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 7458] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7459] <... close resumed>) = 0 [pid 7458] truncate("./file1", 0 [pid 5076] <... openat resumed>) = 3 [pid 5074] rmdir("./394" [pid 7459] mkdir("./file1", 0777 [pid 7460] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 7460] ioctl(4, LOOP_SET_FD, 3 [pid 7458] <... truncate resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./395", 0777 [pid 7458] memfd_create("syzkaller", 0 [pid 7459] <... mkdir resumed>) = 0 [pid 7458] <... memfd_create resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 7458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7459] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7458] <... mmap resumed>) = 0x7f943d000000 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... ioctl resumed>) = 0 [pid 5071] close(3 [pid 7460] <... ioctl resumed>) = 0 [pid 7459] <... mount resumed>) = 0 [pid 7458] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... close resumed>) = 0 [pid 7460] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7460] <... close resumed>) = 0 [pid 7459] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7459] chdir("./file1" [pid 7460] close(4 [pid 7459] <... chdir resumed>) = 0 [pid 7460] <... close resumed>) = 0 [pid 7459] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7460] mkdir("./file1", 0777 [pid 7459] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7460] <... mkdir resumed>) = 0 [pid 7459] truncate("./file1", 0) = 0 [pid 7459] memfd_create("syzkaller", 0) = 4 [pid 7459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7460] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7461 ./strace-static-x86_64: Process 7461 attached [pid 7459] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7458] <... write resumed>) = 524288 [pid 7461] set_robust_list(0x555583d53660, 24) = 0 [ 285.340121][ T7459] loop1: detected capacity change from 0 to 1024 [ 285.375980][ T7460] loop2: detected capacity change from 0 to 1024 [pid 7461] chdir("./394" [pid 7460] <... mount resumed>) = 0 [pid 7458] munmap(0x7f943d000000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 7461] <... chdir resumed>) = 0 [pid 7461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7460] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7458] <... munmap resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 7461] <... prctl resumed>) = 0 [pid 7461] setpgid(0, 0 [pid 7460] <... openat resumed>) = 3 [pid 7458] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] close(3 [pid 7461] <... setpgid resumed>) = 0 [pid 7460] chdir("./file1" [pid 5074] <... close resumed>) = 0 [pid 7461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7460] <... chdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7460] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7463 attached [pid 7461] <... openat resumed>) = 3 [pid 7460] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7459] <... write resumed>) = 524288 [pid 7458] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7460] truncate("./file1", 0./strace-static-x86_64: Process 7462 attached [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7463 [pid 7462] set_robust_list(0x555583d53660, 24) = 0 [pid 7462] chdir("./395" [pid 7463] set_robust_list(0x555583d53660, 24 [pid 7462] <... chdir resumed>) = 0 [pid 7458] close(4 [pid 7463] <... set_robust_list resumed>) = 0 [pid 7462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7461] write(3, "1000", 4 [pid 7460] <... truncate resumed>) = 0 [pid 7459] munmap(0x7f943d000000, 138412032 [pid 7463] chdir("./391" [pid 7462] <... prctl resumed>) = 0 [pid 7461] <... write resumed>) = 4 [pid 7460] memfd_create("syzkaller", 0 [pid 7459] <... munmap resumed>) = 0 [pid 7458] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7462 [pid 7463] <... chdir resumed>) = 0 [pid 7461] close(3 [pid 7460] <... memfd_create resumed>) = 4 [pid 7461] <... close resumed>) = 0 [pid 7460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7461] symlink("/dev/binderfs", "./binderfs" [pid 7463] <... prctl resumed>) = 0 [pid 7462] setpgid(0, 0 [pid 7460] <... mmap resumed>) = 0x7f943d000000 [pid 7459] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7463] setpgid(0, 0 [pid 7461] <... symlink resumed>) = 0 [pid 7463] <... setpgid resumed>) = 0 [pid 7462] <... setpgid resumed>) = 0 [pid 7461] memfd_create("syzkaller", 0 [pid 7460] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7459] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7458] exit_group(0 [pid 7463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7461] <... memfd_create resumed>) = 3 [pid 7459] close(4 [pid 7463] <... openat resumed>) = 3 [pid 7462] <... openat resumed>) = 3 [pid 7461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7459] <... close resumed>) = 0 [pid 7458] <... exit_group resumed>) = ? [pid 7463] write(3, "1000", 4 [pid 7462] write(3, "1000", 4 [pid 7461] <... mmap resumed>) = 0x7f943d000000 [pid 7463] <... write resumed>) = 4 [pid 7463] close(3 [pid 7462] <... write resumed>) = 4 [pid 7462] close(3 [pid 7463] <... close resumed>) = 0 [pid 7462] <... close resumed>) = 0 [pid 7463] symlink("/dev/binderfs", "./binderfs" [pid 7462] symlink("/dev/binderfs", "./binderfs" [pid 7463] <... symlink resumed>) = 0 [pid 7462] <... symlink resumed>) = 0 [pid 7463] memfd_create("syzkaller", 0 [pid 7462] memfd_create("syzkaller", 0) = 3 [pid 7462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7460] <... write resumed>) = 524288 [pid 7459] exit_group(0) = ? [pid 7463] <... memfd_create resumed>) = 3 [pid 7459] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7459, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7458] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7458, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5072] umount2("./395", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7461] <... write resumed>) = 524288 [pid 7460] munmap(0x7f943d000000, 138412032 [pid 5075] umount2("./393", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 5072] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 7460] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./393/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(3, "", [pid 5075] newfstatat(AT_FDCWD, "./393/binderfs", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./393/binderfs" [pid 7460] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... unlink resumed>) = 0 [pid 5072] getdents64(3, [pid 7463] <... write resumed>) = 524288 [pid 7460] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7463] munmap(0x7f943d000000, 138412032 [pid 7462] <... write resumed>) = 524288 [pid 7460] close(4 [pid 7461] munmap(0x7f943d000000, 138412032 [pid 7463] <... munmap resumed>) = 0 [pid 7461] <... munmap resumed>) = 0 [pid 7460] <... close resumed>) = 0 [pid 5072] umount2("./395/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7463] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7460] exit_group(0 [pid 7463] <... openat resumed>) = 4 [pid 7460] <... exit_group resumed>) = ? [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7463] ioctl(4, LOOP_SET_FD, 3 [pid 7461] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7460] +++ exited with 0 +++ [pid 7462] munmap(0x7f943d000000, 138412032 [pid 7461] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7460, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7461] ioctl(4, LOOP_SET_FD, 3 [pid 7462] <... munmap resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./395/binderfs", [pid 5075] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./393/file1", [pid 5073] umount2("./395", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 7462] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] openat(AT_FDCWD, "./393/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(3, "", [pid 7462] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7462] ioctl(4, LOOP_SET_FD, 3 [pid 5075] newfstatat(4, "", [pid 5073] getdents64(3, [pid 7463] <... ioctl resumed>) = 0 [pid 7461] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7463] close(3 [pid 7461] close(3 [pid 5072] unlink("./395/binderfs" [pid 7463] <... close resumed>) = 0 [pid 7461] <... close resumed>) = 0 [pid 7461] close(4 [pid 7463] close(4 [pid 5073] umount2("./395/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./395/binderfs", [pid 5072] <... unlink resumed>) = 0 [pid 7463] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5073] unlink("./395/binderfs" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... unlink resumed>) = 0 [pid 5075] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./393/file1" [pid 5073] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 7463] mkdir("./file1", 0777) = 0 [pid 5075] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./393") = 0 [pid 5075] mkdir("./394", 0777) = 0 [pid 7461] <... close resumed>) = 0 [pid 5072] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7463] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7461] mkdir("./file1", 0777 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7461] <... mkdir resumed>) = 0 [pid 7463] <... mount resumed>) = 0 [pid 7461] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7463] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7463] chdir("./file1") = 0 [pid 7463] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7463] truncate("./file1", 0) = 0 [pid 7463] memfd_create("syzkaller", 0) = 4 [pid 7463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7462] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7462] close(3 [pid 5073] newfstatat(AT_FDCWD, "./395/file1", [pid 7462] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7462] close(4 [pid 5073] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7462] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7462] mkdir("./file1", 0777 [pid 5073] openat(AT_FDCWD, "./395/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7462] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 7463] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7461] <... mount resumed>) = 0 [pid 