./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3874403531 <...> =-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... unlink resumed>) = 0 [pid 12057] <... bpf resumed>) = 3 [pid 12056] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12054] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12057] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12056] <... bpf resumed>) = 3 [pid 12055] <... bpf resumed>) = 3 [pid 5067] getdents64(3, [pid 12054] <... bpf resumed>) = 5 [pid 12057] <... bpf resumed>) = 4 [pid 12056] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12055] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12057] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12056] <... bpf resumed>) = 4 [pid 12054] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] close(3 [pid 12055] <... bpf resumed>) = 4 [pid 12056] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12055] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... close resumed>) = 0 [pid 12054] <... bpf resumed>) = 6 [pid 5067] rmdir("./1373" [pid 12057] <... bpf resumed>) = 5 [pid 12057] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12057] exit_group(0 [pid 12056] <... bpf resumed>) = 5 [pid 12055] <... bpf resumed>) = 5 [pid 12054] exit_group(0 [pid 5067] <... rmdir resumed>) = 0 [pid 12057] <... exit_group resumed>) = ? [pid 12056] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12055] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12054] <... exit_group resumed>) = ? [pid 5067] mkdir("./1374", 0777 [pid 12057] +++ exited with 0 +++ [pid 12056] <... bpf resumed>) = 6 [pid 12055] <... bpf resumed>) = 6 [pid 12056] exit_group(0) = ? [pid 12055] exit_group(0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12057, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... mkdir resumed>) = 0 [pid 12056] +++ exited with 0 +++ [pid 12055] <... exit_group resumed>) = ? [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12056, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12058 attached , child_tidptr=0x5555686ec650) = 12058 [pid 12058] set_robust_list(0x5555686ec660, 24 [pid 5066] umount2("./1351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12058] <... set_robust_list resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12058] chdir("./1374" [pid 5066] <... openat resumed>) = 3 [pid 12058] <... chdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] newfstatat(3, "", [pid 5066] newfstatat(3, "", [pid 12058] setpgid(0, 0) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12058] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12054] +++ exited with 0 +++ [pid 5066] umount2("./1351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12058] write(3, "1000", 4) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12058] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12054, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] newfstatat(AT_FDCWD, "./1351/binderfs", [pid 12058] <... close resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] umount2("./1392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12058] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12058] <... symlink resumed>) = 0 [pid 12055] +++ exited with 0 +++ [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1392/binderfs", [pid 5066] unlink("./1351/binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12058] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12055, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... unlink resumed>) = 0 [pid 5068] unlink("./1392/binderfs" [pid 5066] getdents64(3, [pid 12058] <... bpf resumed>) = 3 [pid 5071] umount2("./1428", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12058] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12058] <... bpf resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./1428", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 12058] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... openat resumed>) = 3 [pid 5068] close(3) = 0 [pid 5066] <... close resumed>) = 0 [pid 5069] umount2("./1415", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12058] <... bpf resumed>) = 5 [pid 5071] newfstatat(3, "", [pid 5068] rmdir("./1392" [pid 5066] rmdir("./1351" [pid 12058] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] openat(AT_FDCWD, "./1415", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12058] <... bpf resumed>) = 6 [pid 5069] <... openat resumed>) = 3 [pid 5066] mkdir("./1352", 0777 [pid 5071] getdents64(3, [pid 5069] newfstatat(3, "", [pid 5068] mkdir("./1393", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 12058] exit_group(0) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... mkdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./1428/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, ./strace-static-x86_64: Process 12060 attached ./strace-static-x86_64: Process 12059 attached [pid 12059] set_robust_list(0x5555686ec660, 24 [pid 12060] set_robust_list(0x5555686ec660, 24 [pid 12059] <... set_robust_list resumed>) = 0 [pid 12060] <... set_robust_list resumed>) = 0 [pid 12059] chdir("./1352" [pid 12058] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] newfstatat(AT_FDCWD, "./1428/binderfs", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12058, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12060] chdir("./1393" [pid 12059] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./1415/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12059 [pid 12060] <... chdir resumed>) = 0 [pid 12059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] unlink("./1428/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12060 [pid 12060] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12059] <... prctl resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1415/binderfs", [pid 5067] umount2("./1374", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12060] <... prctl resumed>) = 0 [pid 12059] setpgid(0, 0 [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12060] setpgid(0, 0 [pid 12059] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] unlink("./1415/binderfs" [pid 5067] openat(AT_FDCWD, "./1374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12060] <... setpgid resumed>) = 0 [pid 12059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] newfstatat(3, "", [pid 12059] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12059] write(3, "1000", 4 [pid 12060] <... openat resumed>) = 3 [pid 12059] <... write resumed>) = 4 [pid 5071] rmdir("./1428" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 12059] close(3) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] close(3 [pid 12060] write(3, "1000", 4 [pid 12059] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./1429", 0777 [pid 5069] <... close resumed>) = 0 [pid 5067] umount2("./1374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12060] <... write resumed>) = 4 [pid 5069] rmdir("./1415" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12060] close(3 [pid 12059] <... symlink resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12060] <... close resumed>) = 0 [pid 12059] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] mkdir("./1416", 0777 [pid 5067] newfstatat(AT_FDCWD, "./1374/binderfs", [pid 12060] symlink("/dev/binderfs", "./binderfs" [pid 12059] <... bpf resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12060] <... symlink resumed>) = 0 [pid 12059] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] unlink("./1374/binderfs" [pid 12060] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12059] <... bpf resumed>) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12061 attached [pid 12060] <... bpf resumed>) = 3 [pid 12061] set_robust_list(0x5555686ec660, 24 [pid 12060] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12061] <... set_robust_list resumed>) = 0 [pid 12060] <... bpf resumed>) = 4 [pid 12061] chdir("./1429" [pid 5067] getdents64(3, [pid 12059] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12061 ./strace-static-x86_64: Process 12062 attached [pid 12061] <... chdir resumed>) = 0 [pid 12060] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12060] <... bpf resumed>) = 5 [pid 12059] <... bpf resumed>) = 5 [pid 12062] set_robust_list(0x5555686ec660, 24 [pid 12061] <... prctl resumed>) = 0 [pid 5067] close(3 [pid 12062] <... set_robust_list resumed>) = 0 [pid 12061] setpgid(0, 0 [pid 12062] chdir("./1416" [pid 12061] <... setpgid resumed>) = 0 [pid 12061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12060] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... close resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12062 [pid 12062] <... chdir resumed>) = 0 [pid 12060] <... bpf resumed>) = 6 [pid 5067] rmdir("./1374" [pid 12062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12059] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12062] <... prctl resumed>) = 0 [pid 12060] exit_group(0 [pid 12059] <... bpf resumed>) = 6 [pid 12060] <... exit_group resumed>) = ? [pid 12062] setpgid(0, 0 [pid 12061] <... openat resumed>) = 3 [pid 12059] exit_group(0 [pid 5067] <... rmdir resumed>) = 0 [pid 12062] <... setpgid resumed>) = 0 [pid 12061] write(3, "1000", 4 [pid 12059] <... exit_group resumed>) = ? [pid 5067] mkdir("./1375", 0777 [pid 12062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12061] <... write resumed>) = 4 [pid 12062] <... openat resumed>) = 3 [pid 12062] write(3, "1000", 4 [pid 12061] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12061] <... close resumed>) = 0 [pid 12062] <... write resumed>) = 4 [pid 12062] close(3 [pid 12061] symlink("/dev/binderfs", "./binderfs" [pid 12062] <... close resumed>) = 0 [pid 12061] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12063 attached [pid 12063] set_robust_list(0x5555686ec660, 24 [pid 12062] symlink("/dev/binderfs", "./binderfs" [pid 12061] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12063 [pid 12063] <... set_robust_list resumed>) = 0 [pid 12062] <... symlink resumed>) = 0 [pid 12061] <... bpf resumed>) = 3 [pid 12063] chdir("./1375" [pid 12061] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12063] <... chdir resumed>) = 0 [pid 12062] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12061] <... bpf resumed>) = 4 [pid 12063] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12062] <... bpf resumed>) = 3 [pid 12062] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12061] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12063] <... prctl resumed>) = 0 [pid 12060] +++ exited with 0 +++ [pid 12059] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12060, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12063] setpgid(0, 0) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12059, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12062] <... bpf resumed>) = 4 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12062] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12061] <... bpf resumed>) = 5 [pid 12062] <... bpf resumed>) = 5 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12063] <... openat resumed>) = 3 [pid 12063] write(3, "1000", 4 [pid 12062] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12061] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12063] <... write resumed>) = 4 [pid 5068] umount2("./1393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12063] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12063] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12063] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12063] <... symlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12063] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12062] <... bpf resumed>) = 6 [pid 12061] <... bpf resumed>) = 6 [pid 12063] <... bpf resumed>) = 3 [pid 12062] exit_group(0 [pid 12061] exit_group(0 [pid 5068] umount2("./1393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12063] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12062] <... exit_group resumed>) = ? [pid 12061] <... exit_group resumed>) = ? [pid 12063] <... bpf resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12063] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12063] <... bpf resumed>) = 5 [pid 5068] newfstatat(AT_FDCWD, "./1393/binderfs", [pid 5066] unlink("./1352/binderfs") = 0 [pid 12063] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(3, [pid 5068] unlink("./1393/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] close(3) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1393" [pid 12062] +++ exited with 0 +++ [pid 12061] +++ exited with 0 +++ [pid 5066] rmdir("./1352" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12061, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12062, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5071] umount2("./1429", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1416", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./1394", 0777 [pid 5066] mkdir("./1353", 0777 [pid 5071] openat(AT_FDCWD, "./1429", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1416", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... mkdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 12063] <... bpf resumed>) = 6 [pid 5071] newfstatat(3, "", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12063] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] newfstatat(3, "", ./strace-static-x86_64: Process 12064 attached [pid 12063] <... exit_group resumed>) = ? [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12065 attached [pid 12064] set_robust_list(0x5555686ec660, 24 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12065 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12064 [pid 12063] +++ exited with 0 +++ [pid 12064] <... set_robust_list resumed>) = 0 [pid 12065] set_robust_list(0x5555686ec660, 24 [pid 12064] chdir("./1353" [pid 5071] umount2("./1429/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12065] <... set_robust_list resumed>) = 0 [pid 12064] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1416/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12063, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12064] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] newfstatat(AT_FDCWD, "./1429/binderfs", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12065] chdir("./1394" [pid 12064] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1416/binderfs", [pid 5067] umount2("./1375", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12065] <... chdir resumed>) = 0 [pid 12064] setpgid(0, 0 [pid 5071] unlink("./1429/binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12065] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12064] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12065] <... prctl resumed>) = 0 [pid 5069] unlink("./1416/binderfs" [pid 12064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "./1375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12065] setpgid(0, 0) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12064] <... openat resumed>) = 3 [pid 5069] getdents64(3, [pid 5067] newfstatat(3, "", [pid 5071] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12065] <... openat resumed>) = 3 [pid 12064] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 12064] <... write resumed>) = 4 [pid 12065] write(3, "1000", 4 [pid 5069] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 12065] <... write resumed>) = 4 [pid 5069] rmdir("./1416" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12065] close(3 [pid 12064] close(3 [pid 5071] close(3 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] umount2("./1375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12065] <... close resumed>) = 0 [pid 12064] <... close resumed>) = 0 [pid 12064] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... close resumed>) = 0 [pid 12065] symlink("/dev/binderfs", "./binderfs" [pid 5071] rmdir("./1429" [pid 5069] mkdir("./1417", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12065] <... symlink resumed>) = 0 [pid 12064] <... symlink resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1375/binderfs", [pid 5069] <... mkdir resumed>) = 0 [pid 12065] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12064] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1430", 0777 [pid 5067] unlink("./1375/binderfs" [pid 12065] <... bpf resumed>) = 3 [pid 12064] <... bpf resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12066 attached [pid 12065] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12064] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12066 [pid 12066] set_robust_list(0x5555686ec660, 24 [pid 12065] <... bpf resumed>) = 4 [pid 12064] <... bpf resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [pid 12066] <... set_robust_list resumed>) = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12067 attached [pid 12066] chdir("./1417" [pid 12065] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12064] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12066] <... chdir resumed>) = 0 [pid 12065] <... bpf resumed>) = 5 [pid 5067] close(3 [pid 12066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... close resumed>) = 0 [pid 12066] <... prctl resumed>) = 0 [pid 5067] rmdir("./1375" [pid 12066] setpgid(0, 0 [pid 12064] <... bpf resumed>) = 5 [pid 5067] <... rmdir resumed>) = 0 [pid 12067] set_robust_list(0x5555686ec660, 24 [pid 12066] <... setpgid resumed>) = 0 [pid 12065] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12067 [pid 12067] <... set_robust_list resumed>) = 0 [pid 12066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12064] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] mkdir("./1376", 0777 [pid 12067] chdir("./1430" [pid 12066] <... openat resumed>) = 3 [pid 12065] <... bpf resumed>) = 6 [pid 12064] <... bpf resumed>) = 6 [pid 12066] write(3, "1000", 4 [pid 12067] <... chdir resumed>) = 0 [pid 12066] <... write resumed>) = 4 [pid 12065] exit_group(0 [pid 12067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12064] exit_group(0 [pid 12065] <... exit_group resumed>) = ? [pid 5067] <... mkdir resumed>) = 0 [pid 12067] <... prctl resumed>) = 0 [pid 12066] close(3) = 0 [pid 12066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12066] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12067] setpgid(0, 0 [pid 12064] <... exit_group resumed>) = ? [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12066] <... bpf resumed>) = 3 [pid 12066] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12066] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12067] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 12068 attached [pid 12067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12068 [pid 12068] set_robust_list(0x5555686ec660, 24) = 0 [pid 12066] <... bpf resumed>) = 5 [pid 12068] chdir("./1376" [pid 12066] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12068] <... chdir resumed>) = 0 [pid 12067] <... openat resumed>) = 3 [pid 12067] write(3, "1000", 4 [pid 12068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12067] <... write resumed>) = 4 [pid 12068] <... prctl resumed>) = 0 [pid 12065] +++ exited with 0 +++ [pid 12067] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12065, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12068] setpgid(0, 0 [pid 12067] <... close resumed>) = 0 [pid 12067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12068] <... setpgid resumed>) = 0 [pid 12068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12068] write(3, "1000", 4 [pid 12067] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12064] +++ exited with 0 +++ [pid 5068] umount2("./1394", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12068] <... write resumed>) = 4 [pid 12067] <... bpf resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12064, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12067] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] openat(AT_FDCWD, "./1394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12068] close(3 [pid 12067] <... bpf resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12067] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12068] <... close resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12067] <... bpf resumed>) = 5 [pid 12068] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12068] <... symlink resumed>) = 0 [pid 12067] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] getdents64(3, [pid 5066] umount2("./1353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12068] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12068] <... bpf resumed>) = 3 [pid 5068] umount2("./1394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12068] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12068] <... bpf resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./1353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(AT_FDCWD, "./1394/binderfs", [pid 12068] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12068] <... bpf resumed>) = 5 [pid 5068] unlink("./1394/binderfs" [pid 5066] newfstatat(3, "", [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5066] getdents64(3, [pid 12068] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1394" [pid 12068] <... bpf resumed>) = 6 [pid 12067] <... bpf resumed>) = 6 [pid 12066] <... bpf resumed>) = 6 [pid 5066] umount2("./1353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12068] exit_group(0 [pid 12067] exit_group(0 [pid 12066] exit_group(0 [pid 12068] <... exit_group resumed>) = ? [pid 12067] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12066] <... exit_group resumed>) = ? [pid 12067] +++ exited with 0 +++ [pid 5066] newfstatat(AT_FDCWD, "./1353/binderfs", [pid 5068] mkdir("./1395", 0777 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12067, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... mkdir resumed>) = 0 [pid 5066] unlink("./1353/binderfs" [pid 5071] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 5071] umount2("./1430", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12069 attached [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 12069] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12069 [pid 12069] <... set_robust_list resumed>) = 0 [pid 12069] chdir("./1395" [pid 5071] openat(AT_FDCWD, "./1430", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5066] rmdir("./1353" [pid 12069] <... chdir resumed>) = 0 [pid 12069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] newfstatat(3, "", [pid 5066] <... rmdir resumed>) = 0 [pid 12069] <... prctl resumed>) = 0 [pid 12069] setpgid(0, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1354", 0777 [pid 12069] <... setpgid resumed>) = 0 [pid 5071] getdents64(3, [pid 12069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] umount2("./1430/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1430/binderfs", [pid 12069] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12069] write(3, "1000", 4 [pid 5071] unlink("./1430/binderfs" [pid 12069] <... write resumed>) = 4 ./strace-static-x86_64: Process 12070 attached [pid 12069] close(3 [pid 5071] <... unlink resumed>) = 0 [pid 12069] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 12070] set_robust_list(0x5555686ec660, 24 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12070 [pid 12070] <... set_robust_list resumed>) = 0 [pid 12069] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12070] chdir("./1354" [pid 12066] +++ exited with 0 +++ [pid 12070] <... chdir resumed>) = 0 [pid 12069] <... symlink resumed>) = 0 [pid 12068] +++ exited with 0 +++ [pid 5071] close(3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12066, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12069] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 12070] <... prctl resumed>) = 0 [pid 12070] setpgid(0, 0 [pid 5071] rmdir("./1430" [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12068, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12070] <... setpgid resumed>) = 0 [pid 12069] <... bpf resumed>) = 3 [pid 5067] umount2("./1376", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1417", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12069] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1417", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 12070] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12069] <... bpf resumed>) = 4 [pid 12070] write(3, "1000", 4 [pid 5069] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12070] <... write resumed>) = 4 [pid 12069] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1431", 0777 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12070] close(3 [pid 5069] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1417/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1376/binderfs", [pid 12070] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1417/binderfs", [pid 12070] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1376/binderfs" [pid 12070] <... symlink resumed>) = 0 [pid 5069] unlink("./1417/binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12071 attached [pid 12070] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12069] <... bpf resumed>) = 5 [pid 5069] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12071] set_robust_list(0x5555686ec660, 24 [pid 12070] <... bpf resumed>) = 3 [pid 12069] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12071 [pid 5067] close(3 [pid 12071] <... set_robust_list resumed>) = 0 [pid 12070] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12069] <... bpf resumed>) = 6 [pid 5069] close(3 [pid 5067] <... close resumed>) = 0 [pid 12071] chdir("./1431" [pid 12069] exit_group(0 [pid 5067] rmdir("./1376" [pid 12071] <... chdir resumed>) = 0 [pid 12070] <... bpf resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 12071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12070] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12069] <... exit_group resumed>) = ? [pid 5069] rmdir("./1417" [pid 5067] <... rmdir resumed>) = 0 [pid 12071] <... prctl resumed>) = 0 [pid 12070] <... bpf resumed>) = 5 [pid 12069] +++ exited with 0 +++ [pid 12071] setpgid(0, 0 [pid 12070] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12069, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] mkdir("./1377", 0777 [pid 12071] <... setpgid resumed>) = 0 [pid 5069] mkdir("./1418", 0777 [pid 12071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./1395", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... mkdir resumed>) = 0 [pid 12071] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 12071] write(3, "1000", 4) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(3, "", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12071] close(3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12071] <... close resumed>) = 0 [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12073 attached [pid 12071] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12071] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12072 attached [pid 12073] set_robust_list(0x5555686ec660, 24 [pid 12070] <... bpf resumed>) = 6 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12072 [pid 5068] umount2("./1395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12073 [pid 12073] <... set_robust_list resumed>) = 0 [pid 12072] set_robust_list(0x5555686ec660, 24 [pid 12071] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12070] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12073] chdir("./1377" [pid 12072] <... set_robust_list resumed>) = 0 [pid 12071] <... bpf resumed>) = 3 [pid 12070] <... exit_group resumed>) = ? [pid 5068] newfstatat(AT_FDCWD, "./1395/binderfs", [pid 12073] <... chdir resumed>) = 0 [pid 12072] chdir("./1418" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12072] <... chdir resumed>) = 0 [pid 12070] +++ exited with 0 +++ [pid 12071] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] unlink("./1395/binderfs" [pid 12073] <... prctl resumed>) = 0 [pid 12072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12071] <... bpf resumed>) = 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12070, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12073] setpgid(0, 0 [pid 12072] <... prctl resumed>) = 0 [pid 12071] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... unlink resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12072] setpgid(0, 0 [pid 12073] <... setpgid resumed>) = 0 [pid 12072] <... setpgid resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] <... restart_syscall resumed>) = 0 [pid 12073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12071] <... bpf resumed>) = 5 [pid 12073] <... openat resumed>) = 3 [pid 12071] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12073] write(3, "1000", 4 [pid 12072] <... openat resumed>) = 3 [pid 5068] close(3 [pid 5066] umount2("./1354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12073] <... write resumed>) = 4 [pid 12072] write(3, "1000", 4 [pid 5068] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12073] close(3 [pid 12072] <... write resumed>) = 4 [pid 5068] rmdir("./1395" [pid 5066] openat(AT_FDCWD, "./1354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12073] <... close resumed>) = 0 [pid 12072] close(3 [pid 12073] symlink("/dev/binderfs", "./binderfs" [pid 12072] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12072] symlink("/dev/binderfs", "./binderfs" [pid 5068] mkdir("./1396", 0777 [pid 5066] newfstatat(3, "", [pid 12073] <... symlink resumed>) = 0 [pid 12072] <... symlink resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12074 attached [pid 12073] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12072] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12071] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12074 [pid 12074] set_robust_list(0x5555686ec660, 24 [pid 12073] <... bpf resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12074] <... set_robust_list resumed>) = 0 [pid 12073] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12072] <... bpf resumed>) = 3 [pid 12071] exit_group(0 [pid 5066] umount2("./1354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12073] <... bpf resumed>) = 4 [pid 12072] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12071] <... exit_group resumed>) = ? [pid 12074] chdir("./1396" [pid 12073] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12072] <... bpf resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12074] <... chdir resumed>) = 0 [pid 12071] +++ exited with 0 +++ [pid 5066] newfstatat(AT_FDCWD, "./1354/binderfs", [pid 12074] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12073] <... bpf resumed>) = 5 [pid 12072] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12071, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12074] <... prctl resumed>) = 0 [pid 12073] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12074] setpgid(0, 0 [pid 12072] <... bpf resumed>) = 5 [pid 5066] unlink("./1354/binderfs" [pid 12072] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12074] <... setpgid resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] getdents64(3, [pid 5071] umount2("./1431", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12074] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1431", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12074] write(3, "1000", 4 [pid 12073] <... bpf resumed>) = 6 [pid 12072] <... bpf resumed>) = 6 [pid 12074] <... write resumed>) = 4 [pid 12072] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 12073] exit_group(0 [pid 5066] close(3 [pid 12074] close(3 [pid 12073] <... exit_group resumed>) = ? [pid 12072] <... exit_group resumed>) = ? [pid 5071] newfstatat(3, "", [pid 5066] <... close resumed>) = 0 [pid 12074] <... close resumed>) = 0 [pid 5066] rmdir("./1354" [pid 12074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12074] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1355", 0777 [pid 12074] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... mkdir resumed>) = 0 [pid 12074] <... bpf resumed>) = 4 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12074] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./1431/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12074] <... bpf resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1431/binderfs", ./strace-static-x86_64: Process 12075 attached [pid 12074] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12075] set_robust_list(0x5555686ec660, 24 [pid 5071] unlink("./1431/binderfs" [pid 12075] <... set_robust_list resumed>) = 0 [pid 12075] chdir("./1355" [pid 5071] <... unlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12075 [pid 12075] <... chdir resumed>) = 0 [pid 12073] +++ exited with 0 +++ [pid 12072] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 12075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12073, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12075] <... prctl resumed>) = 0 [pid 5071] close(3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12072, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12075] setpgid(0, 0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1431" [pid 12075] <... setpgid resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] umount2("./1377", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 12075] <... openat resumed>) = 3 [pid 5071] mkdir("./1432", 0777 [pid 12075] write(3, "1000", 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12075] <... write resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./1377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... mkdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1418", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 12075] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12075] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1418", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 12075] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] newfstatat(3, "", [pid 12075] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5069] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12076 attached [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12076] set_robust_list(0x5555686ec660, 24 [pid 5069] umount2("./1418/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12076] <... set_robust_list resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12076] chdir("./1432" [pid 5069] newfstatat(AT_FDCWD, "./1418/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1377/binderfs", [pid 12075] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12076 [pid 12076] <... chdir resumed>) = 0 [pid 12075] <... bpf resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] unlink("./1418/binderfs" [pid 12075] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] unlink("./1377/binderfs" [pid 12076] <... prctl resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12076] setpgid(0, 0) = 0 [pid 12076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12075] <... bpf resumed>) = 4 [pid 5069] getdents64(3, [pid 5067] getdents64(3, [pid 12074] <... bpf resumed>) = 6 [pid 12075] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12074] exit_group(0 [pid 12076] <... openat resumed>) = 3 [pid 5069] close(3 [pid 5067] close(3 [pid 12076] write(3, "1000", 4 [pid 12074] <... exit_group resumed>) = ? [pid 5069] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12076] <... write resumed>) = 4 [pid 5069] rmdir("./1418" [pid 5067] rmdir("./1377" [pid 12076] close(3 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12076] <... close resumed>) = 0 [pid 12076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12075] <... bpf resumed>) = 5 [pid 5067] mkdir("./1378", 0777 [pid 12074] +++ exited with 0 +++ [pid 5069] mkdir("./1419", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 12076] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12075] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12076] <... bpf resumed>) = 3 [pid 12076] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12074, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12076] <... bpf resumed>) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1396", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12077 attached [pid 12076] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12077 [pid 5068] openat(AT_FDCWD, "./1396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12078 attached [pid 12077] set_robust_list(0x5555686ec660, 24 [pid 5068] <... openat resumed>) = 3 [pid 12078] set_robust_list(0x5555686ec660, 24 [pid 12077] <... set_robust_list resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12078 [pid 5068] newfstatat(3, "", [pid 12078] <... set_robust_list resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12076] <... bpf resumed>) = 5 [pid 12078] chdir("./1419" [pid 12077] chdir("./1378" [pid 12076] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] getdents64(3, [pid 12078] <... chdir resumed>) = 0 [pid 12077] <... chdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12078] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12078] <... prctl resumed>) = 0 [pid 12077] <... prctl resumed>) = 0 [pid 5068] umount2("./1396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12078] setpgid(0, 0 [pid 12077] setpgid(0, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12078] <... setpgid resumed>) = 0 [pid 12077] <... setpgid resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1396/binderfs", [pid 12078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12077] <... openat resumed>) = 3 [pid 12077] write(3, "1000", 4) = 4 [pid 12077] close(3 [pid 12078] <... openat resumed>) = 3 [pid 12077] <... close resumed>) = 0 [pid 12078] write(3, "1000", 4 [pid 12076] <... bpf resumed>) = 6 [pid 12075] <... bpf resumed>) = 6 [pid 5068] unlink("./1396/binderfs" [pid 12077] symlink("/dev/binderfs", "./binderfs" [pid 12076] exit_group(0 [pid 12078] <... write resumed>) = 4 [pid 12077] <... symlink resumed>) = 0 [pid 12076] <... exit_group resumed>) = ? [pid 12075] exit_group(0 [pid 5068] <... unlink resumed>) = 0 [pid 12078] close(3) = 0 [pid 12077] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12075] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 12076] +++ exited with 0 +++ [pid 12078] symlink("/dev/binderfs", "./binderfs" [pid 12077] <... bpf resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12077] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12076, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] close(3 [pid 12077] <... bpf resumed>) = 4 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... close resumed>) = 0 [pid 12075] +++ exited with 0 +++ [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] rmdir("./1396" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12075, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12078] <... symlink resumed>) = 0 [pid 12077] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... rmdir resumed>) = 0 [pid 12078] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] mkdir("./1397", 0777 [pid 12078] <... bpf resumed>) = 3 [pid 12077] <... bpf resumed>) = 5 [pid 5071] umount2("./1432", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12077] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1432", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./1355", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12078] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12079 attached [pid 12078] <... bpf resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./1355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12079] set_robust_list(0x5555686ec660, 24 [pid 12078] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12077] <... bpf resumed>) = 6 [pid 5071] umount2("./1432/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12079 [pid 5066] <... openat resumed>) = 3 [pid 12079] <... set_robust_list resumed>) = 0 [pid 12077] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12079] chdir("./1397" [pid 12078] <... bpf resumed>) = 5 [pid 12077] <... exit_group resumed>) = ? [pid 5071] newfstatat(AT_FDCWD, "./1432/binderfs", [pid 5066] newfstatat(3, "", [pid 12079] <... chdir resumed>) = 0 [pid 12078] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12077] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12079] <... prctl resumed>) = 0 [pid 5071] unlink("./1432/binderfs" [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12077, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12079] setpgid(0, 0) = 0 [pid 5071] getdents64(3, [pid 5067] umount2("./1378", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./1378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(AT_FDCWD, "./1355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1355/binderfs" [pid 5067] <... openat resumed>) = 3 [pid 5071] close(3 [pid 12079] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] <... unlink resumed>) = 0 [pid 12079] write(3, "1000", 4 [pid 5071] rmdir("./1432" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12079] <... write resumed>) = 4 [pid 5067] getdents64(3, [pid 12079] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12079] <... close resumed>) = 0 [pid 5067] umount2("./1378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1378/binderfs", [pid 12079] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] close(3 [pid 5071] mkdir("./1433", 0777 [pid 12079] <... bpf resumed>) = 3 [pid 5067] unlink("./1378/binderfs" [pid 5066] <... close resumed>) = 0 [pid 12079] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] rmdir("./1355" [pid 12079] <... bpf resumed>) = 4 [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 12079] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12079] <... bpf resumed>) = 5 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] close(3 [pid 5066] mkdir("./1356", 0777 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1378") = 0 [pid 12079] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] mkdir("./1379", 0777./strace-static-x86_64: Process 12080 attached [pid 12079] <... bpf resumed>) = 6 [pid 12078] <... bpf resumed>) = 6 [pid 5066] <... mkdir resumed>) = 0 [pid 12080] set_robust_list(0x5555686ec660, 24 [pid 12079] exit_group(0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12080] <... set_robust_list resumed>) = 0 [pid 12078] exit_group(0 [pid 12080] chdir("./1433"./strace-static-x86_64: Process 12081 attached ) = 0 [pid 12079] <... exit_group resumed>) = ? [pid 12078] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12080 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12081] set_robust_list(0x5555686ec660, 24 [pid 12080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 12082 attached [pid 12080] setpgid(0, 0 [pid 12082] set_robust_list(0x5555686ec660, 24) = 0 [pid 12081] <... set_robust_list resumed>) = 0 [pid 12082] chdir("./1379" [pid 12081] chdir("./1356" [pid 12080] <... setpgid resumed>) = 0 [pid 12082] <... chdir resumed>) = 0 [pid 12082] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12081] <... chdir resumed>) = 0 [pid 12080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12082 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12081 [pid 12082] <... prctl resumed>) = 0 [pid 12081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12080] <... openat resumed>) = 3 [pid 12082] setpgid(0, 0 [pid 12081] <... prctl resumed>) = 0 [pid 12080] write(3, "1000", 4 [pid 12082] <... setpgid resumed>) = 0 [pid 12081] setpgid(0, 0 [pid 12080] <... write resumed>) = 4 [pid 12082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12081] <... setpgid resumed>) = 0 [pid 12080] close(3 [pid 12082] <... openat resumed>) = 3 [pid 12081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12080] <... close resumed>) = 0 [pid 12082] write(3, "1000", 4 [pid 12080] symlink("/dev/binderfs", "./binderfs" [pid 12082] <... write resumed>) = 4 [pid 12082] close(3) = 0 [pid 12080] <... symlink resumed>) = 0 [pid 12082] symlink("/dev/binderfs", "./binderfs" [pid 12081] <... openat resumed>) = 3 [pid 12081] write(3, "1000", 4 [pid 12080] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12082] <... symlink resumed>) = 0 [pid 12081] <... write resumed>) = 4 [pid 12080] <... bpf resumed>) = 3 [pid 12080] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12082] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12081] close(3 [pid 12082] <... bpf resumed>) = 3 [pid 12081] <... close resumed>) = 0 [pid 12080] <... bpf resumed>) = 4 [pid 12079] +++ exited with 0 +++ [pid 12078] +++ exited with 0 +++ [pid 12080] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12082] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12081] symlink("/dev/binderfs", "./binderfs" [pid 12080] <... bpf resumed>) = 5 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12078, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12079, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12081] <... symlink resumed>) = 0 [pid 12080] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12082] <... bpf resumed>) = 4 [pid 12081] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1397", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12082] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12081] <... bpf resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./1397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12082] <... bpf resumed>) = 5 [pid 12081] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 5069] umount2("./1419", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12082] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12081] <... bpf resumed>) = 4 [pid 12080] <... bpf resumed>) = 6 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(3, "", [pid 12082] <... bpf resumed>) = 6 [pid 12081] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12080] exit_group(0 [pid 5069] openat(AT_FDCWD, "./1419", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12080] <... exit_group resumed>) = ? [pid 5069] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12082] exit_group(0 [pid 5068] getdents64(3, [pid 12082] <... exit_group resumed>) = ? [pid 12081] <... bpf resumed>) = 5 [pid 5069] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1397/binderfs", [pid 12081] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] getdents64(3, [pid 5068] unlink("./1397/binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... unlink resumed>) = 0 [pid 5069] umount2("./1419/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1419/binderfs", [pid 5068] close(3 [pid 12080] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... close resumed>) = 0 [pid 12082] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12080, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] rmdir("./1397" [pid 5069] unlink("./1419/binderfs" [pid 5071] umount2("./1433", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12082, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... unlink resumed>) = 0 [pid 5068] mkdir("./1398", 0777 [pid 5067] umount2("./1379", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1433", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1433/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 5067] openat(AT_FDCWD, "./1379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1433/binderfs", [pid 5067] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] rmdir("./1419" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] newfstatat(3, "", [pid 5071] unlink("./1433/binderfs") = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3./strace-static-x86_64: Process 12083 attached [pid 12081] <... bpf resumed>) = 6 [pid 5069] mkdir("./1420", 0777 [pid 5067] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12083 [pid 12083] set_robust_list(0x5555686ec660, 24 [pid 12081] exit_group(0 [pid 5071] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12083] <... set_robust_list resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5071] rmdir("./1433" [pid 5067] umount2("./1379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12081] <... exit_group resumed>) = ? [pid 12083] chdir("./1398" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1379/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1379/binderfs" [pid 12083] <... chdir resumed>) = 0 [pid 12081] +++ exited with 0 +++ [pid 5071] <... rmdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] mkdir("./1434", 0777 [pid 5067] <... unlink resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12081, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12083] setpgid(0, 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12083] <... setpgid resumed>) = 0 [pid 12083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 5066] umount2("./1356", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12084 attached [pid 12083] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12085 attached [pid 12084] set_robust_list(0x5555686ec660, 24 [pid 12083] write(3, "1000", 4 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 12085] set_robust_list(0x5555686ec660, 24 [pid 5067] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12085] <... set_robust_list resumed>) = 0 [pid 5067] rmdir("./1379" [pid 5066] <... openat resumed>) = 3 [pid 12085] chdir("./1434" [pid 12084] <... set_robust_list resumed>) = 0 [pid 12083] <... write resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12085 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12084 [pid 12083] close(3 [pid 12085] <... chdir resumed>) = 0 [pid 12083] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12085] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12085] <... prctl resumed>) = 0 [pid 