5072] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7462] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7461] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] newfstatat(4, "", [pid 5072] newfstatat(AT_FDCWD, "./395/file1", [pid 7461] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7461] chdir("./file1" [pid 5073] getdents64(4, [pid 7461] <... chdir resumed>) = 0 [pid 5072] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7461] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(4, [pid 5072] openat(AT_FDCWD, "./395/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7461] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 285.526372][ T7461] loop0: detected capacity change from 0 to 1024 [ 285.528825][ T7463] loop5: detected capacity change from 0 to 1024 [ 285.537347][ T7462] loop3: detected capacity change from 0 to 1024 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7462] <... mount resumed>) = 0 [pid 7461] truncate("./file1", 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 7462] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] close(4 [pid 5072] newfstatat(4, "", [pid 5073] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7462] <... openat resumed>) = 3 [pid 5073] rmdir("./395/file1" [pid 7462] chdir("./file1" [pid 5073] <... rmdir resumed>) = 0 [pid 7462] <... chdir resumed>) = 0 [pid 7462] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] getdents64(3, [pid 7462] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./395") = 0 [pid 5072] getdents64(4, [pid 5073] mkdir("./396", 0777) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7463] <... write resumed>) = 524288 [pid 7462] truncate("./file1", 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7463] munmap(0x7f943d000000, 138412032 [pid 5073] <... openat resumed>) = 3 [pid 7463] <... munmap resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7461] <... truncate resumed>) = 0 [pid 5072] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7461] memfd_create("syzkaller", 0 [pid 5072] close(4 [pid 7461] <... memfd_create resumed>) = 4 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./395/file1" [pid 7461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7462] <... truncate resumed>) = 0 [pid 7461] <... mmap resumed>) = 0x7f943d000000 [pid 7463] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7462] memfd_create("syzkaller", 0./strace-static-x86_64: Process 7464 attached [pid 7463] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7462] <... memfd_create resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7464 [pid 5072] <... rmdir resumed>) = 0 [pid 7464] set_robust_list(0x555583d53660, 24 [pid 7463] close(4 [pid 7462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7461] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] getdents64(3, [pid 7462] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 7464] <... set_robust_list resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5072] rmdir("./395" [pid 7464] chdir("./394") = 0 [pid 7463] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./396", 0777 [pid 7464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7464] setpgid(0, 0) = 0 [pid 7464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7464] write(3, "1000", 4 [pid 7462] <... write resumed>) = 524288 [pid 7461] <... write resumed>) = 524288 [pid 7464] <... write resumed>) = 4 [pid 7463] exit_group(0 [pid 7464] close(3 [pid 7463] <... exit_group resumed>) = ? [pid 7464] <... close resumed>) = 0 [pid 7463] +++ exited with 0 +++ [pid 5072] <... mkdir resumed>) = 0 [pid 7464] symlink("/dev/binderfs", "./binderfs" [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7464] <... symlink resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7463, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7464] memfd_create("syzkaller", 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5076] umount2("./391", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7464] <... memfd_create resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./391/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./391/binderfs", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./391/binderfs" [pid 7464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... unlink resumed>) = 0 [pid 7464] <... mmap resumed>) = 0x7f943d000000 [pid 5076] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... umount2 resumed>) = 0 [pid 7462] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7462] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./391/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./391/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./391/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 7462] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] newfstatat(4, "", [pid 7462] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7462] close(4 [pid 5076] getdents64(4, [pid 7461] munmap(0x7f943d000000, 138412032 [pid 5073] <... ioctl resumed>) = 0 [pid 7464] <... write resumed>) = 524288 [pid 7461] <... munmap resumed>) = 0 [pid 7461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7461] close(4 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./391/file1" [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7461] <... close resumed>) = 0 [pid 7462] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7465 [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./391"./strace-static-x86_64: Process 7465 attached [pid 7464] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 7464] <... munmap resumed>) = 0 [pid 5076] mkdir("./392", 0777) = 0 [pid 7465] set_robust_list(0x555583d53660, 24 [pid 7462] exit_group(0 [pid 7465] <... set_robust_list resumed>) = 0 [pid 7464] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7462] <... exit_group resumed>) = ? [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7462] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD) = 0 [pid 5076] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7462, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7465] chdir("./396" [pid 7464] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 7465] <... chdir resumed>) = 0 [pid 7464] ioctl(4, LOOP_SET_FD, 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./395", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 7466 attached [pid 7466] set_robust_list(0x555583d53660, 24 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7466] <... set_robust_list resumed>) = 0 [pid 7465] setpgid(0, 0 [pid 7466] chdir("./392" [pid 7465] <... setpgid resumed>) = 0 [pid 7465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7466] <... chdir resumed>) = 0 [pid 7465] write(3, "1000", 4) = 4 [pid 5074] <... openat resumed>) = 3 [pid 7465] close(3) = 0 [pid 7465] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7465] memfd_create("syzkaller", 0 [pid 7466] <... prctl resumed>) = 0 [pid 7465] <... memfd_create resumed>) = 3 [pid 7466] setpgid(0, 0 [pid 7465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7466] <... setpgid resumed>) = 0 [pid 7465] <... mmap resumed>) = 0x7f943d000000 [pid 7466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7461] exit_group(0 [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7466 [pid 5074] newfstatat(3, "", [pid 5072] <... ioctl resumed>) = 0 [pid 7466] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 7461] <... exit_group resumed>) = ? [pid 5072] close(3 [pid 7466] write(3, "1000", 4) = 4 [pid 7461] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] <... close resumed>) = 0 [pid 7466] close(3 [pid 5074] umount2("./395/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7466] <... close resumed>) = 0 [pid 7466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7466] memfd_create("syzkaller", 0) = 3 [pid 7466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 ./strace-static-x86_64: Process 7467 attached [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7461, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5074] newfstatat(AT_FDCWD, "./395/binderfs", [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 7467] set_robust_list(0x555583d53660, 24 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7467 [pid 7467] <... set_robust_list resumed>) = 0 [pid 7466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 7467] chdir("./396" [pid 7465] <... write resumed>) = 524288 [pid 5074] unlink("./395/binderfs" [pid 7467] <... chdir resumed>) = 0 [pid 7467] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7464] <... ioctl resumed>) = 0 [pid 5071] umount2("./394", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7467] <... prctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7467] setpgid(0, 0 [pid 7466] <... write resumed>) = 524288 [pid 7464] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7467] <... setpgid resumed>) = 0 [pid 7464] <... close resumed>) = 0 [pid 7464] close(4) = 0 [pid 7464] mkdir("./file1", 0777 [pid 5071] <... openat resumed>) = 3 [pid 7467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7464] <... mkdir resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 7467] <... openat resumed>) = 3 [pid 7467] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 285.677483][ T7464] loop4: detected capacity change from 0 to 1024 [pid 7464] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7467] <... write resumed>) = 4 [pid 5074] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 7467] close(3 [pid 7465] munmap(0x7f943d000000, 138412032 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7467] <... close resumed>) = 0 [pid 5071] umount2("./394/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7467] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7467] <... symlink resumed>) = 0 [pid 7466] munmap(0x7f943d000000, 138412032 [pid 7465] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./394/binderfs", [pid 7466] <... munmap resumed>) = 0 [pid 7465] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7466] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7465] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7467] memfd_create("syzkaller", 0 [pid 7466] <... openat resumed>) = 4 [pid 7465] ioctl(4, LOOP_SET_FD, 3 [pid 5071] unlink("./394/binderfs" [pid 7466] ioctl(4, LOOP_SET_FD, 3 [pid 7467] <... memfd_create resumed>) = 3 [pid 5074] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 7467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7467] <... mmap resumed>) = 0x7f943d000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./395/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./395/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7464] <... mount resumed>) = 0 [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./395/file1") = 0 [pid 7464] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] getdents64(3, [pid 5071] <... umount2 resumed>) = 0 [pid 7464] <... openat resumed>) = 3 [pid 7464] chdir("./file1" [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7464] <... chdir resumed>) = 0 [pid 5074] close(3 [pid 7464] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5071] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7464] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] rmdir("./395" [pid 7464] truncate("./file1", 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7466] <... ioctl resumed>) = 0 [pid 5074] mkdir("./396", 0777 [pid 5071] newfstatat(AT_FDCWD, "./394/file1", [pid 7466] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 7466] <... close resumed>) = 0 [pid 7465] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7466] close(4 [pid 7465] close(3 [pid 5074] <... openat resumed>) = 3 [pid 7466] <... close resumed>) = 0 [pid 7465] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7466] mkdir("./file1", 0777 [pid 7465] close(4 [pid 5074] <... ioctl resumed>) = 0 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./394/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7465] <... close resumed>) = 0 [pid 7466] <... mkdir resumed>) = 0 [pid 7465] mkdir("./file1", 0777 [pid 5071] getdents64(4, [pid 7465] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] close(4./strace-static-x86_64: Process 7468 attached [pid 7466] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7465] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7464] <... truncate resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7468 [pid 5071] <... close resumed>) = 0 [pid 7464] memfd_create("syzkaller", 0) = 4 [pid 5071] rmdir("./394/file1" [pid 7464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7468] set_robust_list(0x555583d53660, 24) = 0 [pid 7464] <... mmap resumed>) = 0x7f943d000000 [pid 5071] <... rmdir resumed>) = 0 [pid 7468] chdir("./396" [pid 5071] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 7468] <... chdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 7468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7468] setpgid(0, 0 [pid 7467] <... write resumed>) = 524288 [pid 7464] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] rmdir("./394") = 0 [pid 7468] <... setpgid resumed>) = 0 [pid 7467] munmap(0x7f943d000000, 138412032 [pid 5071] mkdir("./395", 0777 [pid 7468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7468] write(3, "1000", 4) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 7468] close(3 [pid 7466] <... mount resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7467] <... munmap resumed>) = 0 [ 285.743646][ T7465] loop2: detected capacity change from 0 to 1024 [ 285.750596][ T7466] loop5: detected capacity change from 0 to 1024 [pid 7468] <... close resumed>) = 0 [pid 7467] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7466] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 7468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7466] <... openat resumed>) = 3 [pid 7466] chdir("./file1") = 0 [pid 7468] memfd_create("syzkaller", 0 [pid 7466] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7468] <... memfd_create resumed>) = 3 [pid 7466] truncate("./file1", 0 [pid 7468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7464] <... write resumed>) = 524288 [pid 7468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7464] munmap(0x7f943d000000, 138412032) = 0 [pid 7467] <... openat resumed>) = 4 [pid 7466] <... truncate resumed>) = 0 [pid 7465] <... mount resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7468] <... write resumed>) = 524288 [pid 7466] memfd_create("syzkaller", 0 [pid 7465] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7467] ioctl(4, LOOP_SET_FD, 3 [pid 7466] <... memfd_create resumed>) = 4 [pid 7465] <... openat resumed>) = 3 [pid 7466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7465] chdir("./file1" [pid 7466] <... mmap resumed>) = 0x7f943d000000 [pid 7465] <... chdir resumed>) = 0 [pid 7466] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7465] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7468] munmap(0x7f943d000000, 138412032 [pid 7465] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7468] <... munmap resumed>) = 0 [pid 7465] truncate("./file1", 0 [pid 7464] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7464] close(4) = 0 [pid 7468] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 7467] <... ioctl resumed>) = 0 [pid 7466] <... write resumed>) = 524288 [pid 7465] <... truncate resumed>) = 0 [pid 7468] ioctl(4, LOOP_SET_FD, 3 [pid 7465] memfd_create("syzkaller", 0 [pid 7467] close(3 [pid 7465] <... memfd_create resumed>) = 4 [pid 7467] <... close resumed>) = 0 [pid 7467] close(4 [pid 7465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7464] exit_group(0 [pid 7467] <... close resumed>) = 0 [pid 7466] munmap(0x7f943d000000, 138412032 [pid 7465] <... mmap resumed>) = 0x7f943d000000 [pid 7465] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7466] <... munmap resumed>) = 0 [pid 7466] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7467] mkdir("./file1", 0777 [pid 7466] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7468] <... ioctl resumed>) = 0 [pid 7467] <... mkdir resumed>) = 0 [pid 7466] close(4 [pid 7464] <... exit_group resumed>) = ? [pid 7465] <... write resumed>) = 524288 [pid 7468] close(3) = 0 [pid 7468] close(4) = 0 [pid 7468] mkdir("./file1", 0777) = 0 [pid 7467] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7464] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7464, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5075] umount2("./394", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7468] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... openat resumed>) = 3 [pid 7468] <... mount resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 7468] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7465] munmap(0x7f943d000000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7468] <... openat resumed>) = 3 [ 285.828729][ T7467] loop1: detected capacity change from 0 to 1024 [ 285.843164][ T7468] loop3: detected capacity change from 0 to 1024 [pid 7467] <... mount resumed>) = 0 [pid 7466] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 7468] chdir("./file1" [pid 7465] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... ioctl resumed>) = 0 [pid 5075] umount2("./394/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7468] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7468] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./394/binderfs", [pid 7468] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7465] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7468] truncate("./file1", 0 [pid 7465] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] unlink("./394/binderfs" [pid 7467] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... unlink resumed>) = 0 [pid 5071] close(3 [pid 7467] <... openat resumed>) = 3 [pid 7466] exit_group(0 [pid 7465] close(4 [pid 5075] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 7467] chdir("./file1" [pid 7465] <... close resumed>) = 0 [pid 7466] <... exit_group resumed>) = ? [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7469 attached [pid 7467] <... chdir resumed>) = 0 [pid 7466] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7469 [pid 7469] set_robust_list(0x555583d53660, 24 [pid 7468] <... truncate resumed>) = 0 [pid 7467] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7465] exit_group(0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7466, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7465] <... exit_group resumed>) = ? [pid 5075] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7467] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7465] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7469] <... set_robust_list resumed>) = 0 [pid 7468] memfd_create("syzkaller", 0 [pid 5076] umount2("./392", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./394/file1", [pid 7469] chdir("./395" [pid 7468] <... memfd_create resumed>) = 4 [pid 7467] truncate("./file1", 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7465, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 7469] <... chdir resumed>) = 0 [pid 7468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] openat(AT_FDCWD, "./392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7468] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 3 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 7469] <... prctl resumed>) = 0 [pid 7468] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... restart_syscall resumed>) = 0 [pid 7469] setpgid(0, 0 [pid 5076] newfstatat(3, "", [pid 5075] openat(AT_FDCWD, "./394/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7469] <... setpgid resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] umount2("./396", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7467] <... truncate resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] newfstatat(4, "", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7469] <... openat resumed>) = 3 [pid 7467] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7469] write(3, "1000", 4 [pid 7467] <... memfd_create resumed>) = 4 [pid 5076] umount2("./392/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7469] <... write resumed>) = 4 [pid 7467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7469] close(3 [pid 5076] newfstatat(AT_FDCWD, "./392/binderfs", [pid 