5066] getdents64(3, [pid 12085] setpgid(0, 0 [pid 5067] mkdir("./1380", 0777 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12085] <... setpgid resumed>) = 0 [pid 12084] chdir("./1420" [pid 12083] symlink("/dev/binderfs", "./binderfs" [pid 12085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12084] <... chdir resumed>) = 0 [pid 12083] <... symlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] umount2("./1356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12085] <... openat resumed>) = 3 [pid 12084] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12083] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12085] write(3, "1000", 4 [pid 12084] <... prctl resumed>) = 0 [pid 12083] <... bpf resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12085] <... write resumed>) = 4 [pid 12084] setpgid(0, 0 [pid 12083] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(AT_FDCWD, "./1356/binderfs", ./strace-static-x86_64: Process 12086 attached [pid 12085] close(3 [pid 12084] <... setpgid resumed>) = 0 [pid 12083] <... bpf resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12086] set_robust_list(0x5555686ec660, 24 [pid 12085] <... close resumed>) = 0 [pid 12086] <... set_robust_list resumed>) = 0 [pid 12084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12086] chdir("./1380" [pid 12085] symlink("/dev/binderfs", "./binderfs" [pid 12083] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12084] <... openat resumed>) = 3 [pid 5066] unlink("./1356/binderfs" [pid 12086] <... chdir resumed>) = 0 [pid 12085] <... symlink resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12086 [pid 12086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12083] <... bpf resumed>) = 5 [pid 12086] <... prctl resumed>) = 0 [pid 12085] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... unlink resumed>) = 0 [pid 12086] setpgid(0, 0 [pid 12084] write(3, "1000", 4 [pid 12083] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12085] <... bpf resumed>) = 3 [pid 12086] <... setpgid resumed>) = 0 [pid 12084] <... write resumed>) = 4 [pid 12086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12084] close(3) = 0 [pid 12085] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12084] symlink("/dev/binderfs", "./binderfs" [pid 12083] <... bpf resumed>) = 6 [pid 5066] getdents64(3, [pid 12086] <... openat resumed>) = 3 [pid 12084] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12086] write(3, "1000", 4 [pid 12085] <... bpf resumed>) = 4 [pid 12086] <... write resumed>) = 4 [pid 12086] close(3) = 0 [pid 12085] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12084] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12083] exit_group(0 [pid 5066] close(3 [pid 12086] symlink("/dev/binderfs", "./binderfs" [pid 12083] <... exit_group resumed>) = ? [pid 12086] <... symlink resumed>) = 0 [pid 12084] <... bpf resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 12086] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12085] <... bpf resumed>) = 5 [pid 5066] rmdir("./1356" [pid 12086] <... bpf resumed>) = 3 [pid 12086] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12085] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12084] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12083] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 12086] <... bpf resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12083, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] mkdir("./1357", 0777 [pid 12084] <... bpf resumed>) = 4 [pid 12084] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12086] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12085] <... bpf resumed>) = 6 [pid 5068] umount2("./1398", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12086] <... bpf resumed>) = 5 [pid 12085] exit_group(0 [pid 12084] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12085] <... exit_group resumed>) = ? [pid 12084] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12086] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] openat(AT_FDCWD, "./1398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12086] <... bpf resumed>) = 6 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12087 attached [pid 12086] exit_group(0 [pid 12087] set_robust_list(0x5555686ec660, 24 [pid 5068] getdents64(3, [pid 12087] <... set_robust_list resumed>) = 0 [pid 12086] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12087 [pid 5068] umount2("./1398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12087] chdir("./1357" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1398/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12087] <... chdir resumed>) = 0 [pid 5068] unlink("./1398/binderfs") = 0 [pid 12087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12085] +++ exited with 0 +++ [pid 12084] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 12087] <... prctl resumed>) = 0 [pid 12084] exit_group(0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12085, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12087] setpgid(0, 0) = 0 [pid 12084] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 12087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12086] +++ exited with 0 +++ [pid 12084] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12084, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] rmdir("./1398" [pid 12087] write(3, "1000", 4 [pid 5071] umount2("./1434", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12086, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12087] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12087] close(3 [pid 5071] openat(AT_FDCWD, "./1434", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12087] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12087] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./1380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12087] <... symlink resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./1399", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./1420", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./1380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12087] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12087] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] openat(AT_FDCWD, "./1420", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] newfstatat(3, "", [pid 12087] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1434/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12087] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(3, "", [pid 12087] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(AT_FDCWD, "./1434/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12088 attached [pid 12087] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12088] set_robust_list(0x5555686ec660, 24 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12088] <... set_robust_list resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12088 [pid 5069] umount2("./1420/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./1434/binderfs" [pid 5067] umount2("./1380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12088] chdir("./1399" [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12087] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 5069] newfstatat(AT_FDCWD, "./1420/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1380/binderfs", [pid 12088] <... chdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] close(3 [pid 5069] unlink("./1420/binderfs" [pid 5067] unlink("./1380/binderfs" [pid 12088] <... prctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12088] setpgid(0, 0) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12087] <... bpf resumed>) = 6 [pid 5071] rmdir("./1434" [pid 5069] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 12088] write(3, "1000", 4 [pid 12087] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 12088] <... write resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 12087] <... exit_group resumed>) = ? [pid 5069] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12088] close(3 [pid 5071] mkdir("./1435", 0777 [pid 5069] <... close resumed>) = 0 [pid 5067] close(3 [pid 12088] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12088] symlink("/dev/binderfs", "./binderfs" [pid 5069] rmdir("./1420" [pid 5067] <... close resumed>) = 0 [pid 12088] <... symlink resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] rmdir("./1380" [pid 12087] +++ exited with 0 +++ [pid 5069] mkdir("./1421", 0777 [pid 12088] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 12088] <... bpf resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 12088] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12087, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12089 attached [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1381", 0777 [pid 5066] umount2("./1357", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12089] set_robust_list(0x5555686ec660, 24 [pid 12088] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12089 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12089] <... set_robust_list resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12088] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] openat(AT_FDCWD, "./1357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12089] chdir("./1435" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12090 attached [pid 12088] <... bpf resumed>) = 5 [pid 5066] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12091 attached [pid 12089] <... chdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12090 [pid 12091] set_robust_list(0x5555686ec660, 24 [pid 12090] set_robust_list(0x5555686ec660, 24 [pid 12089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12088] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12091 [pid 5066] newfstatat(3, "", [pid 12091] <... set_robust_list resumed>) = 0 [pid 12090] <... set_robust_list resumed>) = 0 [pid 12089] <... prctl resumed>) = 0 [pid 12091] chdir("./1381" [pid 12089] setpgid(0, 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12091] <... chdir resumed>) = 0 [pid 12090] chdir("./1421" [pid 12089] <... setpgid resumed>) = 0 [pid 5066] getdents64(3, [pid 12091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12090] <... chdir resumed>) = 0 [pid 12089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12091] <... prctl resumed>) = 0 [pid 12090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12089] <... openat resumed>) = 3 [pid 5066] umount2("./1357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12090] <... prctl resumed>) = 0 [pid 12091] setpgid(0, 0 [pid 12090] setpgid(0, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12091] <... setpgid resumed>) = 0 [pid 12090] <... setpgid resumed>) = 0 [pid 12089] write(3, "1000", 4 [pid 12088] <... bpf resumed>) = 6 [pid 5066] newfstatat(AT_FDCWD, "./1357/binderfs", [pid 12091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12089] <... write resumed>) = 4 [pid 12088] exit_group(0) = ? [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1357/binderfs") = 0 [pid 12091] <... openat resumed>) = 3 [pid 12090] <... openat resumed>) = 3 [pid 12089] close(3) = 0 [pid 12091] write(3, "1000", 4 [pid 12090] write(3, "1000", 4 [pid 12089] symlink("/dev/binderfs", "./binderfs" [pid 12088] +++ exited with 0 +++ [pid 12091] <... write resumed>) = 4 [pid 5066] getdents64(3, [pid 12090] <... write resumed>) = 4 [pid 12089] <... symlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12088, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12091] close(3 [pid 12090] close(3 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12091] <... close resumed>) = 0 [pid 12090] <... close resumed>) = 0 [pid 12089] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] close(3 [pid 5068] <... restart_syscall resumed>) = 0 [pid 12091] symlink("/dev/binderfs", "./binderfs" [pid 12090] symlink("/dev/binderfs", "./binderfs" [pid 12089] <... bpf resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5068] umount2("./1399", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12090] <... symlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] rmdir("./1357" [pid 12089] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(3, "", [pid 5066] <... rmdir resumed>) = 0 [pid 12091] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12089] <... bpf resumed>) = 4 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] mkdir("./1358", 0777 [pid 12091] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12089] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12090] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... mkdir resumed>) = 0 [pid 12091] <... bpf resumed>) = 3 [pid 12090] <... bpf resumed>) = 3 [pid 5068] umount2("./1399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12091] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12090] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12091] <... bpf resumed>) = 4 [pid 12089] <... bpf resumed>) = 5 [pid 5068] newfstatat(AT_FDCWD, "./1399/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12091] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12090] <... bpf resumed>) = 4 [pid 12089] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1399/binderfs"./strace-static-x86_64: Process 12092 attached ) = 0 [pid 12092] set_robust_list(0x5555686ec660, 24 [pid 5068] getdents64(3, [pid 12092] <... set_robust_list resumed>) = 0 [pid 12091] <... bpf resumed>) = 5 [pid 12092] chdir("./1358" [pid 12091] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12090] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12089] <... bpf resumed>) = 6 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12092 [pid 12092] <... chdir resumed>) = 0 [pid 12091] <... bpf resumed>) = 6 [pid 12092] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] close(3 [pid 12092] <... prctl resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12092] setpgid(0, 0 [pid 12090] <... bpf resumed>) = 5 [pid 12089] exit_group(0 [pid 12092] <... setpgid resumed>) = 0 [pid 12091] exit_group(0 [pid 12089] <... exit_group resumed>) = ? [pid 5068] rmdir("./1399" [pid 12092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12091] <... exit_group resumed>) = ? [pid 12090] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... rmdir resumed>) = 0 [pid 12092] <... openat resumed>) = 3 [pid 5068] mkdir("./1400", 0777 [pid 12092] write(3, "1000", 4 [pid 12091] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 12092] <... write resumed>) = 4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12091, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12092] close(3) = 0 [pid 12092] symlink("/dev/binderfs", "./binderfs" [pid 12090] <... bpf resumed>) = 6 [pid 12092] <... symlink resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./1381", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12090] exit_group(0) = ? [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12092] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] openat(AT_FDCWD, "./1381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12093 attached [pid 12092] <... bpf resumed>) = 3 [pid 12093] set_robust_list(0x5555686ec660, 24) = 0 [pid 12092] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12093 [pid 5067] <... openat resumed>) = 3 [pid 12093] chdir("./1400" [pid 12092] <... bpf resumed>) = 4 [pid 5067] newfstatat(3, "", [pid 12092] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12093] <... chdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12092] <... bpf resumed>) = 5 [pid 12093] <... prctl resumed>) = 0 [pid 5067] getdents64(3, [pid 12093] setpgid(0, 0 [pid 12092] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12093] <... setpgid resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./1381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1381/binderfs", [pid 12093] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12093] write(3, "1000", 4 [pid 5067] unlink("./1381/binderfs" [pid 12093] <... write resumed>) = 4 [pid 12093] close(3) = 0 [pid 12093] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 12093] <... symlink resumed>) = 0 [pid 12093] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, [pid 12093] <... bpf resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12093] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12090] +++ exited with 0 +++ [pid 12089] +++ exited with 0 +++ [pid 5067] close(3 [pid 12093] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12089, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] umount2("./1435", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1435", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 12093] <... bpf resumed>) = 5 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12090, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] rmdir("./1381" [pid 12093] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12092] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./1421", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 12092] exit_group(0 [pid 5071] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12093] <... bpf resumed>) = 6 [pid 12092] <... exit_group resumed>) = ? [pid 5071] umount2("./1435/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] openat(AT_FDCWD, "./1421", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] mkdir("./1382", 0777 [pid 12093] exit_group(0) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1435/binderfs", [pid 5069] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1435/binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1421/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12094 attached [pid 5071] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12094] set_robust_list(0x5555686ec660, 24 [pid 12093] +++ exited with 0 +++ [pid 12092] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1421/binderfs", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12094 [pid 12094] <... set_robust_list resumed>) = 0 [pid 5071] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12092, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12093, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12094] chdir("./1382" [pid 5071] rmdir("./1435" [pid 5069] unlink("./1421/binderfs" [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12094] <... chdir resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12094] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... restart_syscall resumed>) = 0 [pid 12094] <... prctl resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] getdents64(3, [pid 12094] setpgid(0, 0) = 0 [pid 5071] mkdir("./1436", 0777 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./1400", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 5066] umount2("./1358", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12094] <... openat resumed>) = 3 [pid 12094] write(3, "1000", 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12094] <... write resumed>) = 4 [pid 5069] rmdir("./1421" [pid 5068] newfstatat(3, "", [pid 5066] <... openat resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5066] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] umount2("./1400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(AT_FDCWD, "./1400/binderfs", [pid 5066] umount2("./1358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12095 attached [pid 12094] close(3 [pid 5069] mkdir("./1422", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12094] <... close resumed>) = 0 [pid 12095] set_robust_list(0x5555686ec660, 24 [pid 12094] symlink("/dev/binderfs", "./binderfs" [pid 5068] unlink("./1400/binderfs" [pid 5066] newfstatat(AT_FDCWD, "./1358/binderfs", [pid 12095] <... set_robust_list resumed>) = 0 [pid 12094] <... symlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12095] chdir("./1436" [pid 5068] getdents64(3, [pid 5066] unlink("./1358/binderfs" [pid 12095] <... chdir resumed>) = 0 [pid 12094] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12095 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12095] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12094] <... bpf resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] close(3./strace-static-x86_64: Process 12096 attached [pid 12095] <... prctl resumed>) = 0 [pid 12094] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12096 [pid 12096] set_robust_list(0x5555686ec660, 24 [pid 12095] setpgid(0, 0 [pid 12094] <... bpf resumed>) = 4 [pid 5068] rmdir("./1400" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12096] <... set_robust_list resumed>) = 0 [pid 12095] <... setpgid resumed>) = 0 [pid 12094] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12096] chdir("./1422" [pid 12095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... rmdir resumed>) = 0 [pid 5066] close(3 [pid 12096] <... chdir resumed>) = 0 [pid 12094] <... bpf resumed>) = 5 [pid 5066] <... close resumed>) = 0 [pid 12096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12095] <... openat resumed>) = 3 [pid 12094] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] mkdir("./1401", 0777 [pid 5066] rmdir("./1358" [pid 12096] <... prctl resumed>) = 0 [pid 12095] write(3, "1000", 4) = 4 [pid 12096] setpgid(0, 0 [pid 12094] <... bpf resumed>) = 6 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12096] <... setpgid resumed>) = 0 [pid 12095] close(3 [pid 5066] mkdir("./1359", 0777) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12097 attached [pid 12096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12095] <... close resumed>) = 0 [pid 12094] exit_group(0 [pid 12095] symlink("/dev/binderfs", "./binderfs" [pid 12094] <... exit_group resumed>) = ? [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12097 [pid 12097] set_robust_list(0x5555686ec660, 24 [pid 12096] <... openat resumed>) = 3 [pid 12095] <... symlink resumed>) = 0 [pid 12097] <... set_robust_list resumed>) = 0 [pid 12096] write(3, "1000", 4 [pid 12097] chdir("./1401"./strace-static-x86_64: Process 12098 attached ) = 0 [pid 12096] <... write resumed>) = 4 [pid 12095] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12094] +++ exited with 0 +++ [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12098 [pid 12098] set_robust_list(0x5555686ec660, 24 [pid 12097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12096] close(3 [pid 12098] <... set_robust_list resumed>) = 0 [pid 12097] <... prctl resumed>) = 0 [pid 12096] <... close resumed>) = 0 [pid 12095] <... bpf resumed>) = 3 [pid 12098] chdir("./1359" [pid 12097] setpgid(0, 0 [pid 12096] symlink("/dev/binderfs", "./binderfs" [pid 12095] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12094, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12098] <... chdir resumed>) = 0 [pid 12097] <... setpgid resumed>) = 0 [pid 12096] <... symlink resumed>) = 0 [pid 12098] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./1382", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12095] <... bpf resumed>) = 4 [pid 12098] <... prctl resumed>) = 0 [pid 12096] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12097] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12098] setpgid(0, 0 [pid 12097] write(3, "1000", 4 [pid 12096] <... bpf resumed>) = 3 [pid 12095] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] openat(AT_FDCWD, "./1382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12098] <... setpgid resumed>) = 0 [pid 12097] <... write resumed>) = 4 [pid 12096] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12096] <... bpf resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 12096] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12097] close(3 [pid 12095] <... bpf resumed>) = 5 [pid 12097] <... close resumed>) = 0 [pid 12096] <... bpf resumed>) = 5 [pid 5067] newfstatat(3, "", [pid 12096] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12096] exit_group(0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12098] <... openat resumed>) = 3 [pid 12097] symlink("/dev/binderfs", "./binderfs" [pid 12095] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] getdents64(3, [pid 12098] write(3, "1000", 4) = 4 [pid 12097] <... symlink resumed>) = 0 [pid 12096] <... exit_group resumed>) = ? [pid 12095] <... bpf resumed>) = 6 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12098] close(3) = 0 [pid 5067] umount2("./1382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12098] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12098] <... symlink resumed>) = 0 [pid 12097] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12095] exit_group(0 [pid 5067] newfstatat(AT_FDCWD, "./1382/binderfs", [pid 12095] <... exit_group resumed>) = ? [pid 12097] <... bpf resumed>) = 3 [pid 12098] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12097] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12098] <... bpf resumed>) = 3 [pid 5067] unlink("./1382/binderfs" [pid 12098] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12097] <... bpf resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [pid 12097] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] getdents64(3, [pid 12098] <... bpf resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./1382" [pid 12097] <... bpf resumed>) = 5 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1383", 0777 [pid 12098] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12097] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... mkdir resumed>) = 0 [pid 12098] <... bpf resumed>) = 5 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12098] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12099 attached [pid 12099] set_robust_list(0x5555686ec660, 24 [pid 12096] +++ exited with 0 +++ [pid 12095] +++ exited with 0 +++ [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12099 [pid 12099] <... set_robust_list resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12095, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12096, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12099] chdir("./1383" [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 12099] <... chdir resumed>) = 0 [pid 5071] umount2("./1436", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1422", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12098] <... bpf resumed>) = 6 [pid 12097] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12099] <... prctl resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1422", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12099] setpgid(0, 0 [pid 12098] exit_group(0 [pid 12097] exit_group(0 [pid 5071] openat(AT_FDCWD, "./1436", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... openat resumed>) = 3 [pid 12099] <... setpgid resumed>) = 0 [pid 12098] <... exit_group resumed>) = ? [pid 12099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12099] <... openat resumed>) = 3 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12099] write(3, "1000", 4 [pid 12098] +++ exited with 0 +++ [pid 12097] <... exit_group resumed>) = ? [pid 5071] <... openat resumed>) = 3 [pid 5069] umount2("./1422/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12099] <... write resumed>) = 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12098, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12099] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1436/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12099] <... close resumed>) = 0 [pid 12097] +++ exited with 0 +++ [pid 5069] newfstatat(AT_FDCWD, "./1422/binderfs", [pid 12099] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1436/binderfs", [pid 5069] unlink("./1422/binderfs" [pid 12099] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5071] unlink("./1436/binderfs") = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12097, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1359", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12099] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 12099] <... bpf resumed>) = 3 [pid 5071] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12099] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] close(3 [pid 5066] openat(AT_FDCWD, "./1359", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5069] rmdir("./1422" [pid 5066] <... openat resumed>) = 3 [pid 12099] <... bpf resumed>) = 4 [pid 5071] close(3 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 5071] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] rmdir("./1436" [pid 5068] umount2("./1401", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12099] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] mkdir("./1423", 0777 [pid 5066] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12099] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12099] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] mkdir("./1437", 0777 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] umount2("./1359/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12099] <... bpf resumed>) = 6 [pid 5068] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1359/binderfs", ./strace-static-x86_64: Process 12100 attached [pid 12099] exit_group(0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12100] set_robust_list(0x5555686ec660, 24 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12099] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] unlink("./1359/binderfs" [pid 12100] <... set_robust_list resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12100 ./strace-static-x86_64: Process 12101 attached [pid 12100] chdir("./1423" [pid 5068] umount2("./1401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 12101] set_robust_list(0x5555686ec660, 24 [pid 12099] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12101 [pid 12101] <... set_robust_list resumed>) = 0 [pid 12100] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 12101] chdir("./1437" [pid 12100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12101] <... chdir resumed>) = 0 [pid 12100] <... prctl resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1401/binderfs", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12099, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] umount2("./1383", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1383/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12100] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] close(3 [pid 12100] <... setpgid resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12101] <... prctl resumed>) = 0 [pid 5068] unlink("./1401/binderfs" [pid 5067] unlink("./1383/binderfs" [pid 5066] rmdir("./1359" [pid 12101] setpgid(0, 0 [pid 12100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12101] <... setpgid resumed>) = 0 [pid 5068] getdents64(3, [pid 12101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12100] <... openat resumed>) = 3 [pid 5066] mkdir("./1360", 0777 [pid 12101] <... openat resumed>) = 3 [pid 12100] write(3, "1000", 4 [pid 5068] <... close resumed>) = 0 [pid 5067] close(3 [pid 12101] write(3, "1000", 4) = 4 [pid 5068] rmdir("./1401" [pid 5067] <... close resumed>) = 0 [pid 12101] close(3 [pid 12100] <... write resumed>) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] rmdir("./1383" [pid 5066] <... mkdir resumed>) = 0 [pid 12100] close(3 [pid 12101] <... close resumed>) = 0 [pid 12100] <... close resumed>) = 0 [pid 5068] mkdir("./1402", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12101] symlink("/dev/binderfs", "./binderfs" [pid 12100] symlink("/dev/binderfs", "./binderfs" [pid 12101] <... symlink resumed>) = 0 [pid 12100] <... symlink resumed>) = 0 [pid 5067] mkdir("./1384", 0777 [pid 12101] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12101] <... bpf resumed>) = 3 [pid 12101] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12102 attached ) = 4 [pid 12100] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12102] set_robust_list(0x5555686ec660, 24 [pid 12101] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12100] <... bpf resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12102 ./strace-static-x86_64: Process 12103 attached [pid 12102] <... set_robust_list resumed>) = 0 [pid 12100] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12103] set_robust_list(0x5555686ec660, 24 [pid 12102] chdir("./1360" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12103 [pid 12103] <... set_robust_list resumed>) = 0 [pid 12100] <... bpf resumed>) = 4 ./strace-static-x86_64: Process 12104 attached [pid 12103] chdir("./1384" [pid 12102] <... chdir resumed>) = 0 [pid 12100] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12104] set_robust_list(0x5555686ec660, 24 [pid 12103] <... chdir resumed>) = 0 [pid 12102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12101] <... bpf resumed>) = 5 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12104 [pid 12104] <... set_robust_list resumed>) = 0 [pid 12101] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12100] <... bpf resumed>) = 5 [pid 12104] chdir("./1402" [pid 12103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12102] <... prctl resumed>) = 0 [pid 12103] <... prctl resumed>) = 0 [pid 12102] setpgid(0, 0 [pid 12104] <... chdir resumed>) = 0 [pid 12103] setpgid(0, 0 [pid 12102] <... setpgid resumed>) = 0 [pid 12101] <... bpf resumed>) = 6 [pid 12100] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12103] <... setpgid resumed>) = 0 [pid 12102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12101] exit_group(0 [pid 12100] <... bpf resumed>) = 6 [pid 12104] <... prctl resumed>) = 0 [pid 12103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12104] setpgid(0, 0 [pid 12102] <... openat resumed>) = 3 [pid 12101] <... exit_group resumed>) = ? [pid 12100] exit_group(0 [pid 12103] <... openat resumed>) = 3 [pid 12104] <... setpgid resumed>) = 0 [pid 12100] <... exit_group resumed>) = ? [pid 12104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12103] write(3, "1000", 4 [pid 12102] write(3, "1000", 4 [pid 12100] +++ exited with 0 +++ [pid 12104] <... openat resumed>) = 3 [pid 12103] <... write resumed>) = 4 [pid 12102] <... write resumed>) = 4 [pid 12101] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12100, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12103] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12101, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12103] <... close resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12103] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... restart_syscall resumed>) = 0 [pid 12104] write(3, "1000", 4 [pid 12102] close(3 [pid 12104] <... write resumed>) = 4 [pid 12102] <... close resumed>) = 0 [pid 12104] close(3 [pid 12102] symlink("/dev/binderfs", "./binderfs" [pid 12104] <... close resumed>) = 0 [pid 12103] <... symlink resumed>) = 0 [pid 12102] <... symlink resumed>) = 0 [pid 5069] umount2("./1423", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12104] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12103] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1437", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12104] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12102] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12104] <... bpf resumed>) = 3 [pid 12102] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1423", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12103] <... bpf resumed>) = 3 [pid 12104] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12102] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] openat(AT_FDCWD, "./1437", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12103] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12104] <... bpf resumed>) = 4 [pid 5069] <... openat resumed>) = 3 [pid 12104] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12103] <... bpf resumed>) = 4 [pid 12102] <... bpf resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 12103] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12102] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12104] <... bpf resumed>) = 5 [pid 5071] newfstatat(3, "", [pid 12104] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12103] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 5071] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12104] <... bpf resumed>) = 6 [pid 5069] umount2("./1423/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12102] <... bpf resumed>) = 5 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12103] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] newfstatat(AT_FDCWD, "./1423/binderfs", [pid 12103] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12104] exit_group(0 [pid 12103] exit_group(0 [pid 12102] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1437/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] unlink("./1423/binderfs" [pid 12104] <... exit_group resumed>) = ? [pid 12103] <... exit_group resumed>) = ? [pid 12102] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12104] +++ exited with 0 +++ [pid 12102] exit_group(0 [pid 5071] newfstatat(AT_FDCWD, "./1437/binderfs", [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 12102] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12104, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] unlink("./1437/binderfs" [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5069] close(3 [pid 5071] getdents64(3, [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1423" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./1402", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./1437" [pid 5069] mkdir("./1424", 0777 [pid 5068] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 12103] +++ exited with 0 +++ [pid 5068] newfstatat(3, "", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12103, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... mkdir resumed>) = 0 [pid 5071] mkdir("./1438", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1402/binderfs", [pid 5067] umount2("./1384", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12102] +++ exited with 0 +++ [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] unlink("./1402/binderfs"./strace-static-x86_64: Process 12107 attached ./strace-static-x86_64: Process 12106 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12106 [pid 5068] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12106] set_robust_list(0x5555686ec660, 24 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12102, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12106] <... set_robust_list resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... openat resumed>) = 3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12107] set_robust_list(0x5555686ec660, 24 [pid 5068] getdents64(3, [pid 5067] newfstatat(3, "", [pid 12107] <... set_robust_list resumed>) = 0 [pid 12106] chdir("./1424" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12107] chdir("./1438" [pid 12106] <... chdir resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12107 [pid 5068] close(3 [pid 5067] getdents64(3, [pid 5066] umount2("./1360", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12107] <... chdir resumed>) = 0 [pid 12106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12106] <... prctl resumed>) = 0 [pid 5068] rmdir("./1402" [pid 12107] <... prctl resumed>) = 0 [pid 12106] setpgid(0, 0 [pid 5067] umount2("./1384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./1360", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12107] setpgid(0, 0 [pid 12106] <... setpgid resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12107] <... setpgid resumed>) = 0 [pid 12106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... rmdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12107] <... openat resumed>) = 3 [pid 12106] <... openat resumed>) = 3 [pid 5068] mkdir("./1403", 0777 [pid 5067] newfstatat(AT_FDCWD, "./1384/binderfs", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12107] write(3, "1000", 4 [pid 12106] write(3, "1000", 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12107] <... write resumed>) = 4 [pid 12106] <... write resumed>) = 4 [pid 5066] getdents64(3, [pid 12107] close(3 [pid 12106] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] unlink("./1384/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12107] <... close resumed>) = 0 [pid 12106] <... close resumed>) = 0 [pid 12107] symlink("/dev/binderfs", "./binderfs" [pid 12106] symlink("/dev/binderfs", "./binderfs" [pid 5066] umount2("./1360/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12108 attached [pid 12107] <... symlink resumed>) = 0 [pid 12106] <... symlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12108] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12108 [pid 5067] getdents64(3, [pid 12108] <... set_robust_list resumed>) = 0 [pid 12107] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1360/binderfs", [pid 12108] chdir("./1403" [pid 12106] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] close(3 [pid 12108] <... chdir resumed>) = 0 [pid 12107] <... bpf resumed>) = 3 [pid 12106] <... bpf resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12107] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12106] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... close resumed>) = 0 [pid 5066] unlink("./1360/binderfs" [pid 12108] <... prctl resumed>) = 0 [pid 12107] <... bpf resumed>) = 4 [pid 5066] <... unlink resumed>) = 0 [pid 12108] setpgid(0, 0 [pid 12107] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12106] <... bpf resumed>) = 4 [pid 5067] rmdir("./1384" [pid 12108] <... setpgid resumed>) = 0 [pid 12106] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12107] <... bpf resumed>) = 5 [pid 12108] <... openat resumed>) = 3 [pid 12107] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12106] <... bpf resumed>) = 5 [pid 5067] mkdir("./1385", 0777 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12108] write(3, "1000", 4 [pid 12107] <... bpf resumed>) = 6 [pid 12106] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] close(3 [pid 12108] <... write resumed>) = 4 [pid 12106] <... bpf resumed>) = 6 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12108] close(3 [pid 12107] exit_group(0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12107] <... exit_group resumed>) = ? [pid 12108] <... close resumed>) = 0 [pid 12106] exit_group(0 [pid 5066] rmdir("./1360" [pid 12108] symlink("/dev/binderfs", "./binderfs" [pid 12106] <... exit_group resumed>) = ? [pid 5066] <... rmdir resumed>) = 0 [pid 12108] <... symlink resumed>) = 0 [pid 12108] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] mkdir("./1361", 0777./strace-static-x86_64: Process 12109 attached [pid 12107] +++ exited with 0 +++ [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12109 [pid 12109] set_robust_list(0x5555686ec660, 24) = 0 [pid 12108] <... bpf resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 12108] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12109] chdir("./1385" [pid 12108] <... bpf resumed>) = 4 [pid 12106] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12107, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12109] <... chdir resumed>) = 0 [pid 12108] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1438", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12106, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12110 attached [pid 12109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12110] set_robust_list(0x5555686ec660, 24 [pid 12109] <... prctl resumed>) = 0 [pid 12108] <... bpf resumed>) = 5 [pid 5071] openat(AT_FDCWD, "./1438", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12110] <... set_robust_list resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12110 [pid 12110] chdir("./1361" [pid 12109] setpgid(0, 0 [pid 12108] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... openat resumed>) = 3 [pid 12110] <... chdir resumed>) = 0 [pid 12109] <... setpgid resumed>) = 0 [pid 12110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12110] setpgid(0, 0 [pid 5069] umount2("./1424", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12110] <... setpgid resumed>) = 0 [pid 12110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(3, "", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12110] <... openat resumed>) = 3 [pid 12110] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12110] <... write resumed>) = 4 [pid 12110] close(3) = 0 [pid 12110] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 5069] openat(AT_FDCWD, "./1424", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12110] <... symlink resumed>) = 0 [pid 12109] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... openat resumed>) = 3 [pid 12109] write(3, "1000", 4 [pid 5069] newfstatat(3, "", [pid 12109] <... write resumed>) = 4 [pid 12110] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12109] close(3 [pid 5071] umount2("./1438/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12110] <... bpf resumed>) = 3 [pid 12109] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12110] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12109] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./1438/binderfs", [pid 5069] getdents64(3, [pid 12110] <... bpf resumed>) = 4 [pid 12109] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1438/binderfs" [pid 12110] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12109] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12108] <... bpf resumed>) = 6 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1424/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12110] <... bpf resumed>) = 5 [pid 12109] <... bpf resumed>) = 3 [pid 12108] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12110] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12109] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12108] <... exit_group resumed>) = ? [pid 5071] getdents64(3, [pid 5069] newfstatat(AT_FDCWD, "./1424/binderfs", [pid 12109] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12109] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12110] <... bpf resumed>) = 6 [pid 12109] <... bpf resumed>) = 5 [pid 12109] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12110] exit_group(0 [pid 12108] +++ exited with 0 +++ [pid 5071] close(3 [pid 5069] unlink("./1424/binderfs" [pid 12110] <... exit_group resumed>) = ? [pid 12109] <... bpf resumed>) = 6 [pid 5071] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12108, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... unlink resumed>) = 0 [pid 12109] exit_group(0) = ? [pid 5071] rmdir("./1438" [pid 5069] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5071] mkdir("./1439", 0777 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1424" [pid 5068] umount2("./1403", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 12110] +++ exited with 0 +++ [pid 12109] +++ exited with 0 +++ [pid 5071] <... mkdir resumed>) = 0 [pid 5069] mkdir("./1425", 0777 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12109, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12110, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1361", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12111 attached [pid 5066] openat(AT_FDCWD, "./1361", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12112 attached [pid 12111] set_robust_list(0x5555686ec660, 24 [pid 5068] newfstatat(AT_FDCWD, "./1403/binderfs", [pid 12112] set_robust_list(0x5555686ec660, 24 [pid 12111] <... set_robust_list resumed>) = 0 [pid 12112] <... set_robust_list resumed>) = 0 [pid 12111] chdir("./1439" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12111 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12112 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 12112] chdir("./1425" [pid 12111] <... chdir resumed>) = 0 [pid 5068] unlink("./1403/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 5067] openat(AT_FDCWD, "./1385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12112] <... chdir resumed>) = 0 [pid 12111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 12112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12111] <... prctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(3, "", [pid 12112] <... prctl resumed>) = 0 [pid 12111] setpgid(0, 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./1361/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12112] setpgid(0, 0 [pid 12111] <... setpgid resumed>) = 0 [pid 5068] close(3 [pid 5067] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12112] <... setpgid resumed>) = 0 [pid 12111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(AT_FDCWD, "./1361/binderfs", [pid 12112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12111] <... openat resumed>) = 3 [pid 5068] rmdir("./1403" [pid 12112] <... openat resumed>) = 3 [pid 12111] write(3, "1000", 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] umount2("./1385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12111] <... write resumed>) = 4 [pid 5068] mkdir("./1404", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12112] write(3, "1000", 4 [pid 5066] unlink("./1361/binderfs" [pid 12111] close(3 [pid 5067] newfstatat(AT_FDCWD, "./1385/binderfs", [pid 12112] <... write resumed>) = 4 [pid 12111] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12112] close(3 [pid 5067] unlink("./1385/binderfs" [pid 12111] symlink("/dev/binderfs", "./binderfs" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12112] <... close resumed>) = 0 [pid 12111] <... symlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 12112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5066] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 12113 attached [pid 