5073] <... openat resumed>) = 3 [pid 7469] <... close resumed>) = 0 [pid 7467] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7469] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(4, [pid 5073] newfstatat(3, "", [pid 5076] unlink("./392/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 7468] <... write resumed>) = 524288 [pid 7469] <... symlink resumed>) = 0 [pid 7467] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7469] memfd_create("syzkaller", 0 [pid 7468] munmap(0x7f943d000000, 138412032 [pid 5076] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 7469] <... memfd_create resumed>) = 3 [pid 7468] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./396/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] close(4 [pid 7469] <... mmap resumed>) = 0x7f943d000000 [pid 5075] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] rmdir("./394/file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7468] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7467] <... write resumed>) = 524288 [pid 5076] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5073] newfstatat(AT_FDCWD, "./396/binderfs", [pid 5076] newfstatat(AT_FDCWD, "./392/file1", [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5076] umount2("./392/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./394" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7468] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7467] munmap(0x7f943d000000, 138412032 [pid 5076] openat(AT_FDCWD, "./392/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5073] unlink("./396/binderfs" [pid 5076] <... openat resumed>) = 4 [pid 5075] mkdir("./395", 0777 [pid 5076] newfstatat(4, "", [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 7468] close(4 [pid 7467] <... munmap resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 7469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7468] <... close resumed>) = 0 [pid 7467] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7468] exit_group(0) = ? [pid 7467] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7467] close(4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7468] +++ exited with 0 +++ [pid 5076] close(4 [pid 5073] <... umount2 resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7468, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5076] <... close resumed>) = 0 [pid 7469] <... write resumed>) = 524288 [pid 7467] <... close resumed>) = 0 [pid 5076] rmdir("./392/file1" [pid 5073] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7469] munmap(0x7f943d000000, 138412032 [pid 5074] umount2("./396", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7469] <... munmap resumed>) = 0 [pid 7467] exit_group(0 [pid 5074] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 7469] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] newfstatat(3, "", [pid 7469] <... openat resumed>) = 4 [pid 7467] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7469] ioctl(4, LOOP_SET_FD, 3 [pid 5076] getdents64(3, [pid 5074] getdents64(3, [pid 5073] newfstatat(AT_FDCWD, "./396/file1", [pid 7467] +++ exited with 0 +++ [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./392") = 0 [pid 5076] mkdir("./393", 0777 [pid 7469] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7469] close(3 [pid 5074] umount2("./396/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7467, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 7469] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7469] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 7469] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] newfstatat(AT_FDCWD, "./396/binderfs", [pid 5073] openat(AT_FDCWD, "./396/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... restart_syscall resumed>) = 0 [pid 7469] mkdir("./file1", 0777 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 4 [pid 7469] <... mkdir resumed>) = 0 [pid 5074] unlink("./396/binderfs" [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] umount2("./396", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7469] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5073] close(4 [pid 5072] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./396/file1" [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./396/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./396/binderfs", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] unlink("./396/binderfs" [pid 5073] close(3 [pid 5072] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7469] <... mount resumed>) = 0 [pid 5073] rmdir("./396" [pid 7469] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... rmdir resumed>) = 0 [pid 7469] <... openat resumed>) = 3 [pid 7469] chdir("./file1") = 0 [pid 5073] mkdir("./397", 0777 [pid 7469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7469] truncate("./file1", 0 [pid 5074] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./396/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] openat(AT_FDCWD, "./396/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 7469] <... truncate resumed>) = 0 [pid 5075] close(3 [pid 5074] <... openat resumed>) = 4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 7469] memfd_create("syzkaller", 0 [pid 5074] newfstatat(4, "", [pid 7469] <... memfd_create resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] <... umount2 resumed>) = 0 [ 285.997183][ T7469] loop0: detected capacity change from 0 to 1024 [pid 7469] <... mmap resumed>) = 0x7f943d000000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, 0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(4 [pid 5072] newfstatat(AT_FDCWD, "./396/file1", [pid 5074] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7470 [pid 5074] rmdir("./396/file1" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 7470 attached [pid 7470] set_robust_list(0x555583d53660, 24 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 7470] <... set_robust_list resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] openat(AT_FDCWD, "./396/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] close(3 [pid 7470] chdir("./395" [pid 7469] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5074] rmdir("./396" [pid 5072] newfstatat(4, "", [pid 7470] <... chdir resumed>) = 0 [pid 7470] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] mkdir("./397", 0777 [pid 5072] getdents64(4, [pid 7470] <... prctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7470] setpgid(0, 0) = 0 [pid 5072] getdents64(4, [pid 7470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7470] <... openat resumed>) = 3 [pid 5076] <... ioctl resumed>) = 0 [pid 7470] write(3, "1000", 4 [pid 5072] close(4 [pid 7469] <... write resumed>) = 524288 [pid 5076] close(3 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] rmdir("./396/file1" [pid 7470] <... write resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 7470] close(3 [pid 7469] munmap(0x7f943d000000, 138412032 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 7471 attached [pid 7470] <... close resumed>) = 0 [pid 5073] close(3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7470] symlink("/dev/binderfs", "./binderfs" [pid 7469] <... munmap resumed>) = 0 [pid 7471] set_robust_list(0x555583d53660, 24 [pid 7470] <... symlink resumed>) = 0 [pid 7469] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7471 [pid 5073] <... close resumed>) = 0 [pid 5072] close(3 [pid 7471] <... set_robust_list resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 7470] memfd_create("syzkaller", 0 [pid 5072] rmdir("./396" [pid 7470] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 7472 attached [pid 7471] chdir("./393" [pid 7469] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... rmdir resumed>) = 0 [pid 7471] <... chdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7472 [pid 7470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7469] close(4 [pid 7472] set_robust_list(0x555583d53660, 24 [pid 7471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7470] <... mmap resumed>) = 0x7f943d000000 [pid 5072] mkdir("./397", 0777 [pid 7471] <... prctl resumed>) = 0 [pid 7472] <... set_robust_list resumed>) = 0 [pid 7471] setpgid(0, 0) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7472] chdir("./397" [pid 7471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7472] <... chdir resumed>) = 0 [pid 7472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7471] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7472] <... prctl resumed>) = 0 [pid 7470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... openat resumed>) = 3 [pid 7472] setpgid(0, 0 [pid 7471] write(3, "1000", 4 [pid 7472] <... setpgid resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 7472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7471] <... write resumed>) = 4 [pid 7471] close(3 [pid 7469] <... close resumed>) = 0 [pid 7471] <... close resumed>) = 0 [pid 7472] <... openat resumed>) = 3 [pid 7471] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7472] write(3, "1000", 4) = 4 [pid 7472] close(3) = 0 [pid 7472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7471] memfd_create("syzkaller", 0 [pid 7470] <... write resumed>) = 524288 [pid 7469] exit_group(0 [pid 7470] munmap(0x7f943d000000, 138412032 [pid 7469] <... exit_group resumed>) = ? [pid 7471] <... memfd_create resumed>) = 3 [pid 7471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7469] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7469, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5071] umount2("./395", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7472] memfd_create("syzkaller", 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 7470] <... munmap resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7472] <... memfd_create resumed>) = 3 [pid 5071] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] umount2("./395/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./395/binderfs", [pid 7472] <... mmap resumed>) = 0x7f943d000000 [pid 7470] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7470] <... openat resumed>) = 4 [pid 5071] unlink("./395/binderfs") = 0 [pid 