12112] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] close(3 [pid 12113] set_robust_list(0x5555686ec660, 24 [pid 12112] <... bpf resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./1361" [pid 12113] <... set_robust_list resumed>) = 0 [pid 12112] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12111] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12113 [pid 5067] rmdir("./1385" [pid 12113] chdir("./1404" [pid 12112] <... bpf resumed>) = 4 [pid 12111] <... bpf resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 12111] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5067] <... rmdir resumed>) = 0 [pid 12111] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12113] <... chdir resumed>) = 0 [pid 12112] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] mkdir("./1386", 0777 [pid 5066] mkdir("./1362", 0777 [pid 12113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12111] <... bpf resumed>) = 5 [pid 12111] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12113] <... prctl resumed>) = 0 [pid 12111] <... bpf resumed>) = 6 [pid 12113] setpgid(0, 0 [pid 12111] exit_group(0) = ? [pid 12113] <... setpgid resumed>) = 0 [pid 12112] <... bpf resumed>) = 5 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12112] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12113] <... openat resumed>) = 3 [pid 12112] <... bpf resumed>) = 6 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12113] write(3, "1000", 4 [pid 12112] exit_group(0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12114 attached [pid 12113] <... write resumed>) = 4 [pid 12112] <... exit_group resumed>) = ? [pid 12114] set_robust_list(0x5555686ec660, 24 [pid 12113] close(3./strace-static-x86_64: Process 12115 attached [pid 12114] <... set_robust_list resumed>) = 0 [pid 12113] <... close resumed>) = 0 [pid 12112] +++ exited with 0 +++ [pid 12111] +++ exited with 0 +++ [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12115 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12114 [pid 12115] set_robust_list(0x5555686ec660, 24 [pid 12113] symlink("/dev/binderfs", "./binderfs" [pid 12115] <... set_robust_list resumed>) = 0 [pid 12113] <... symlink resumed>) = 0 [pid 12115] chdir("./1386" [pid 12113] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12112, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12115] <... chdir resumed>) = 0 [pid 12114] chdir("./1362" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12111, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12113] <... bpf resumed>) = 3 [pid 12115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12114] <... chdir resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12115] <... prctl resumed>) = 0 [pid 12114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] umount2("./1425", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12115] setpgid(0, 0 [pid 12114] <... prctl resumed>) = 0 [pid 12113] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12115] <... setpgid resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12114] setpgid(0, 0 [pid 12113] <... bpf resumed>) = 4 [pid 12113] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12114] <... setpgid resumed>) = 0 [pid 5071] umount2("./1439", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] openat(AT_FDCWD, "./1425", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12113] <... bpf resumed>) = 5 [pid 12113] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... openat resumed>) = 3 [pid 12115] <... openat resumed>) = 3 [pid 12114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1439", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12115] write(3, "1000", 4 [pid 5069] newfstatat(3, "", [pid 12115] <... write resumed>) = 4 [pid 12115] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12115] <... close resumed>) = 0 [pid 12114] <... openat resumed>) = 3 [pid 12113] <... bpf resumed>) = 6 [pid 5071] newfstatat(3, "", [pid 5069] getdents64(3, [pid 12115] symlink("/dev/binderfs", "./binderfs" [pid 12114] write(3, "1000", 4 [pid 12113] exit_group(0 [pid 12114] <... write resumed>) = 4 [pid 12113] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12114] close(3 [pid 12115] <... symlink resumed>) = 0 [pid 12114] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] umount2("./1425/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12114] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12115] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12114] <... symlink resumed>) = 0 [pid 12113] +++ exited with 0 +++ [pid 5071] umount2("./1439/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12115] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1425/binderfs", [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12113, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12114] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12115] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1439/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12115] <... bpf resumed>) = 4 [pid 12114] <... bpf resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1425/binderfs" [pid 12114] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12115] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12114] <... bpf resumed>) = 4 [pid 5071] unlink("./1439/binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 12114] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12115] <... bpf resumed>) = 5 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 12115] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12114] <... bpf resumed>) = 5 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./1404", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 5069] close(3 [pid 12115] <... bpf resumed>) = 6 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12115] exit_group(0 [pid 12114] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12115] <... exit_group resumed>) = ? [pid 12114] <... bpf resumed>) = 6 [pid 5071] rmdir("./1439" [pid 5069] rmdir("./1425" [pid 5068] <... openat resumed>) = 3 [pid 12114] exit_group(0) = ? [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] mkdir("./1426", 0777 [pid 5068] getdents64(3, [pid 5071] mkdir("./1440", 0777 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] umount2("./1404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1404/binderfs", [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12116 attached [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12116] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12116 [pid 5068] unlink("./1404/binderfs"./strace-static-x86_64: Process 12117 attached [pid 12116] <... set_robust_list resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12117] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12117 [pid 12116] chdir("./1426" [pid 12117] <... set_robust_list resumed>) = 0 [pid 12117] chdir("./1440" [pid 12116] <... chdir resumed>) = 0 [pid 5068] getdents64(3, [pid 12117] <... chdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] close(3 [pid 12117] setpgid(0, 0) = 0 [pid 12116] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... close resumed>) = 0 [pid 12116] <... prctl resumed>) = 0 [pid 5068] rmdir("./1404" [pid 12117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12116] setpgid(0, 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12114] +++ exited with 0 +++ [pid 12117] <... openat resumed>) = 3 [pid 12116] <... setpgid resumed>) = 0 [pid 12115] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12114, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12117] write(3, "1000", 4 [pid 5068] mkdir("./1405", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12115, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12117] <... write resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] umount2("./1362", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12117] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12116] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1362", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12117] <... close resumed>) = 0 [pid 12117] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12116] write(3, "1000", 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... openat resumed>) = 3 [pid 12116] <... write resumed>) = 4 [pid 12116] close(3 [pid 12117] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12116] <... close resumed>) = 0 [pid 5066] newfstatat(3, "", ./strace-static-x86_64: Process 12118 attached [pid 12117] <... bpf resumed>) = 3 [pid 12116] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12118 [pid 5067] umount2("./1386", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12118] set_robust_list(0x5555686ec660, 24 [pid 12116] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 12118] <... set_robust_list resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12118] chdir("./1405" [pid 12117] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12116] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./1362/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12118] <... chdir resumed>) = 0 [pid 12117] <... bpf resumed>) = 4 [pid 12116] <... bpf resumed>) = 3 [pid 12118] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12117] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12116] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12118] <... prctl resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1362/binderfs", [pid 12118] setpgid(0, 0 [pid 12116] <... bpf resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1362/binderfs" [pid 12117] <... bpf resumed>) = 5 [pid 5066] <... unlink resumed>) = 0 [pid 12118] <... setpgid resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12116] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] getdents64(3, [pid 12117] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... close resumed>) = 0 [pid 12118] <... openat resumed>) = 3 [pid 5066] rmdir("./1362" [pid 12116] <... bpf resumed>) = 5 [pid 5067] umount2("./1386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12118] write(3, "1000", 4 [pid 12117] <... bpf resumed>) = 6 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 12118] <... write resumed>) = 4 [pid 12116] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] newfstatat(AT_FDCWD, "./1386/binderfs", [pid 12118] close(3 [pid 12117] exit_group(0 [pid 12116] <... bpf resumed>) = 6 [pid 5066] mkdir("./1363", 0777 [pid 12118] <... close resumed>) = 0 [pid 12117] <... exit_group resumed>) = ? [pid 12116] exit_group(0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12116] <... exit_group resumed>) = ? [pid 5067] unlink("./1386/binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12118] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12119 attached [pid 12118] <... bpf resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12118] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12119 [pid 12119] set_robust_list(0x5555686ec660, 24 [pid 5067] <... close resumed>) = 0 [pid 12119] <... set_robust_list resumed>) = 0 [pid 12118] <... bpf resumed>) = 4 [pid 12119] chdir("./1363") = 0 [pid 12117] +++ exited with 0 +++ [pid 5067] rmdir("./1386" [pid 12119] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12118] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12116] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12117, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12119] <... prctl resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12119] setpgid(0, 0 [pid 12118] <... bpf resumed>) = 5 [pid 12119] <... setpgid resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12116, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 12118] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1440", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1387", 0777 [pid 12119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1426", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1440", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12119] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1426", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12119] write(3, "1000", 4) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 12119] close(3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12119] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] newfstatat(3, "", [pid 12119] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./1440/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1440/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1440/binderfs"./strace-static-x86_64: Process 12120 attached [pid 12119] <... symlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12120] set_robust_list(0x5555686ec660, 24 [pid 12119] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5069] umount2("./1426/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12120 [pid 12120] <... set_robust_list resumed>) = 0 [pid 12119] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12119] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 12120] chdir("./1387" [pid 12119] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1426/binderfs", [pid 12120] <... chdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] unlink("./1426/binderfs" [pid 12120] <... prctl resumed>) = 0 [pid 12119] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] close(3 [pid 12120] setpgid(0, 0 [pid 5069] <... unlink resumed>) = 0 [pid 12120] <... setpgid resumed>) = 0 [pid 12119] <... bpf resumed>) = 5 [pid 5071] <... close resumed>) = 0 [pid 12119] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] rmdir("./1440" [pid 5069] getdents64(3, [pid 12120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12119] <... bpf resumed>) = 6 [pid 12118] <... bpf resumed>) = 6 [pid 5071] mkdir("./1441", 0777 [pid 12120] <... openat resumed>) = 3 [pid 12118] exit_group(0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] close(3 [pid 12119] exit_group(0 [pid 12118] <... exit_group resumed>) = ? [pid 12120] write(3, "1000", 4 [pid 12119] <... exit_group resumed>) = ? [pid 12120] <... write resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 12120] close(3 [pid 5069] rmdir("./1426" [pid 12120] <... close resumed>) = 0 [pid 12120] symlink("/dev/binderfs", "./binderfs" [pid 12119] +++ exited with 0 +++ [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... rmdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12119, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12120] <... symlink resumed>) = 0 [pid 5066] umount2("./1363", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1363", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 12121 attached [pid 12120] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12118] +++ exited with 0 +++ [pid 5069] mkdir("./1427", 0777 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12121 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12118, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12121] set_robust_list(0x5555686ec660, 24 [pid 12120] <... bpf resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12121] <... set_robust_list resumed>) = 0 [pid 12120] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12121] chdir("./1441" [pid 12120] <... bpf resumed>) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(3, [pid 12121] <... chdir resumed>) = 0 [pid 12120] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12122 attached [pid 12121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12120] <... bpf resumed>) = 5 [pid 5068] umount2("./1405", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1363/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12121] <... prctl resumed>) = 0 [pid 12122] set_robust_list(0x5555686ec660, 24 [pid 12121] setpgid(0, 0 [pid 12120] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12122 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12122] <... set_robust_list resumed>) = 0 [pid 12121] <... setpgid resumed>) = 0 [pid 12120] <... bpf resumed>) = 6 [pid 5068] openat(AT_FDCWD, "./1405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12122] chdir("./1427" [pid 12121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12120] exit_group(0 [pid 5068] <... openat resumed>) = 3 [pid 5066] newfstatat(AT_FDCWD, "./1363/binderfs", [pid 12122] <... chdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12121] <... openat resumed>) = 3 [pid 12120] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] unlink("./1363/binderfs" [pid 12122] <... prctl resumed>) = 0 [pid 12121] write(3, "1000", 4 [pid 5068] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 12122] setpgid(0, 0 [pid 12120] +++ exited with 0 +++ [pid 12121] <... write resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12120, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12122] <... setpgid resumed>) = 0 [pid 12121] close(3 [pid 5068] umount2("./1405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12121] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12121] symlink("/dev/binderfs", "./binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1405/binderfs", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12121] <... symlink resumed>) = 0 [pid 12122] <... openat resumed>) = 3 [pid 5066] close(3 [pid 12122] write(3, "1000", 4 [pid 12121] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12122] <... write resumed>) = 4 [pid 5068] unlink("./1405/binderfs" [pid 5067] umount2("./1387", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 12122] close(3 [pid 12121] <... bpf resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5066] rmdir("./1363" [pid 12122] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12121] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5067] openat(AT_FDCWD, "./1387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12122] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 12121] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] getdents64(3, [pid 12122] <... symlink resumed>) = 0 [pid 12121] <... bpf resumed>) = 5 [pid 5067] <... openat resumed>) = 3 [pid 5066] mkdir("./1364", 0777 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12122] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(3, "", [pid 5068] close(3 [pid 12121] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12121] exit_group(0) = ? [pid 5066] <... mkdir resumed>) = 0 [pid 12122] <... bpf resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] rmdir("./1405" [pid 12121] +++ exited with 0 +++ [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12122] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12123 attached [pid 12122] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12121, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] mkdir("./1406", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12123] set_robust_list(0x5555686ec660, 24 [pid 5071] umount2("./1441", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12123] <... set_robust_list resumed>) = 0 [pid 12122] <... bpf resumed>) = 5 [pid 5067] umount2("./1387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12123] chdir("./1364" [pid 12122] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12123 [pid 5071] openat(AT_FDCWD, "./1441", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(AT_FDCWD, "./1387/binderfs", [pid 12123] <... chdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] newfstatat(3, "", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] unlink("./1387/binderfs" [pid 12123] <... prctl resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12123] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 12124 attached [pid 12122] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12124] set_robust_list(0x5555686ec660, 24 [pid 5071] getdents64(3, [pid 12124] <... set_robust_list resumed>) = 0 [pid 12123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12122] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12124 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12124] chdir("./1406" [pid 12122] <... exit_group resumed>) = ? [pid 5071] umount2("./1441/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12124] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 12123] <... openat resumed>) = 3 [pid 12123] write(3, "1000", 4) = 4 [pid 5067] <... close resumed>) = 0 [pid 12123] close(3 [pid 12124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12123] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1441/binderfs", [pid 5067] rmdir("./1387" [pid 12124] <... prctl resumed>) = 0 [pid 12123] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12124] setpgid(0, 0 [pid 12123] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12123] <... bpf resumed>) = 3 [pid 12123] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12124] <... setpgid resumed>) = 0 [pid 12122] +++ exited with 0 +++ [pid 5071] unlink("./1441/binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12122, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12123] <... bpf resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 5067] mkdir("./1388", 0777 [pid 12123] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12124] <... openat resumed>) = 3 [pid 12123] <... bpf resumed>) = 5 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12124] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 12124] <... write resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 5069] umount2("./1427", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12123] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12124] close(3 [pid 5071] rmdir("./1441" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12124] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1427", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 12125 attached [pid 12123] <... bpf resumed>) = 6 [pid 5071] mkdir("./1442", 0777 [pid 5069] newfstatat(3, "", [pid 12125] set_robust_list(0x5555686ec660, 24 [pid 12124] symlink("/dev/binderfs", "./binderfs" [pid 12123] exit_group(0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12125 [pid 12125] <... set_robust_list resumed>) = 0 [pid 12125] chdir("./1388" [pid 12124] <... symlink resumed>) = 0 [pid 12123] <... exit_group resumed>) = ? [pid 12125] <... chdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] getdents64(3, [pid 12125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12125] <... prctl resumed>) = 0 [pid 5069] umount2("./1427/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12126 attached [pid 12125] setpgid(0, 0 [pid 12124] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12126] set_robust_list(0x5555686ec660, 24 [pid 12124] <... bpf resumed>) = 3 [pid 12126] <... set_robust_list resumed>) = 0 [pid 12125] <... setpgid resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12126 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12126] chdir("./1442" [pid 12125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12124] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12123] +++ exited with 0 +++ [pid 5069] newfstatat(AT_FDCWD, "./1427/binderfs", [pid 12126] <... chdir resumed>) = 0 [pid 12125] <... openat resumed>) = 3 [pid 12124] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12125] write(3, "1000", 4 [pid 12124] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] unlink("./1427/binderfs" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12123, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12126] <... prctl resumed>) = 0 [pid 12125] <... write resumed>) = 4 [pid 5069] <... unlink resumed>) = 0 [pid 5066] umount2("./1364", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12126] setpgid(0, 0 [pid 12125] close(3 [pid 5069] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./1364", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12124] <... bpf resumed>) = 5 [pid 12126] <... setpgid resumed>) = 0 [pid 12125] <... close resumed>) = 0 [pid 12124] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] close(3 [pid 5066] <... openat resumed>) = 3 [pid 12126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12125] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1427" [pid 5066] newfstatat(3, "", [pid 12126] <... openat resumed>) = 3 [pid 12125] <... symlink resumed>) = 0 [pid 12124] <... bpf resumed>) = 6 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12125] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, [pid 12126] write(3, "1000", 4 [pid 12125] <... bpf resumed>) = 3 [pid 12124] exit_group(0 [pid 5069] mkdir("./1428", 0777 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12126] <... write resumed>) = 4 [pid 12125] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12124] <... exit_group resumed>) = ? [pid 5066] umount2("./1364/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12126] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(AT_FDCWD, "./1364/binderfs", [pid 12126] <... close resumed>) = 0 [pid 