7470] ioctl(4, LOOP_SET_FD, 3 [pid 5071] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7470] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] close(3) = 0 [pid 7470] close(3 [pid 5071] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7470] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./395/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7470] close(4) = 0 [pid 5071] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7470] mkdir("./file1", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(3./strace-static-x86_64: Process 7473 attached [pid 7470] <... mkdir resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7473 [pid 5072] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./395/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7473] set_robust_list(0x555583d53660, 24 [pid 7472] <... write resumed>) = 524288 [pid 7470] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 4 [pid 7473] <... set_robust_list resumed>) = 0 [pid 7471] <... write resumed>) = 524288 [pid 7472] munmap(0x7f943d000000, 138412032./strace-static-x86_64: Process 7474 attached [pid 7473] chdir("./397" [pid 7471] munmap(0x7f943d000000, 138412032 [pid 5071] newfstatat(4, "", [pid 7474] set_robust_list(0x555583d53660, 24 [pid 7473] <... chdir resumed>) = 0 [pid 7472] <... munmap resumed>) = 0 [pid 7471] <... munmap resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7474] <... set_robust_list resumed>) = 0 [pid 7473] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7474] chdir("./397" [pid 7473] <... prctl resumed>) = 0 [pid 5071] getdents64(4, [pid 7471] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7473] setpgid(0, 0 [pid 7472] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7471] <... openat resumed>) = 4 [pid 5071] getdents64(4, [pid 7474] <... chdir resumed>) = 0 [pid 7473] <... setpgid resumed>) = 0 [pid 7470] <... mount resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7474 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7472] <... openat resumed>) = 4 [pid 7471] ioctl(4, LOOP_SET_FD, 3 [ 286.140649][ T7470] loop4: detected capacity change from 0 to 1024 [pid 7470] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] close(4 [pid 7474] <... prctl resumed>) = 0 [pid 7473] <... openat resumed>) = 3 [pid 7470] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./395/file1" [pid 7472] ioctl(4, LOOP_SET_FD, 3 [pid 7470] chdir("./file1" [pid 7474] setpgid(0, 0 [pid 7473] write(3, "1000", 4 [pid 7472] <... ioctl resumed>) = 0 [pid 7471] <... ioctl resumed>) = 0 [pid 7470] <... chdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 7474] <... setpgid resumed>) = 0 [pid 7473] <... write resumed>) = 4 [pid 7471] close(3 [pid 5071] getdents64(3, [pid 7474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7473] close(3 [pid 7472] close(3 [pid 7471] <... close resumed>) = 0 [pid 7470] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7474] <... openat resumed>) = 3 [pid 7472] <... close resumed>) = 0 [pid 7470] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7473] <... close resumed>) = 0 [pid 7474] write(3, "1000", 4 [pid 7472] close(4 [pid 7471] close(4 [pid 7470] truncate("./file1", 0 [pid 7473] symlink("/dev/binderfs", "./binderfs" [pid 7474] <... write resumed>) = 4 [pid 7472] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7472] mkdir("./file1", 0777) = 0 [pid 7472] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7473] <... symlink resumed>) = 0 [pid 7474] close(3 [pid 7471] <... close resumed>) = 0 [pid 7473] memfd_create("syzkaller", 0 [pid 7471] mkdir("./file1", 0777 [pid 7474] <... close resumed>) = 0 [pid 5071] close(3 [pid 7473] <... memfd_create resumed>) = 3 [pid 7471] <... mkdir resumed>) = 0 [pid 7473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... close resumed>) = 0 [pid 7473] <... mmap resumed>) = 0x7f943d000000 [pid 7474] symlink("/dev/binderfs", "./binderfs" [pid 5071] rmdir("./395" [pid 7473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7471] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7470] <... truncate resumed>) = 0 [pid 7470] memfd_create("syzkaller", 0) = 4 [pid 7470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7470] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./396", 0777 [pid 7474] <... symlink resumed>) = 0 [pid 7472] <... mount resumed>) = 0 [pid 7471] <... mount resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7472] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7474] memfd_create("syzkaller", 0 [pid 7472] <... openat resumed>) = 3 [pid 7471] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 7474] <... memfd_create resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7472] chdir("./file1" [pid 7471] <... openat resumed>) = 3 [pid 7474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7472] <... chdir resumed>) = 0 [pid 7471] chdir("./file1" [pid 7472] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7474] <... mmap resumed>) = 0x7f943d000000 [pid 7472] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7471] <... chdir resumed>) = 0 [pid 7472] truncate("./file1", 0 [pid 7471] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7473] <... write resumed>) = 524288 [pid 7471] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7473] munmap(0x7f943d000000, 138412032 [pid 7471] truncate("./file1", 0 [pid 7473] <... munmap resumed>) = 0 [pid 7472] <... truncate resumed>) = 0 [pid 7474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7473] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7472] memfd_create("syzkaller", 0 [pid 7470] <... write resumed>) = 524288 [pid 7471] <... truncate resumed>) = 0 [pid 7471] memfd_create("syzkaller", 0 [pid 7473] <... openat resumed>) = 4 [pid 7473] ioctl(4, LOOP_SET_FD, 3 [pid 7472] <... memfd_create resumed>) = 4 [pid 7471] <... memfd_create resumed>) = 4 [ 286.199041][ T7471] loop5: detected capacity change from 0 to 1024 [ 286.206605][ T7472] loop2: detected capacity change from 0 to 1024 [pid 7472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7472] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7470] munmap(0x7f943d000000, 138412032) = 0 [pid 7470] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7470] close(4 [pid 7471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7470] <... close resumed>) = 0 [pid 7472] <... write resumed>) = 524288 [pid 7474] <... write resumed>) = 524288 [pid 7473] <... ioctl resumed>) = 0 [pid 7471] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7470] exit_group(0 [pid 7473] close(3 [pid 5071] <... ioctl resumed>) = 0 [pid 7472] munmap(0x7f943d000000, 138412032 [pid 7470] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 7472] <... munmap resumed>) = 0 [pid 7470] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 7473] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7473] close(4 [pid 7472] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7470, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7472] close(4 [pid 5075] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 7475 attached [pid 7474] munmap(0x7f943d000000, 138412032 [pid 7473] <... close resumed>) = 0 [pid 7472] <... close resumed>) = 0 [pid 7471] <... write resumed>) = 524288 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./395", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7473] mkdir("./file1", 0777 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7475 [pid 5075] newfstatat(3, "", [pid 7474] <... munmap resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7475] set_robust_list(0x555583d53660, 24 [pid 7474] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7473] <... mkdir resumed>) = 0 [pid 7471] munmap(0x7f943d000000, 138412032 [pid 5075] getdents64(3, [pid 7475] <... set_robust_list resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7471] <... munmap resumed>) = 0 [pid 5075] umount2("./395/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7475] chdir("./396" [pid 7474] <... openat resumed>) = 4 [pid 7473] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7475] <... chdir resumed>) = 0 [pid 7475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7474] ioctl(4, LOOP_SET_FD, 3 [pid 7471] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7475] <... prctl resumed>) = 0 [ 286.258436][ T7473] loop3: detected capacity change from 0 to 1024 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./395/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./395/binderfs") = 0 [pid 5075] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7472] exit_group(0) = ? [pid 7475] setpgid(0, 0 [pid 7471] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7475] <... setpgid resumed>) = 0 [pid 7475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7471] close(4 [pid 5075] <... umount2 resumed>) = 0 [pid 7472] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7472, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5073] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5073] umount2("./397", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 7475] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7475] write(3, "1000", 4 [pid 5075] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 7475] <... write resumed>) = 4 [pid 7474] <... ioctl resumed>) = 0 [pid 7471] <... close resumed>) = 0 [pid 7475] close(3) = 0 [pid 7475] symlink("/dev/binderfs", "./binderfs" [pid 7474] close(3 [pid 7471] exit_group(0 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7475] <... symlink resumed>) = 0 [pid 7474] <... close resumed>) = 0 [pid 7471] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./397/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./395/file1", [pid 7475] memfd_create("syzkaller", 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./395/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./397/binderfs", [pid 7475] <... memfd_create resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7474] close(4 [pid 5075] openat(AT_FDCWD, "./395/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] unlink("./397/binderfs" [pid 7475] <... mmap resumed>) = 0x7f943d000000 [pid 7474] <... close resumed>) = 0 [pid 7471] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 4 [pid 5073] <... unlink resumed>) = 0 [pid 7475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7474] mkdir("./file1", 0777 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7471, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5073] umount2("./397/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./393", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7474] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", [pid 7474] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5075] newfstatat(4, "", [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5076] umount2("./393/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 7473] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7473] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(AT_FDCWD, "./393/binderfs", [pid 5075] getdents64(4, [pid 7473] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7473] chdir("./file1" [pid 5076] unlink("./393/binderfs" [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7473] <... chdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] close(4) = 0 [pid 5073] umount2("./397/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] rmdir("./395/file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7475] <... write resumed>) = 524288 [pid 7473] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./397/file1", [pid 5075] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./397/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./397/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./395" [pid 5073] <... openat resumed>) = 4 [pid 7475] munmap(0x7f943d000000, 138412032 [pid 7473] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... rmdir resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 7473] truncate("./file1", 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 7475] <... munmap resumed>) = 0 [pid 5075] mkdir("./396", 0777 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7475] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7474] <... mount resumed>) = 0 [pid 7473] <... truncate resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] close(4 [pid 7474] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7475] <... openat resumed>) = 4 [pid 7473] memfd_create("syzkaller", 0 [pid 7475] ioctl(4, LOOP_SET_FD, 3 [pid 7474] <... openat resumed>) = 3 [pid 7473] <... memfd_create resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./397/file1" [pid 7473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] <... rmdir resumed>) = 0 [ 286.309051][ T7474] loop1: detected capacity change from 0 to 1024 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] getdents64(3, [pid 5075] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] close(3) = 0 [pid 5073] rmdir("./397") = 0 [pid 5076] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] mkdir("./398", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./393/file1", [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] umount2("./393/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./393/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7473] <... mmap resumed>) = 0x7f943d000000 [pid 5076] getdents64(4, [pid 7475] <... ioctl resumed>) = 0 [pid 7474] chdir("./file1" [pid 7473] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7474] <... chdir resumed>) = 0 [pid 7475] close(3 [pid 7474] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 7475] <... close resumed>) = 0 [pid 5076] close(4 [pid 7474] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7474] truncate("./file1", 0 [pid 5076] <... close resumed>) = 0 [pid 7475] close(4) = 0 [pid 5076] rmdir("./393/file1" [pid 7475] mkdir("./file1", 0777) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7475] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5076] getdents64(3, 0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 7474] <... truncate resumed>) = 0 [pid 5076] rmdir("./393" [pid 7474] memfd_create("syzkaller", 0 [pid 5076] <... rmdir resumed>) = 0 [pid 7474] <... memfd_create resumed>) = 4 [pid 5076] mkdir("./394", 0777) = 0 [pid 7475] <... mount resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 7474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7475] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7474] <... mmap resumed>) = 0x7f943d000000 [pid 7473] <... write resumed>) = 524288 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... ioctl resumed>) = 0 [pid 7475] <... openat resumed>) = 3 [pid 7475] chdir("./file1") = 0 [pid 7475] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7474] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7475] truncate("./file1", 0 [pid 5075] close(3 [pid 7473] munmap(0x7f943d000000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555583d53650) = 7476 ./strace-static-x86_64: Process 7476 attached [ 286.368843][ T7475] loop0: detected capacity change from 0 to 1024 [pid 7476] set_robust_list(0x555583d53660, 24 [pid 7473] <... munmap resumed>) = 0 [pid 7476] <... set_robust_list resumed>) = 0 [pid 7476] chdir("./396" [pid 7475] <... truncate resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 7475] memfd_create("syzkaller", 0) = 4 [pid 7475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7473] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7476] <... chdir resumed>) = 0 [pid 7475] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 7477 attached [pid 7476] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7477] set_robust_list(0x555583d53660, 24 [pid 7476] <... prctl resumed>) = 0 [pid 7477] <... set_robust_list resumed>) = 0 [pid 7473] close(4 [pid 7476] setpgid(0, 0) = 0 [pid 7476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7477] chdir("./398" [pid 7476] write(3, "1000", 4 [pid 7477] <... chdir resumed>) = 0 [pid 7476] <... write resumed>) = 4 [pid 7477] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7476] close(3) = 0 [pid 7477] <... prctl resumed>) = 0 [pid 7476] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7477] setpgid(0, 0 [pid 7476] memfd_create("syzkaller", 0) = 3 [pid 7476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7477] <... setpgid resumed>) = 0 [pid 7476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7475] <... write resumed>) = 524288 [pid 7474] <... write resumed>) = 524288 [pid 7473] <... close resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x555583d53650) = 7477 [pid 7477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7475] munmap(0x7f943d000000, 138412032 [pid 7477] <... openat resumed>) = 3 [pid 7477] write(3, "1000", 4 [pid 7475] <... munmap resumed>) = 0 [pid 7474] munmap(0x7f943d000000, 138412032 [pid 7473] exit_group(0 [pid 7477] <... write resumed>) = 4 [pid 7477] close(3) = 0 [pid 7477] symlink("/dev/binderfs", "./binderfs" [pid 7473] <... exit_group resumed>) = ? [pid 7477] <... symlink resumed>) = 0 [pid 7475] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 7477] memfd_create("syzkaller", 0 [pid 7475] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7477] <... memfd_create resumed>) = 3 [pid 7475] close(4 [pid 7476] <... write resumed>) = 524288 [pid 7474] <... munmap resumed>) = 0 [pid 7477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7474] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7473] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 7477] <... mmap resumed>) = 0x7f943d000000 [pid 7476] munmap(0x7f943d000000, 138412032 [pid 7475] <... close resumed>) = 0 [pid 7474] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7473, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 7474] close(4 [pid 7476] <... munmap resumed>) = 0 [pid 7475] exit_group(0 [pid 5076] close(3 [pid 7476] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7475] <... exit_group resumed>) = ? [pid 5076] <... close resumed>) = 0 [pid 7476] <... openat resumed>) = 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./397", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7476] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 7478 attached [pid 7477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7474] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7478] set_robust_list(0x555583d53660, 24) = 0 [pid 7478] chdir("./394" [pid 7475] +++ exited with 0 +++ [pid 5076] <... clone resumed>, child_tidptr=0x555583d53650) = 7478 [pid 5074] <... openat resumed>) = 3 [pid 7478] <... chdir resumed>) = 0 [pid 7474] exit_group(0 [pid 7478] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7474] <... exit_group resumed>) = ? [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7475, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 7478] <... prctl resumed>) = 0 [pid 7478] setpgid(0, 0 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./396", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7478] <... setpgid resumed>) = 0 [pid 5074] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7474] +++ exited with 0 +++ [pid 7477] <... write resumed>) = 524288 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7478] <... openat resumed>) = 3 [pid 7477] munmap(0x7f943d000000, 138412032 [pid 7476] <... ioctl resumed>) = 0 [pid 5074] umount2("./397/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7474, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 7478] write(3, "1000", 4 [pid 7476] close(3 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... openat resumed>) = 3 [pid 5072] <... restart_syscall resumed>) = 0 [pid 7476] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 7478] <... write resumed>) = 4 [pid 7477] <... munmap resumed>) = 0 [pid 7476] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7478] close(3 [pid 5074] newfstatat(AT_FDCWD, "./397/binderfs", [pid 7478] <... close resumed>) = 0 [pid 7477] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7476] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./397", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 7478] symlink("/dev/binderfs", "./binderfs" [pid 7477] <... openat resumed>) = 4 [pid 7476] mkdir("./file1", 0777 [pid 