12125] <... bpf resumed>) = 4 [pid 12126] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12127 attached [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1364/binderfs" [pid 12124] +++ exited with 0 +++ [pid 12127] set_robust_list(0x5555686ec660, 24 [pid 12126] <... symlink resumed>) = 0 [pid 12125] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12127 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12124, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... unlink resumed>) = 0 [pid 12127] <... set_robust_list resumed>) = 0 [pid 12126] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] getdents64(3, [pid 12127] chdir("./1428" [pid 12126] <... bpf resumed>) = 3 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12126] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12125] <... bpf resumed>) = 5 [pid 12127] <... chdir resumed>) = 0 [pid 5066] close(3 [pid 12125] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12127] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1364" [pid 12127] <... prctl resumed>) = 0 [pid 5068] umount2("./1406", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12126] <... bpf resumed>) = 4 [pid 5066] <... rmdir resumed>) = 0 [pid 12127] setpgid(0, 0 [pid 12126] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1365", 0777 [pid 12127] <... setpgid resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12126] <... bpf resumed>) = 5 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12127] <... openat resumed>) = 3 [pid 12126] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12125] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12128 attached [pid 12127] write(3, "1000", 4 [pid 12126] <... bpf resumed>) = 6 [pid 12125] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1406/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1406/binderfs" [pid 12128] set_robust_list(0x5555686ec660, 24 [pid 12127] <... write resumed>) = 4 [pid 12126] exit_group(0 [pid 12125] <... exit_group resumed>) = ? [pid 5068] <... unlink resumed>) = 0 [pid 12128] <... set_robust_list resumed>) = 0 [pid 12127] close(3 [pid 12126] <... exit_group resumed>) = ? [pid 12127] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12128 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1406" [pid 12126] +++ exited with 0 +++ [pid 12127] symlink("/dev/binderfs", "./binderfs" [pid 12128] chdir("./1365" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12126, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... rmdir resumed>) = 0 [pid 12125] +++ exited with 0 +++ [pid 5071] <... restart_syscall resumed>) = 0 [pid 12127] <... symlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12125, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12128] <... chdir resumed>) = 0 [pid 5071] umount2("./1442", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12127] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] mkdir("./1407", 0777 [pid 5067] umount2("./1388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12127] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1442", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12128] setpgid(0, 0 [pid 12127] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12128] <... setpgid resumed>) = 0 [pid 12128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(3, "", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12129 attached [pid 12128] <... openat resumed>) = 3 [pid 12127] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] newfstatat(3, "", [pid 12129] set_robust_list(0x5555686ec660, 24 [pid 12128] write(3, "1000", 4 [pid 12127] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 12129] <... set_robust_list resumed>) = 0 [pid 12128] <... write resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12127] <... bpf resumed>) = 5 [pid 5071] umount2("./1442/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12129 [pid 5067] getdents64(3, [pid 12129] chdir("./1407" [pid 12128] close(3 [pid 12127] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12129] <... chdir resumed>) = 0 [pid 12128] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1442/binderfs", [pid 5067] umount2("./1388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12129] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12128] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12129] <... prctl resumed>) = 0 [pid 12128] <... symlink resumed>) = 0 [pid 5071] unlink("./1442/binderfs" [pid 5067] newfstatat(AT_FDCWD, "./1388/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12129] setpgid(0, 0 [pid 5067] unlink("./1388/binderfs" [pid 12129] <... setpgid resumed>) = 0 [pid 12128] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12127] <... bpf resumed>) = 6 [pid 5071] <... unlink resumed>) = 0 [pid 12129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12127] exit_group(0 [pid 5071] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 12129] <... openat resumed>) = 3 [pid 12128] <... bpf resumed>) = 3 [pid 12127] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./1388" [pid 12129] write(3, "1000", 4 [pid 12128] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 12129] <... write resumed>) = 4 [pid 12128] <... bpf resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 12129] close(3 [pid 5067] mkdir("./1389", 0777 [pid 12129] <... close resumed>) = 0 [pid 12128] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12127] +++ exited with 0 +++ [pid 5071] rmdir("./1442" [pid 12129] symlink("/dev/binderfs", "./binderfs" [pid 12128] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12127, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... mkdir resumed>) = 0 [pid 12129] <... symlink resumed>) = 0 [pid 5071] mkdir("./1443", 0777 [pid 5069] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12129] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12128] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12129] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1428", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12129] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12130 ./strace-static-x86_64: Process 12131 attached ./strace-static-x86_64: Process 12130 attached [pid 5069] openat(AT_FDCWD, "./1428", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12130] set_robust_list(0x5555686ec660, 24 [pid 12131] set_robust_list(0x5555686ec660, 24 [pid 12130] <... set_robust_list resumed>) = 0 [pid 12131] <... set_robust_list resumed>) = 0 [pid 12130] chdir("./1389" [pid 12128] <... bpf resumed>) = 6 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12131 [pid 5069] <... openat resumed>) = 3 [pid 12130] <... chdir resumed>) = 0 [pid 12129] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12128] exit_group(0 [pid 5069] newfstatat(3, "", [pid 12131] chdir("./1443" [pid 12130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12129] <... bpf resumed>) = 5 [pid 12128] <... exit_group resumed>) = ? [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12131] <... chdir resumed>) = 0 [pid 12130] <... prctl resumed>) = 0 [pid 12128] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 12131] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12130] setpgid(0, 0 [pid 12129] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12128, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12131] <... prctl resumed>) = 0 [pid 12130] <... setpgid resumed>) = 0 [pid 5069] umount2("./1428/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12131] setpgid(0, 0 [pid 5069] newfstatat(AT_FDCWD, "./1428/binderfs", [pid 12131] <... setpgid resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12130] <... openat resumed>) = 3 [pid 12131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12130] write(3, "1000", 4 [pid 5069] unlink("./1428/binderfs" [pid 12131] write(3, "1000", 4 [pid 12130] <... write resumed>) = 4 [pid 5066] umount2("./1365", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12131] <... write resumed>) = 4 [pid 12130] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12131] close(3 [pid 12130] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1365", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12131] <... close resumed>) = 0 [pid 12130] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12131] symlink("/dev/binderfs", "./binderfs" [pid 12130] <... symlink resumed>) = 0 [pid 5069] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 12131] <... symlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12130] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, [pid 5069] <... close resumed>) = 0 [pid 12130] <... bpf resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12131] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] rmdir("./1428" [pid 5066] umount2("./1365/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12130] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1365/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12131] <... bpf resumed>) = 3 [pid 12130] <... bpf resumed>) = 4 [pid 12129] <... bpf resumed>) = 6 [pid 5069] mkdir("./1429", 0777 [pid 12131] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12130] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12129] exit_group(0 [pid 5066] unlink("./1365/binderfs" [pid 12131] <... bpf resumed>) = 4 [pid 12129] <... exit_group resumed>) = ? [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12131] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12130] <... bpf resumed>) = 5 [pid 5066] getdents64(3, [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12132 attached [pid 12131] <... bpf resumed>) = 5 [pid 12130] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12129] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12132] set_robust_list(0x5555686ec660, 24 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12129, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12132 [pid 12132] <... set_robust_list resumed>) = 0 [pid 12131] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12130] <... bpf resumed>) = 6 [pid 5066] close(3 [pid 12132] chdir("./1429" [pid 12131] <... bpf resumed>) = 6 [pid 12130] exit_group(0 [pid 5066] <... close resumed>) = 0 [pid 12131] exit_group(0 [pid 5066] rmdir("./1365" [pid 12132] <... chdir resumed>) = 0 [pid 12130] <... exit_group resumed>) = ? [pid 12132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12131] <... exit_group resumed>) = ? [pid 12132] setpgid(0, 0 [pid 12131] +++ exited with 0 +++ [pid 12130] +++ exited with 0 +++ [pid 5068] umount2("./1407", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12132] <... setpgid resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12131, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] mkdir("./1366", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12130, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] newfstatat(3, "", [pid 12132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1443", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... restart_syscall resumed>) = 0 [pid 5068] umount2("./1407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... mkdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1407/binderfs", [pid 5071] openat(AT_FDCWD, "./1443", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12132] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 3 [pid 5067] umount2("./1389", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] unlink("./1407/binderfs") = 0 [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12133 attached [pid 12132] write(3, "1000", 4 [pid 5071] newfstatat(3, "", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12133] set_robust_list(0x5555686ec660, 24 [pid 12132] <... write resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12133] <... set_robust_list resumed>) = 0 [pid 12132] close(3 [pid 5068] close(3 [pid 12133] chdir("./1366" [pid 12132] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12133 [pid 5071] getdents64(3, [pid 12133] <... chdir resumed>) = 0 [pid 12132] symlink("/dev/binderfs", "./binderfs" [pid 5068] rmdir("./1407" [pid 5067] <... openat resumed>) = 3 [pid 12133] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(3, "", [pid 12133] <... prctl resumed>) = 0 [pid 12132] <... symlink resumed>) = 0 [pid 5071] umount2("./1443/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12133] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./1443/binderfs", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./1443/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1389/binderfs", [pid 12133] <... setpgid resumed>) = 0 [pid 12132] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5068] mkdir("./1408", 0777 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12132] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./1389/binderfs" [pid 12133] <... openat resumed>) = 3 [pid 12132] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] close(3 [pid 5068] <... mkdir resumed>) = 0 [pid 12133] write(3, "1000", 4 [pid 5071] <... close resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12132] <... bpf resumed>) = 4 [pid 12133] <... write resumed>) = 4 [pid 12133] close(3) = 0 [pid 12133] symlink("/dev/binderfs", "./binderfs" [pid 12132] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] rmdir("./1443" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 12133] <... symlink resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12132] <... bpf resumed>) = 5 [pid 5067] close(3./strace-static-x86_64: Process 12134 attached [pid 12133] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12134] set_robust_list(0x5555686ec660, 24 [pid 12132] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] mkdir("./1444", 0777 [pid 12133] <... bpf resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12134 [pid 12134] <... set_robust_list resumed>) = 0 [pid 12132] <... bpf resumed>) = 6 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12134] chdir("./1408" [pid 12133] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12134] <... chdir resumed>) = 0 [pid 12132] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12132] <... exit_group resumed>) = ? [pid 5067] rmdir("./1389" [pid 12134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1390", 0777./strace-static-x86_64: Process 12135 attached [pid 12134] <... prctl resumed>) = 0 [pid 12133] <... bpf resumed>) = 4 [pid 12132] +++ exited with 0 +++ [pid 12134] setpgid(0, 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12135 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12132, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12135] set_robust_list(0x5555686ec660, 24 [pid 12134] <... setpgid resumed>) = 0 [pid 12133] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... mkdir resumed>) = 0 [pid 12135] <... set_robust_list resumed>) = 0 [pid 12134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12133] <... bpf resumed>) = 5 [pid 12135] chdir("./1444" [pid 12134] write(3, "1000", 4 [pid 12133] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] umount2("./1429", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12136 attached [pid 12135] <... chdir resumed>) = 0 [pid 12134] <... write resumed>) = 4 [pid 5069] openat(AT_FDCWD, "./1429", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12134] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12136 [pid 12135] <... prctl resumed>) = 0 [pid 12134] <... close resumed>) = 0 [pid 12136] set_robust_list(0x5555686ec660, 24 [pid 12135] setpgid(0, 0 [pid 12134] symlink("/dev/binderfs", "./binderfs" [pid 12136] <... set_robust_list resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 12135] <... setpgid resumed>) = 0 [pid 12134] <... symlink resumed>) = 0 [pid 12136] chdir("./1390" [pid 12135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12134] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(3, "", [pid 12136] <... chdir resumed>) = 0 [pid 12135] <... openat resumed>) = 3 [pid 12134] <... bpf resumed>) = 3 [pid 12133] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12135] write(3, "1000", 4 [pid 12134] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12133] exit_group(0 [pid 5069] getdents64(3, [pid 12136] <... prctl resumed>) = 0 [pid 12135] <... write resumed>) = 4 [pid 12133] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12134] <... bpf resumed>) = 4 [pid 12136] setpgid(0, 0 [pid 12135] close(3 [pid 5069] umount2("./1429/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12136] <... setpgid resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12135] <... close resumed>) = 0 [pid 12134] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] newfstatat(AT_FDCWD, "./1429/binderfs", [pid 12136] <... openat resumed>) = 3 [pid 12135] symlink("/dev/binderfs", "./binderfs" [pid 12134] <... bpf resumed>) = 5 [pid 12133] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12134] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12133, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12136] write(3, "1000", 4 [pid 5069] unlink("./1429/binderfs" [pid 12136] <... write resumed>) = 4 [pid 12135] <... symlink resumed>) = 0 [pid 12136] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5066] umount2("./1366", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12136] <... close resumed>) = 0 [pid 12135] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12136] symlink("/dev/binderfs", "./binderfs" [pid 5069] getdents64(3, [pid 12136] <... symlink resumed>) = 0 [pid 12135] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12136] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12135] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] close(3 [pid 5066] openat(AT_FDCWD, "./1366", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12136] <... bpf resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5069] rmdir("./1429" [pid 12136] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12135] <... bpf resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 5069] mkdir("./1430", 0777 [pid 12136] <... bpf resumed>) = 4 [pid 12135] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12136] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 12135] <... bpf resumed>) = 5 [pid 12136] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12135] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12136] <... bpf resumed>) = 6 [pid 12134] <... bpf resumed>) = 6 [pid 5066] umount2("./1366/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12136] exit_group(0 [pid 12135] <... bpf resumed>) = 6 [pid 12134] exit_group(0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12136] <... exit_group resumed>) = ? [pid 12135] exit_group(0 [pid 5066] newfstatat(AT_FDCWD, "./1366/binderfs", ./strace-static-x86_64: Process 12137 attached [pid 12134] <... exit_group resumed>) = ? [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12136] +++ exited with 0 +++ [pid 12137] set_robust_list(0x5555686ec660, 24 [pid 12135] <... exit_group resumed>) = ? [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12137 [pid 5066] unlink("./1366/binderfs" [pid 12137] <... set_robust_list resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12136, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12137] chdir("./1430" [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12137] <... chdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] umount2("./1390", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12137] <... prctl resumed>) = 0 [pid 5066] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12137] setpgid(0, 0 [pid 12135] +++ exited with 0 +++ [pid 12134] +++ exited with 0 +++ [pid 5066] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 12137] <... setpgid resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12135, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] rmdir("./1366" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12134, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] umount2("./1390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1390/binderfs", [pid 12137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... rmdir resumed>) = 0 [pid 12137] <... openat resumed>) = 3 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] mkdir("./1367", 0777 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12137] write(3, "1000", 4 [pid 5071] umount2("./1444", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12137] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./1390/binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 12137] close(3 [pid 5071] openat(AT_FDCWD, "./1444", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./1408", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 12137] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12137] symlink("/dev/binderfs", "./binderfs" [pid 5067] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./1408", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12138 attached [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5068] newfstatat(3, "", [pid 5067] close(3 [pid 12138] set_robust_list(0x5555686ec660, 24 [pid 12137] <... symlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... close resumed>) = 0 [pid 12138] <... set_robust_list resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] rmdir("./1390" [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12138 [pid 12138] chdir("./1367" [pid 12137] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1444/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... rmdir resumed>) = 0 [pid 12138] <... chdir resumed>) = 0 [pid 12137] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1408/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./1444/binderfs", [pid 12137] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1408/binderfs", [pid 5071] unlink("./1444/binderfs" [pid 12138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] mkdir("./1391", 0777 [pid 12138] <... prctl resumed>) = 0 [pid 12137] <... bpf resumed>) = 4 [pid 5068] unlink("./1408/binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 12138] setpgid(0, 0 [pid 12137] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12138] <... setpgid resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12137] <... bpf resumed>) = 5 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 12138] <... openat resumed>) = 3 [pid 12137] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] close(3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12138] write(3, "1000", 4./strace-static-x86_64: Process 12139 attached [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12139 [pid 12139] set_robust_list(0x5555686ec660, 24 [pid 12138] <... write resumed>) = 4 [pid 12137] <... bpf resumed>) = 6 [pid 5071] <... close resumed>) = 0 [pid 5068] close(3 [pid 12139] <... set_robust_list resumed>) = 0 [pid 12138] close(3) = 0 [pid 5071] rmdir("./1444" [pid 5068] <... close resumed>) = 0 [pid 12139] chdir("./1391" [pid 12138] symlink("/dev/binderfs", "./binderfs" [pid 12137] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] rmdir("./1408" [pid 12139] <... chdir resumed>) = 0 [pid 12138] <... symlink resumed>) = 0 [pid 12137] <... exit_group resumed>) = ? [pid 5071] mkdir("./1445", 0777 [pid 12139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12139] setpgid(0, 0) = 0 [pid 12139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... rmdir resumed>) = 0 [pid 12139] <... openat resumed>) = 3 [pid 12139] write(3, "1000", 4 [pid 12138] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12137] +++ exited with 0 +++ [pid 5071] <... mkdir resumed>) = 0 [pid 5068] mkdir("./1409", 0777 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12139] <... write resumed>) = 4 [pid 12138] <... bpf resumed>) = 3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12137, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] <... mkdir resumed>) = 0 [pid 12139] close(3 [pid 12138] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12140 attached [pid 12139] <... close resumed>) = 0 [pid 12138] <... bpf resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12140] set_robust_list(0x5555686ec660, 24 [pid 12139] symlink("/dev/binderfs", "./binderfs" [pid 12138] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12140 [pid 12140] <... set_robust_list resumed>) = 0 [pid 12139] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12141 attached [pid 12140] chdir("./1445" [pid 12138] <... bpf resumed>) = 5 [pid 12141] set_robust_list(0x5555686ec660, 24 [pid 12140] <... chdir resumed>) = 0 [pid 12139] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12139] <... bpf resumed>) = 3 [pid 12141] <... set_robust_list resumed>) = 0 [pid 12140] <... prctl resumed>) = 0 [pid 12139] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12141] chdir("./1409" [pid 12140] setpgid(0, 0 [pid 12139] <... bpf resumed>) = 4 [pid 