5074] unlink("./397/binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7478] <... symlink resumed>) = 0 [pid 7477] ioctl(4, LOOP_SET_FD, 3 [pid 7476] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./396/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7478] memfd_create("syzkaller", 0 [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./397/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7478] <... memfd_create resumed>) = 3 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] newfstatat(3, "", [pid 5071] newfstatat(AT_FDCWD, "./396/binderfs", [pid 7478] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] getdents64(3, [pid 5071] unlink("./396/binderfs" [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5071] <... unlink resumed>) = 0 [pid 5072] umount2("./397/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./397/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./397/binderfs") = 0 [pid 5072] umount2("./397/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5074] umount2("./397/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5072] umount2("./397/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./397/file1", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./397/file1", [pid 7477] <... ioctl resumed>) = 0 [pid 7476] mount("/dev/loop4", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./397/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./397/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./396/file1", [pid 7478] <... write resumed>) = 524288 [pid 7477] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./397/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "./397/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7477] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7478] munmap(0x7f943d000000, 138412032 [pid 7477] close(4 [pid 7476] <... mount resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 4 [pid 5071] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7477] <... close resumed>) = 0 [pid 7476] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7477] mkdir("./file1", 0777 [pid 7476] <... openat resumed>) = 3 [pid 5074] newfstatat(4, "", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "./396/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7476] chdir("./file1" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5071] <... openat resumed>) = 4 [pid 7477] <... mkdir resumed>) = 0 [pid 7476] <... chdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5071] newfstatat(4, "", [pid 7477] mount("/dev/loop2", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7476] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7478] <... munmap resumed>) = 0 [pid 7476] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7478] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 286.496894][ T7476] loop4: detected capacity change from 0 to 1024 [ 286.531739][ T7477] loop2: detected capacity change from 0 to 1024 [pid 5071] getdents64(4, [pid 7478] ioctl(4, LOOP_SET_FD, 3 [pid 7476] truncate("./file1", 0 [pid 5072] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5072] close(4 [pid 5071] getdents64(4, [pid 5074] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5072] rmdir("./397/file1" [pid 5071] close(4 [pid 5074] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] rmdir("./397/file1") = 0 [pid 5071] rmdir("./396/file1") = 0 [pid 5074] getdents64(3, [pid 7478] <... ioctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 5071] getdents64(3, [pid 5074] close(3 [pid 5072] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5074] <... close resumed>) = 0 [pid 5072] close(3 [pid 5071] <... close resumed>) = 0 [pid 5074] rmdir("./397" [pid 5072] <... close resumed>) = 0 [pid 5071] rmdir("./396" [pid 5074] <... rmdir resumed>) = 0 [pid 5072] rmdir("./397" [pid 5071] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./398", 0777 [pid 7478] close(3) = 0 [pid 7478] close(4 [pid 5074] mkdir("./398", 0777 [pid 5071] mkdir("./397", 0777 [pid 7478] <... close resumed>) = 0 [pid 7476] <... truncate resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 7478] mkdir("./file1", 0777 [pid 7476] memfd_create("syzkaller", 0 [pid 5072] <... mkdir resumed>) = 0 [pid 7476] <... memfd_create resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 7476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 7476] <... mmap resumed>) = 0x7f943d000000 [pid 5072] <... openat resumed>) = 3 [pid 7476] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 7478] <... mkdir resumed>) = 0 [pid 7478] mount("/dev/loop5", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7476] <... write resumed>) = 524288 [pid 7477] <... mount resumed>) = 0 [pid 7476] munmap(0x7f943d000000, 138412032) = 0 [pid 7477] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7477] chdir("./file1") = 0 [pid 7477] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7478] <... mount resumed>) = 0 [pid 7477] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7478] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7476] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7478] <... openat resumed>) = 3 [pid 7477] truncate("./file1", 0 [pid 7476] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7478] chdir("./file1") = 0 [pid 7478] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7476] close(4 [pid 7478] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7478] truncate("./file1", 0) = 0 [pid 7476] <... close resumed>) = 0 [ 286.576686][ T7478] loop5: detected capacity change from 0 to 1024 [pid 7478] memfd_create("syzkaller", 0 [pid 7476] exit_group(0 [pid 7478] <... memfd_create resumed>) = 4 [pid 7477] <... truncate resumed>) = 0 [pid 7478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7477] memfd_create("syzkaller", 0) = 4 [pid 7477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7476] <... exit_group resumed>) = ? [pid 7478] <... mmap resumed>) = 0x7f943d000000 [pid 7477] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7478] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7476] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7476, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5075] umount2("./396", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", [pid 7478] <... write resumed>) = 524288 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7478] munmap(0x7f943d000000, 138412032 [pid 7477] <... write resumed>) = 524288 [pid 5075] getdents64(3, [pid 5074] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] close(3 [pid 5072] close(3) = 0 [pid 5071] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 7480 attached [pid 7478] <... munmap resumed>) = 0 [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] <... close resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x555583d53650) = 7479 [pid 7477] munmap(0x7f943d000000, 138412032) = 0 [pid 7477] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7477] close(4 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 7480] set_robust_list(0x555583d53660, 24 [pid 7478] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./396/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x555583d53650) = 7480 ./strace-static-x86_64: Process 7479 attached [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7479] set_robust_list(0x555583d53660, 24) = 0 [pid 7479] chdir("./398") = 0 [pid 7479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7479] setpgid(0, 0) = 0 [pid 7479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] newfstatat(AT_FDCWD, "./396/binderfs", [pid 7479] <... openat resumed>) = 3 [pid 7478] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7480] <... set_robust_list resumed>) = 0 [pid 7478] close(4 [pid 5075] unlink("./396/binderfs" [pid 5074] <... clone resumed>, child_tidptr=0x555583d53650) = 7481 ./strace-static-x86_64: Process 7481 attached [pid 7479] write(3, "1000", 4) = 4 [pid 7481] set_robust_list(0x555583d53660, 24 [pid 5075] <... unlink resumed>) = 0 [pid 7479] close(3) = 0 [pid 7481] <... set_robust_list resumed>) = 0 [pid 7479] symlink("/dev/binderfs", "./binderfs" [pid 7480] chdir("./397" [pid 7477] <... close resumed>) = 0 [pid 5075] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7481] chdir("./398" [pid 7479] <... symlink resumed>) = 0 [pid 7481] <... chdir resumed>) = 0 [pid 7481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 7481] setpgid(0, 0 [pid 7479] memfd_create("syzkaller", 0 [pid 7481] <... setpgid resumed>) = 0 [pid 7481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 7480] <... chdir resumed>) = 0 [pid 7479] <... memfd_create resumed>) = 3 [pid 7479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7477] exit_group(0) = ? [pid 7480] <... prctl resumed>) = 0 [pid 7478] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 7480] setpgid(0, 0 [pid 7481] write(3, "1000", 4) = 4 [pid 7478] exit_group(0 [pid 7481] close(3) = 0 [pid 7481] symlink("/dev/binderfs", "./binderfs") = 0 [pid 7480] <... setpgid resumed>) = 0 [pid 7481] memfd_create("syzkaller", 0 [pid 7478] <... exit_group resumed>) = ? [pid 7480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7481] <... memfd_create resumed>) = 3 [pid 7480] <... openat resumed>) = 3 [pid 7479] <... write resumed>) = 524288 [pid 7478] +++ exited with 0 +++ [pid 7477] +++ exited with 0 +++ [pid 5075] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7477, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7478, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5075] newfstatat(AT_FDCWD, "./396/file1", [pid 7480] write(3, "1000", 4 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 7481] <... mmap resumed>) = 0x7f943d000000 [pid 7481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7480] <... write resumed>) = 4 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./398", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7480] close(3 [pid 5075] umount2("./396/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7481] <... write resumed>) = 524288 [pid 7480] <... close resumed>) = 0 [pid 7479] munmap(0x7f943d000000, 138412032 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7480] symlink("/dev/binderfs", "./binderfs" [pid 5076] umount2("./394", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./396/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 7480] <... symlink resumed>) = 0 [pid 7479] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5073] newfstatat(3, "", [pid 5075] newfstatat(4, "", [pid 5076] openat(AT_FDCWD, "./394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 7479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, [pid 7479] <... openat resumed>) = 4 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(3, [pid 7479] ioctl(4, LOOP_SET_FD, 3 [pid 7481] munmap(0x7f943d000000, 138412032 [pid 7480] memfd_create("syzkaller", 0 [pid 5076] newfstatat(3, "", [pid 5075] close(4 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 7481] <... munmap resumed>) = 0 [pid 7480] <... memfd_create resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./398/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] getdents64(3, [pid 5075] rmdir("./396/file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7480] <... mmap resumed>) = 0x7f943d000000 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./398/binderfs", [pid 7481] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 7480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7479] <... ioctl resumed>) = 0 [pid 5076] umount2("./394/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7481] <... openat resumed>) = 4 [pid 7479] close(3) = 0 [pid 5073] unlink("./398/binderfs" [pid 7481] ioctl(4, LOOP_SET_FD, 3 [pid 7479] close(4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7479] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./394/binderfs", [pid 5075] close(3 [pid 5073] <... unlink resumed>) = 0 [pid 7479] mkdir("./file1", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./398/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5076] unlink("./394/binderfs" [pid 5075] rmdir("./396" [pid 7479] <... mkdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5076] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5075] mkdir("./397", 0777 [pid 7479] mount("/dev/loop1", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] <... mkdir resumed>) = 0 [pid 7480] <... write resumed>) = 524288 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 7481] <... ioctl resumed>) = 0 [pid 7481] close(3) = 0 [pid 7481] close(4) = 0 [pid 7481] mkdir("./file1", 0777) = 0 [pid 7481] mount("/dev/loop3", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 7480] munmap(0x7f943d000000, 138412032) = 0 [pid 7481] <... mount resumed>) = 0 [pid 7479] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 7479] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 7479] chdir("./file1" [pid 7480] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 286.731173][ T7479] loop1: detected capacity change from 0 to 1024 [ 286.747782][ T7481] loop3: detected capacity change from 0 to 1024 [pid 7481] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7480] <... openat resumed>) = 4 [pid 7479] <... chdir resumed>) = 0 [pid 7481] <... openat resumed>) = 3 [pid 7480] ioctl(4, LOOP_SET_FD, 3 [pid 7479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./398/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7479] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 7479] truncate("./file1", 0 [pid 5076] newfstatat(AT_FDCWD, "./394/file1", [pid 5073] newfstatat(AT_FDCWD, "./398/file1", [pid 7481] chdir("./file1" [pid 7479] <... truncate resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7481] <... chdir resumed>) = 0 [pid 7481] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7481] truncate("./file1", 0) = 0 [pid 7479] memfd_create("syzkaller", 0 [pid 5076] umount2("./394/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5073] umount2("./398/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7481] memfd_create("syzkaller", 0) = 4 [pid 7481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 7481] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7479] <... memfd_create resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./394/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./398/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f943d000000 [pid 5076] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 4 [pid 7479] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(4, "", [pid 5075] <... ioctl resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7481] <... write resumed>) = 524288 [pid 7479] <... write resumed>) = 524288 [pid 5076] getdents64(4, [pid 5073] getdents64(4, [pid 7480] <... ioctl resumed>) = 0 [pid 7480] close(3) = 0 [pid 7480] close(4) = 0 [pid 7480] mkdir("./file1", 0777) = 0 [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 2 entries */, 32768) = 48 [pid 7480] mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "" [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(4, [pid 5073] getdents64(4, ./strace-static-x86_64: Process 7482 attached [pid 5076] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x555583d5c730 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5073] close(4 [pid 7482] set_robust_list(0x555583d53660, 24 [pid 5076] <... close resumed>) = 0 [pid 7482] <... set_robust_list resumed>) = 0 [pid 5076] rmdir("./394/file1" [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./398/file1" [pid 5075] <... clone resumed>, child_tidptr=0x555583d53650) = 7482 [pid 7481] munmap(0x7f943d000000, 138412032 [pid 7482] chdir("./397" [pid 7481] <... munmap resumed>) = 0 [pid 7479] munmap(0x7f943d000000, 138412032 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 7482] <... chdir resumed>) = 0 [ 286.781797][ T7480] loop0: detected capacity change from 0 to 1024 [pid 7482] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 7479] <... munmap resumed>) = 0 [pid 5076] getdents64(3, [pid 5073] getdents64(3, [pid 7482] <... prctl resumed>) = 0 [pid 7481] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 7482] setpgid(0, 0 [pid 7481] close(4 [pid 5073] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 7482] <... setpgid resumed>) = 0 [pid 5076] <... getdents64 resumed>0x555583d546f0 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 7482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 7481] <... close resumed>) = 0 [pid 7479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] close(3 [pid 5073] <... close resumed>) = 0 [pid 7482] <... openat resumed>) = 3 [pid 5073] rmdir("./398" [pid 5076] <... close resumed>) = 0 [pid 7481] exit_group(0) = ? [pid 5073] <... rmdir resumed>) = 0 [pid 5076] rmdir("./394" [pid 5073] mkdir("./399", 0777 [pid 7480] <... mount resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5076] mkdir("./395", 0777 [pid 7479] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 7482] write(3, "1000", 4 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 7482] <... write resumed>) = 4 [pid 7481] +++ exited with 0 +++ [pid 7480] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 7479] close(4 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 7482] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7481, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./398", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./398/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./398/binderfs", [pid 7480] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 7480] chdir("./file1" [pid 5074] unlink("./398/binderfs" [pid 7480] <... chdir resumed>) = 0 [pid 7479] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 7482] <... close resumed>) = 0 [pid 7480] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] umount2("./398/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7480] truncate("./file1", 0 [pid 7482] symlink("/dev/binderfs", "./binderfs" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 7482] <... symlink resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 7482] memfd_create("syzkaller", 0 [pid 7480] <... truncate resumed>) = 0 [pid 7482] <... memfd_create resumed>) = 3 [pid 7480] memfd_create("syzkaller", 0 [pid 7482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7480] <... memfd_create resumed>) = 4 [pid 7482] <... mmap resumed>) = 0x7f943d000000 [pid 7480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 7482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 7480] <... mmap resumed>) = 0x7f943d000000 [pid 7480] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 7479] exit_group(0 [pid 7482] <... write resumed>) = 524288 [pid 7480] <... write resumed>) = 524288 [pid 5074] umount2("./398/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 7482] munmap(0x7f943d000000, 138412032 [pid 7480] munmap(0x7f943d000000, 138412032 [pid 7479] <... exit_group resumed>) = ? [pid 7482] <... munmap resumed>) = 0 [pid 7480] <... munmap resumed>) = 0 [pid 7479] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./398/file1", [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7479, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5072] umount2("./398", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 7482] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 7480] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] openat(AT_FDCWD, "./398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 7482] <... openat resumed>) = 4 [pid 7480] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 7482] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 7482] <... ioctl resumed>) = 0 [pid 7480] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] getdents64(3, 0x555583d546f0 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./398/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./398/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./398/binderfs") = 0 [pid 5072] umount2("./398/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5074] umount2("./398/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./398/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./398/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./398/file1", [pid 5074] newfstatat(4, "", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./398/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)