12138] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] umount2("./1430", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12141 [pid 12141] <... chdir resumed>) = 0 [pid 12140] <... setpgid resumed>) = 0 [pid 12139] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12138] <... bpf resumed>) = 6 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12141] <... prctl resumed>) = 0 [pid 12138] exit_group(0 [pid 5069] openat(AT_FDCWD, "./1430", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12141] setpgid(0, 0 [pid 12139] <... bpf resumed>) = 5 [pid 5069] <... openat resumed>) = 3 [pid 12141] <... setpgid resumed>) = 0 [pid 12138] <... exit_group resumed>) = ? [pid 5069] newfstatat(3, "", [pid 12141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12140] <... openat resumed>) = 3 [pid 12139] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12141] <... openat resumed>) = 3 [pid 12140] write(3, "1000", 4 [pid 12139] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 12140] <... write resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12140] close(3 [pid 12139] exit_group(0 [pid 12141] write(3, "1000", 4 [pid 12140] <... close resumed>) = 0 [pid 5069] umount2("./1430/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12139] <... exit_group resumed>) = ? [pid 12141] <... write resumed>) = 4 [pid 12140] symlink("/dev/binderfs", "./binderfs" [pid 12141] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12141] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1430/binderfs", [pid 12141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1430/binderfs" [pid 12141] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12140] <... symlink resumed>) = 0 [pid 12139] +++ exited with 0 +++ [pid 12138] +++ exited with 0 +++ [pid 5069] <... unlink resumed>) = 0 [pid 12141] <... bpf resumed>) = 3 [pid 12140] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12139, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12138, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12141] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12140] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 12141] <... bpf resumed>) = 4 [pid 12140] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 12141] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] rmdir("./1430" [pid 5067] umount2("./1391", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12140] <... bpf resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12140] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12140] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12141] <... bpf resumed>) = 5 [pid 5069] mkdir("./1431", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./1367", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12141] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12140] <... bpf resumed>) = 6 [pid 12141] <... bpf resumed>) = 6 [pid 12140] exit_group(0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./1367", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12141] exit_group(0 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 12141] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(3, "", [pid 12140] <... exit_group resumed>) = ? [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12141] +++ exited with 0 +++ [pid 5067] umount2("./1391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12141, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] newfstatat(AT_FDCWD, "./1391/binderfs", [pid 5066] getdents64(3, [pid 12140] +++ exited with 0 +++ ./strace-static-x86_64: Process 12142 attached [pid 5068] umount2("./1409", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12140, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12142 [pid 12142] set_robust_list(0x5555686ec660, 24 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./1391/binderfs" [pid 12142] <... set_robust_list resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] openat(AT_FDCWD, "./1409", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./1367/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... restart_syscall resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 12142] chdir("./1431" [pid 5066] newfstatat(AT_FDCWD, "./1367/binderfs", [pid 12142] <... chdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] umount2("./1445", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] unlink("./1367/binderfs" [pid 12142] <... prctl resumed>) = 0 [pid 12142] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5067] close(3 [pid 12142] <... setpgid resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1445", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] close(3) = 0 [pid 5071] getdents64(3, [pid 5066] rmdir("./1367" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] rmdir("./1391" [pid 5066] <... rmdir resumed>) = 0 [pid 5068] umount2("./1409/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1445/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12142] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1368", 0777 [pid 12142] write(3, "1000", 4 [pid 5071] newfstatat(AT_FDCWD, "./1445/binderfs", [pid 5068] newfstatat(AT_FDCWD, "./1409/binderfs", [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12142] <... write resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12142] close(3 [pid 5068] unlink("./1409/binderfs" [pid 5067] mkdir("./1392", 0777 [pid 12142] <... close resumed>) = 0 [pid 5071] unlink("./1445/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12142] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12143 attached [pid 12142] <... symlink resumed>) = 0 [pid 5068] getdents64(3, [pid 12143] set_robust_list(0x5555686ec660, 24 [pid 5071] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12143 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12143] <... set_robust_list resumed>) = 0 [pid 12142] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12143] chdir("./1368" [pid 5071] close(3 [pid 5068] <... close resumed>) = 0 [pid 12142] <... bpf resumed>) = 3 [pid 12143] <... chdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] rmdir("./1445" [pid 5068] rmdir("./1409" [pid 12143] <... prctl resumed>) = 0 [pid 12142] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12144 attached [pid 12143] setpgid(0, 0 [pid 12144] set_robust_list(0x5555686ec660, 24 [pid 12143] <... setpgid resumed>) = 0 [pid 12142] <... bpf resumed>) = 4 [pid 5071] mkdir("./1446", 0777 [pid 12144] <... set_robust_list resumed>) = 0 [pid 12143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12142] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12144 [pid 5071] <... mkdir resumed>) = 0 [pid 12144] chdir("./1392" [pid 12143] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12144] <... chdir resumed>) = 0 [pid 12143] write(3, "1000", 4 [pid 12142] <... bpf resumed>) = 5 [pid 5068] mkdir("./1410", 0777./strace-static-x86_64: Process 12145 attached [pid 12144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12145] set_robust_list(0x5555686ec660, 24 [pid 12144] setpgid(0, 0 [pid 12143] <... write resumed>) = 4 [pid 12142] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12145 [pid 12145] <... set_robust_list resumed>) = 0 [pid 12144] <... setpgid resumed>) = 0 [pid 12143] close(3 [pid 12142] <... bpf resumed>) = 6 [pid 5068] <... mkdir resumed>) = 0 [pid 12144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12143] <... close resumed>) = 0 [pid 12145] chdir("./1446" [pid 12143] symlink("/dev/binderfs", "./binderfs" [pid 12142] exit_group(0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12144] <... openat resumed>) = 3 [pid 12145] <... chdir resumed>) = 0 [pid 12144] write(3, "1000", 4 [pid 12142] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12146 attached [pid 12143] <... symlink resumed>) = 0 [pid 12146] set_robust_list(0x5555686ec660, 24 [pid 12143] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12144] <... write resumed>) = 4 [pid 12142] +++ exited with 0 +++ [pid 12145] <... prctl resumed>) = 0 [pid 12144] close(3 [pid 12146] <... set_robust_list resumed>) = 0 [pid 12143] <... bpf resumed>) = 3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12142, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12145] setpgid(0, 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12146 [pid 12144] <... close resumed>) = 0 [pid 12143] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12146] chdir("./1410" [pid 12145] <... setpgid resumed>) = 0 [pid 12144] symlink("/dev/binderfs", "./binderfs" [pid 12146] <... chdir resumed>) = 0 [pid 12145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12144] <... symlink resumed>) = 0 [pid 12143] <... bpf resumed>) = 4 [pid 12146] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12145] <... openat resumed>) = 3 [pid 12144] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12143] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12146] setpgid(0, 0 [pid 12145] write(3, "1000", 4 [pid 12144] <... bpf resumed>) = 3 [pid 5069] umount2("./1431", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12146] <... setpgid resumed>) = 0 [pid 12145] <... write resumed>) = 4 [pid 12144] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12143] <... bpf resumed>) = 5 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12145] close(3 [pid 12144] <... bpf resumed>) = 4 [pid 12143] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12146] <... openat resumed>) = 3 [pid 12145] <... close resumed>) = 0 [pid 12144] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] openat(AT_FDCWD, "./1431", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12146] write(3, "1000", 4 [pid 12145] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... openat resumed>) = 3 [pid 12146] <... write resumed>) = 4 [pid 12145] <... symlink resumed>) = 0 [pid 12144] <... bpf resumed>) = 5 [pid 5069] newfstatat(3, "", [pid 12146] close(3 [pid 12145] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12144] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12146] <... close resumed>) = 0 [pid 12145] <... bpf resumed>) = 3 [pid 5069] getdents64(3, [pid 12146] symlink("/dev/binderfs", "./binderfs" [pid 12145] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12146] <... symlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12145] <... bpf resumed>) = 4 [pid 5069] umount2("./1431/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12146] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12146] <... bpf resumed>) = 3 [pid 12145] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12146] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(AT_FDCWD, "./1431/binderfs", [pid 12143] <... bpf resumed>) = 6 [pid 12144] <... bpf resumed>) = 6 [pid 12143] exit_group(0 [pid 12144] exit_group(0) = ? [pid 12146] <... bpf resumed>) = 4 [pid 12144] +++ exited with 0 +++ [pid 12143] <... exit_group resumed>) = ? [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12146] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12145] <... bpf resumed>) = 5 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12144, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12145] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12145] <... bpf resumed>) = 6 [pid 5069] unlink("./1431/binderfs" [pid 12145] exit_group(0) = ? [pid 5067] umount2("./1392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12146] <... bpf resumed>) = 5 [pid 5069] <... unlink resumed>) = 0 [pid 12146] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12145] +++ exited with 0 +++ [pid 12143] +++ exited with 0 +++ [pid 5067] openat(AT_FDCWD, "./1392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12145, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12143, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... close resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5069] rmdir("./1431" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./1446", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5066] <... restart_syscall resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12146] <... bpf resumed>) = 6 [pid 5069] mkdir("./1432", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12146] exit_group(0 [pid 5071] openat(AT_FDCWD, "./1446", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12146] <... exit_group resumed>) = ? [pid 5071] newfstatat(3, "", [pid 5069] <... mkdir resumed>) = 0 [pid 5066] umount2("./1368", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12146] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1392/binderfs", [pid 5066] openat(AT_FDCWD, "./1368", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12147 attached [pid 5071] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12146, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12147] set_robust_list(0x5555686ec660, 24 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12147 [pid 5067] unlink("./1392/binderfs" [pid 5066] newfstatat(3, "", [pid 12147] <... set_robust_list resumed>) = 0 [pid 5071] umount2("./1446/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12147] chdir("./1432" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1446/binderfs", [pid 5066] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1446/binderfs" [pid 5067] getdents64(3, [pid 12147] <... chdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] getdents64(3, [pid 5067] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... close resumed>) = 0 [pid 5071] close(3 [pid 5067] rmdir("./1392" [pid 12147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... close resumed>) = 0 [pid 5068] umount2("./1410", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5066] umount2("./1368/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12147] <... prctl resumed>) = 0 [pid 5071] rmdir("./1446") = 0 [pid 5067] mkdir("./1393", 0777 [pid 12147] setpgid(0, 0 [pid 5071] mkdir("./1447", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12147] <... setpgid resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1410", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(AT_FDCWD, "./1368/binderfs", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] unlink("./1368/binderfs" [pid 12147] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5066] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12148 attached [pid 12147] write(3, "1000", 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12149 attached [pid 12148] set_robust_list(0x5555686ec660, 24 [pid 12147] <... write resumed>) = 4 [pid 5068] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12148 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12149] set_robust_list(0x5555686ec660, 24 [pid 12148] <... set_robust_list resumed>) = 0 [pid 12147] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12149 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] close(3 [pid 12149] <... set_robust_list resumed>) = 0 [pid 12148] chdir("./1393" [pid 5068] umount2("./1410/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 12147] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./1368" [pid 12148] <... chdir resumed>) = 0 [pid 12147] symlink("/dev/binderfs", "./binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1410/binderfs", [pid 12149] chdir("./1447" [pid 12148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12147] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12149] <... chdir resumed>) = 0 [pid 12148] <... prctl resumed>) = 0 [pid 12147] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1410/binderfs" [pid 5066] mkdir("./1369", 0777 [pid 12149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12148] setpgid(0, 0 [pid 12149] <... prctl resumed>) = 0 [pid 12148] <... setpgid resumed>) = 0 [pid 12147] <... bpf resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 12149] setpgid(0, 0 [pid 12147] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... mkdir resumed>) = 0 [pid 12148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12149] <... setpgid resumed>) = 0 [pid 12147] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12148] <... openat resumed>) = 3 [pid 12147] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12148] write(3, "1000", 4 [pid 12147] <... bpf resumed>) = 5 [pid 12148] <... write resumed>) = 4 ./strace-static-x86_64: Process 12150 attached [pid 12148] close(3 [pid 5068] close(3 [pid 12150] set_robust_list(0x5555686ec660, 24 [pid 12149] <... openat resumed>) = 3 [pid 12148] <... close resumed>) = 0 [pid 12147] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... close resumed>) = 0 [pid 12150] <... set_robust_list resumed>) = 0 [pid 12149] write(3, "1000", 4 [pid 12148] symlink("/dev/binderfs", "./binderfs" [pid 5068] rmdir("./1410" [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12150 [pid 12150] chdir("./1369" [pid 12149] <... write resumed>) = 4 [pid 12148] <... symlink resumed>) = 0 [pid 12147] <... bpf resumed>) = 6 [pid 12150] <... chdir resumed>) = 0 [pid 12149] close(3 [pid 12148] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12149] <... close resumed>) = 0 [pid 12148] <... bpf resumed>) = 3 [pid 12147] exit_group(0 [pid 5068] <... rmdir resumed>) = 0 [pid 12150] <... prctl resumed>) = 0 [pid 12149] symlink("/dev/binderfs", "./binderfs" [pid 12148] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12147] <... exit_group resumed>) = ? [pid 5068] mkdir("./1411", 0777 [pid 12150] setpgid(0, 0 [pid 12149] <... symlink resumed>) = 0 [pid 12150] <... setpgid resumed>) = 0 [pid 12149] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12148] <... bpf resumed>) = 4 [pid 12150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12149] <... bpf resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 12150] <... openat resumed>) = 3 [pid 12149] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12148] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12147] +++ exited with 0 +++ [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12151 attached [pid 12150] write(3, "1000", 4 [pid 12149] <... bpf resumed>) = 4 [pid 12148] <... bpf resumed>) = 5 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12147, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12151] set_robust_list(0x5555686ec660, 24 [pid 12150] <... write resumed>) = 4 [pid 12149] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12148] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12151 [pid 12151] <... set_robust_list resumed>) = 0 [pid 12150] close(3 [pid 5069] <... restart_syscall resumed>) = 0 [pid 12150] <... close resumed>) = 0 [pid 12151] chdir("./1411" [pid 12150] symlink("/dev/binderfs", "./binderfs" [pid 12149] <... bpf resumed>) = 5 [pid 12151] <... chdir resumed>) = 0 [pid 12150] <... symlink resumed>) = 0 [pid 12149] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12151] setpgid(0, 0) = 0 [pid 12150] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12149] <... bpf resumed>) = 6 [pid 12148] <... bpf resumed>) = 6 [pid 5069] umount2("./1432", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12150] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1432", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] newfstatat(3, "", [pid 12148] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12150] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12149] exit_group(0 [pid 5069] getdents64(3, [pid 12151] <... openat resumed>) = 3 [pid 12148] <... exit_group resumed>) = ? [pid 12150] <... bpf resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12149] <... exit_group resumed>) = ? [pid 12151] write(3, "1000", 4 [pid 5069] umount2("./1432/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1432/binderfs", [pid 12151] <... write resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1432/binderfs" [pid 12151] close(3 [pid 12150] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12149] +++ exited with 0 +++ [pid 12148] +++ exited with 0 +++ [pid 5069] <... unlink resumed>) = 0 [pid 12151] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12149, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12151] symlink("/dev/binderfs", "./binderfs" [pid 5069] getdents64(3, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12148, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12151] <... symlink resumed>) = 0 [pid 12150] <... bpf resumed>) = 5 [pid 5071] umount2("./1447", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12151] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12150] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] close(3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12151] <... bpf resumed>) = 3 [pid 12150] <... bpf resumed>) = 6 [pid 5071] openat(AT_FDCWD, "./1447", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12151] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12150] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 12151] <... bpf resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 12151] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12150] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] rmdir("./1432" [pid 5067] umount2("./1393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12151] <... bpf resumed>) = 5 [pid 5071] getdents64(3, [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] mkdir("./1433", 0777 [pid 12150] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... mkdir resumed>) = 0 [pid 12151] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1447/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./1393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12150, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... openat resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", [pid 5066] umount2("./1369", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./1447/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./1369", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] unlink("./1447/binderfs") = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12152 attached 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(3, "", [pid 12152] set_robust_list(0x5555686ec660, 24 [pid 5071] getdents64(3, [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12152 [pid 5067] umount2("./1393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12152] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5071] close(3 [pid 12152] chdir("./1433" [pid 5067] newfstatat(AT_FDCWD, "./1393/binderfs", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] rmdir("./1447" [pid 5066] umount2("./1369/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12152] <... chdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] unlink("./1393/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] mkdir("./1448", 0777 [pid 5067] <... unlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1369/binderfs", [pid 12152] <... prctl resumed>) = 0 [pid 5067] getdents64(3, [pid 12152] setpgid(0, 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12152] <... setpgid resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] unlink("./1369/binderfs" [pid 12152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] close(3) = 0 [pid 5067] rmdir("./1393") = 0 [pid 5067] mkdir("./1394", 0777./strace-static-x86_64: Process 12153 attached [pid 12152] <... openat resumed>) = 3 [pid 12151] <... bpf resumed>) = 6 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 12153] set_robust_list(0x5555686ec660, 24 [pid 12152] write(3, "1000", 4 [pid 12151] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12153 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12153] <... set_robust_list resumed>) = 0 [pid 12152] <... write resumed>) = 4 [pid 12151] <... exit_group resumed>) = ? [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] close(3) = 0 [pid 12153] chdir("./1448" [pid 12152] close(3 [pid 5066] rmdir("./1369" [pid 12152] <... close resumed>) = 0 ./strace-static-x86_64: Process 12154 attached [pid 12154] set_robust_list(0x5555686ec660, 24 [pid 12153] <... chdir resumed>) = 0 [pid 12152] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 12154] <... set_robust_list resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12154 [pid 12153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12152] <... symlink resumed>) = 0 [pid 12151] +++ exited with 0 +++ [pid 12154] chdir("./1394" [pid 5066] mkdir("./1370", 0777 [pid 12154] <... chdir resumed>) = 0 [pid 12153] <... prctl resumed>) = 0 [pid 12152] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12151, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12153] setpgid(0, 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12154] <... prctl resumed>) = 0 [pid 12153] <... setpgid resumed>) = 0 [pid 12152] <... bpf resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12154] setpgid(0, 0) = 0 [pid 12154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 12155 attached ) = 3 [pid 12153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12152] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1411", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12155] set_robust_list(0x5555686ec660, 24 [pid 12154] write(3, "1000", 4 [pid 12153] <... openat resumed>) = 3 [pid 12155] <... set_robust_list resumed>) = 0 [pid 12154] <... write resumed>) = 4 [pid 12152] <... bpf resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12155 [pid 12155] chdir("./1370" [pid 12154] close(3 [pid 12153] write(3, "1000", 4 [pid 12154] <... close resumed>) = 0 [pid 12154] symlink("/dev/binderfs", "./binderfs" [pid 12153] <... write resumed>) = 4 [pid 12155] <... chdir resumed>) = 0 [pid 12154] <... symlink resumed>) = 0 [pid 12153] close(3 [pid 12152] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] openat(AT_FDCWD, "./1411", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12153] <... close resumed>) = 0 [pid 12155] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12154] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12153] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 3 [pid 12155] <... prctl resumed>) = 0 [pid 12154] <... bpf resumed>) = 3 [pid 12153] <... symlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12155] setpgid(0, 0 [pid 12154] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12153] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12152] <... bpf resumed>) = 5 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12155] <... setpgid resumed>) = 0 [pid 12153] <... bpf resumed>) = 3 [pid 12152] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] getdents64(3, [pid 12155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12152] <... bpf resumed>) = 6 [pid 12153] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12154] <... bpf resumed>) = 4 [pid 12153] <... bpf resumed>) = 4 [pid 12152] exit_group(0) = ? [pid 5068] umount2("./1411/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12155] <... openat resumed>) = 3 [pid 12154] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12153] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12155] write(3, "1000", 4 [pid 12154] <... bpf resumed>) = 5 [pid 12152] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12155] <... write resumed>) = 4 [pid 5068] newfstatat(AT_FDCWD, "./1411/binderfs", [pid 12155] close(3 [pid 12153] <... bpf resumed>) = 5 [pid 12155] <... close resumed>) = 0 [pid 12154] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12153] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12155] symlink("/dev/binderfs", "./binderfs" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12152, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] umount2("./1433", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] unlink("./1411/binderfs" [pid 12155] <... symlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1433", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(3, [pid 12155] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... openat resumed>) = 3 [pid 12154] <... bpf resumed>) = 6 [pid 12153] <... bpf resumed>) = 6 [pid 5069] newfstatat(3, "", [pid 5068] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... close resumed>) = 0 [pid 12155] <... bpf resumed>) = 3 [pid 12154] exit_group(0 [pid 12153] exit_group(0 [pid 5069] getdents64(3, [pid 5068] rmdir("./1411" [pid 12155] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12153] <... exit_group resumed>) = ? [pid 12154] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... rmdir resumed>) = 0 [pid 12155] <... bpf resumed>) = 4 [pid 12154] +++ exited with 0 +++ [pid 12153] +++ exited with 0 +++ [pid 12155] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] umount2("./1433/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./1412", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12154, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12155] <... bpf resumed>) = 5 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12153, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] newfstatat(AT_FDCWD, "./1433/binderfs", [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12155] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] unlink("./1433/binderfs" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./1448", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1448", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] umount2("./1394", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 5069] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12156 attached [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./1394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12156] set_robust_list(0x5555686ec660, 24 [pid 5069] close(3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12156 [pid 5067] <... openat resumed>) = 3 [pid 12156] <... set_robust_list resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12156] chdir("./1412" [pid 5069] rmdir("./1433" [pid 5067] newfstatat(3, "", [pid 5071] getdents64(3, [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12156] <... chdir resumed>) = 0 [pid 12156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12156] <... prctl resumed>) = 0 [pid 5069] mkdir("./1434", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12156] setpgid(0, 0 [pid 5071] umount2("./1448/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... mkdir resumed>) = 0 [pid 5067] umount2("./1394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12156] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12157 attached [pid 12156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(AT_FDCWD, "./1448/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1394/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12156] <... openat resumed>) = 3 [pid 5067] unlink("./1394/binderfs" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12157 [pid 5067] <... unlink resumed>) = 0 [pid 12157] set_robust_list(0x5555686ec660, 24) = 0 [pid 12156] write(3, "1000", 4 [pid 5071] unlink("./1448/binderfs" [pid 5067] getdents64(3, [pid 12157] chdir("./1434" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12157] <... chdir resumed>) = 0 [pid 12156] <... write resumed>) = 4 [pid 5071] getdents64(3, [pid 5067] rmdir("./1394" [pid 12157] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12156] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12157] <... prctl resumed>) = 0 [pid 12156] <... close resumed>) = 0 [pid 5071] close(3 [pid 12157] setpgid(0, 0 [pid 12156] symlink("/dev/binderfs", "./binderfs" [pid 12155] <... bpf resumed>) = 6 [pid 5071] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12157] <... setpgid resumed>) = 0 [pid 5071] rmdir("./1448" [pid 12157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12155] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 12156] <... symlink resumed>) = 0 [pid 12157] <... openat resumed>) = 3 [pid 5067] mkdir("./1395", 0777 [pid 12157] write(3, "1000", 4) = 4 [pid 12155] <... exit_group resumed>) = ? [pid 5067] <... mkdir resumed>) = 0 [pid 12157] close(3 [pid 12156] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1449", 0777 [pid 12156] <... bpf resumed>) = 3 [pid 12157] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12157] symlink("/dev/binderfs", "./binderfs" [pid 12156] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 12157] <... symlink resumed>) = 0 [pid 12155] +++ exited with 0 +++ ./strace-static-x86_64: Process 12158 attached [pid 12157] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12156] <... bpf resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12158] set_robust_list(0x5555686ec660, 24 [pid 12157] <... bpf resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12158 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12155, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12158] <... set_robust_list resumed>) = 0 [pid 12157] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 12159 attached [pid 12158] chdir("./1395" [pid 12157] <... bpf resumed>) = 4 [pid 12156] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12159] set_robust_list(0x5555686ec660, 24 [pid 12158] <... chdir resumed>) = 0 [pid 12157] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12159] <... set_robust_list resumed>) = 0 [pid 12158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12157] <... bpf resumed>) = 5 [pid 12156] <... bpf resumed>) = 5 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12159 [pid 12159] chdir("./1449" [pid 12158] <... prctl resumed>) = 0 [pid 12159] <... chdir resumed>) = 0 [pid 12158] setpgid(0, 0 [pid 5066] umount2("./1370", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12158] <... setpgid resumed>) = 0 [pid 12157] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12159] <... prctl resumed>) = 0 [pid 12158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12156] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] openat(AT_FDCWD, "./1370", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12159] setpgid(0, 0 [pid 12158] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 12159] <... setpgid resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12157] <... bpf resumed>) = 6 [pid 12156] <... bpf resumed>) = 6 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12159] <... openat resumed>) = 3 [pid 12158] write(3, "1000", 4 [pid 12157] exit_group(0 [pid 12156] exit_group(0 [pid 5066] getdents64(3, [pid 12159] write(3, "1000", 4 [pid 12158] <... write resumed>) = 4 [pid 12157] <... exit_group resumed>) = ? [pid 12156] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12159] <... write resumed>) = 4 [pid 12158] close(3 [pid 12159] close(3 [pid 12158] <... close resumed>) = 0 [pid 5066] umount2("./1370/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12159] <... close resumed>) = 0 [pid 12158] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12159] symlink("/dev/binderfs", "./binderfs" [pid 12158] <... symlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1370/binderfs", [pid 12159] <... symlink resumed>) = 0 [pid 12158] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12159] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12158] <... bpf resumed>) = 3 [pid 5066] unlink("./1370/binderfs" [pid 12159] <... bpf resumed>) = 3 [pid 12158] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... unlink resumed>) = 0 [pid 12159] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12158] <... bpf resumed>) = 4 [pid 5066] getdents64(3, [pid 12159] <... bpf resumed>) = 4 [pid 12158] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12159] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12158] <... bpf resumed>) = 5 [pid 5066] close(3 [pid 12159] <... bpf resumed>) = 5 [pid 5066] <... close resumed>) = 0 [pid 12159] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12158] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] rmdir("./1370") = 0 [pid 12156] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12156, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] mkdir("./1371", 0777 [pid 12157] +++ exited with 0 +++ [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12157, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5069] umount2("./1434", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1412", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1434", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./1412", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12160 attached [pid 5069] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 12160] set_robust_list(0x5555686ec660, 24 [pid 5069] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12160] <... set_robust_list resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12160] chdir("./1371" [pid 5069] umount2("./1434/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12160 [pid 5068] umount2("./1412/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1434/binderfs", [pid 12160] <... chdir resumed>) = 0 [pid 12160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] newfstatat(AT_FDCWD, "./1412/binderfs", [pid 12160] <... prctl resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12160] setpgid(0, 0 [pid 5068] unlink("./1412/binderfs" [pid 12160] <... setpgid resumed>) = 0 [pid 12159] <... bpf resumed>) = 6 [pid 12158] <... bpf resumed>) = 6 [pid 5069] unlink("./1434/binderfs" [pid 5068] <... unlink resumed>) = 0 [pid 12158] exit_group(0 [pid 5068] getdents64(3, [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12158] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 12160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12159] exit_group(0 [pid 12158] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1412" [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12158, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12159] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12160] <... openat resumed>) = 3 [pid 12160] write(3, "1000", 4 [pid 12159] +++ exited with 0 +++ [pid 5069] close(3 [pid 5068] mkdir("./1413", 0777 [pid 5067] umount2("./1395", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12160] <... write resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12159, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12160] close(3 [pid 5069] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12160] <... close resumed>) = 0 [pid 5069] rmdir("./1434" [pid 5067] openat(AT_FDCWD, "./1395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12160] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./1449", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 [pid 12160] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1449", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 5069] mkdir("./1435", 0777 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12160] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(3, "", [pid 5069] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12160] <... bpf resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12160] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12161 attached [pid 12160] <... bpf resumed>) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12161] set_robust_list(0x5555686ec660, 24 [pid 12160] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] umount2("./1395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12162 attached [pid 12161] <... set_robust_list resumed>) = 0 [pid 5071] umount2("./1449/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12161 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12162] set_robust_list(0x5555686ec660, 24 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1395/binderfs", [pid 12162] <... set_robust_list resumed>) = 0 [pid 12160] <... bpf resumed>) = 5 [pid 5071] newfstatat(AT_FDCWD, "./1449/binderfs", [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12162 [pid 5067] unlink("./1395/binderfs" [pid 12161] chdir("./1413" [pid 12160] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12162] chdir("./1435" [pid 12161] <... chdir resumed>) = 0 [pid 5071] unlink("./1449/binderfs" [pid 12162] <... chdir resumed>) = 0 [pid 12161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... unlink resumed>) = 0 [pid 12162] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12161] <... prctl resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] getdents64(3, [pid 12160] <... bpf resumed>) = 6 [pid 12162] <... prctl resumed>) = 0 [pid 12161] setpgid(0, 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12162] setpgid(0, 0 [pid 12161] <... setpgid resumed>) = 0 [pid 5071] close(3 [pid 5067] close(3 [pid 12162] <... setpgid resumed>) = 0 [pid 12161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12161] <... openat resumed>) = 3 [pid 12160] exit_group(0 [pid 5071] rmdir("./1449" [pid 5067] rmdir("./1395" [pid 12162] <... openat resumed>) = 3 [pid 12161] write(3, "1000", 4 [pid 12160] <... exit_group resumed>) = ? [pid 5071] <... rmdir resumed>) = 0 [pid 12162] write(3, "1000", 4 [pid 12161] <... write resumed>) = 4 [pid 5071] mkdir("./1450", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 12162] <... write resumed>) = 4 [pid 12161] close(3 [pid 12162] close(3 [pid 12161] <... close resumed>) = 0 [pid 12162] <... close resumed>) = 0 [pid 12161] symlink("/dev/binderfs", "./binderfs" [pid 12160] +++ exited with 0 +++ [pid 5071] <... mkdir resumed>) = 0 [pid 5067] mkdir("./1396", 0777 [pid 12162] symlink("/dev/binderfs", "./binderfs" [pid 12161] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12160, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12162] <... symlink resumed>) = 0 [pid 12162] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12161] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 12163 attached [pid 12162] <... bpf resumed>) = 3 [pid 12161] <... bpf resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... restart_syscall resumed>) = 0 [pid 12162] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12163] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12163 [pid 12161] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12162] <... bpf resumed>) = 4 [pid 12162] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12164 ./strace-static-x86_64: Process 12164 attached [pid 12164] set_robust_list(0x5555686ec660, 24 [pid 12163] <... set_robust_list resumed>) = 0 [pid 12161] <... bpf resumed>) = 4 [pid 5066] umount2("./1371", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12163] chdir("./1450" [pid 12161] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12164] <... set_robust_list resumed>) = 0 [pid 12163] <... chdir resumed>) = 0 [pid 12162] <... bpf resumed>) = 5 [pid 12161] <... bpf resumed>) = 5 [pid 5066] openat(AT_FDCWD, "./1371", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12164] chdir("./1396" [pid 12163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... openat resumed>) = 3 [pid 12164] <... chdir resumed>) = 0 [pid 12163] <... prctl resumed>) = 0 [pid 12161] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] newfstatat(3, "", [pid 12164] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12163] setpgid(0, 0 [pid 12162] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12161] <... bpf resumed>) = 6 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12164] <... prctl resumed>) = 0 [pid 12163] <... setpgid resumed>) = 0 [pid 5066] getdents64(3, [pid 12164] setpgid(0, 0 [pid 12163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12162] <... bpf resumed>) = 6 [pid 12161] exit_group(0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12164] <... setpgid resumed>) = 0 [pid 12164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12163] <... openat resumed>) = 3 [pid 12161] <... exit_group resumed>) = ? [pid 5066] umount2("./1371/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12162] exit_group(0 [pid 12164] <... openat resumed>) = 3 [pid 12163] write(3, "1000", 4 [pid 12162] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12164] write(3, "1000", 4 [pid 12163] <... write resumed>) = 4 [pid 5066] newfstatat(AT_FDCWD, "./1371/binderfs", [pid 12164] <... write resumed>) = 4 [pid 12163] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12164] close(3 [pid 12163] <... close resumed>) = 0 [pid 12164] <... close resumed>) = 0 [pid 12164] symlink("/dev/binderfs", "./binderfs" [pid 12163] symlink("/dev/binderfs", "./binderfs" [pid 5066] unlink("./1371/binderfs" [pid 12164] <... symlink resumed>) = 0 [pid 12163] <... symlink resumed>) = 0 [pid 12164] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... unlink resumed>) = 0 [pid 12164] <... bpf resumed>) = 3 [pid 12163] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12164] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12163] <... bpf resumed>) = 3 [pid 5066] getdents64(3, [pid 12164] <... bpf resumed>) = 4 [pid 12164] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12163] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12164] <... bpf resumed>) = 5 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12164] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12163] <... bpf resumed>) = 4 [pid 5066] close(3 [pid 12163] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... close resumed>) = 0 [pid 12163] <... bpf resumed>) = 5 [pid 12163] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12162] +++ exited with 0 +++ [pid 12161] +++ exited with 0 +++ [pid 5066] rmdir("./1371" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12162, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12161, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1372", 0777) = 0 [pid 5069] umount2("./1435", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1435", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./1413", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12166 attached [pid 5069] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] openat(AT_FDCWD, "./1413", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12166 [pid 12166] set_robust_list(0x5555686ec660, 24 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(3, "", [pid 12166] <... set_robust_list resumed>) = 0 [pid 5069] umount2("./1435/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12166] chdir("./1372" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1435/binderfs", [pid 5068] getdents64(3, [pid 12166] <... chdir resumed>) = 0 [pid 12164] <... bpf resumed>) = 6 [pid 12163] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12164] exit_group(0 [pid 5069] unlink("./1435/binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12166] setpgid(0, 0 [pid 12163] exit_group(0 [pid 12164] <... exit_group resumed>) = ? [pid 12166] <... setpgid resumed>) = 0 [pid 12163] <... exit_group resumed>) = ? [pid 5069] <... unlink resumed>) = 0 [pid 5068] umount2("./1413/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12166] write(3, "1000", 4 [pid 12164] +++ exited with 0 +++ [pid 12163] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1413/binderfs", [pid 12166] <... write resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12163, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12164, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1435" [pid 12166] close(3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... rmdir resumed>) = 0 [pid 12166] <... close resumed>) = 0 [pid 5069] mkdir("./1436", 0777 [pid 5068] unlink("./1413/binderfs" [pid 5067] <... restart_syscall resumed>) = 0 [pid 12166] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... unlink resumed>) = 0 [pid 12166] <... symlink resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5071] umount2("./1450", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] getdents64(3, [pid 12166] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./1396", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12166] <... bpf resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1450", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12166] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12167 attached [pid 12166] <... bpf resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12167 [pid 5068] close(3 [pid 5067] <... openat resumed>) = 3 [pid 12167] set_robust_list(0x5555686ec660, 24 [pid 12166] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... close resumed>) = 0 [pid 12167] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] rmdir("./1413" [pid 5067] newfstatat(3, "", [pid 12167] chdir("./1436" [pid 5068] <... rmdir resumed>) = 0 [pid 12167] <... chdir resumed>) = 0 [pid 12166] <... bpf resumed>) = 5 [pid 5071] getdents64(3, [pid 5068] mkdir("./1414", 0777 [pid 12167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12166] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12167] <... prctl resumed>) = 0 [pid 12167] setpgid(0, 0 [pid 5071] umount2("./1450/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12167] <... setpgid resumed>) = 0 [pid 12166] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12166] exit_group(0 [pid 5071] newfstatat(AT_FDCWD, "./1450/binderfs", [pid 5067] umount2("./1396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12166] <... exit_group resumed>) = ? [pid 5071] unlink("./1450/binderfs" [pid 5067] newfstatat(AT_FDCWD, "./1396/binderfs", [pid 12167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12166] +++ exited with 0 +++ [pid 12167] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12166, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... unlink resumed>) = 0 [pid 12167] write(3, "1000", 4./strace-static-x86_64: Process 12168 attached ) = 4 [pid 5071] getdents64(3, [pid 5067] unlink("./1396/binderfs" [pid 5066] umount2("./1372", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12168] set_robust_list(0x5555686ec660, 24 [pid 12167] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12168] <... set_robust_list resumed>) = 0 [pid 12167] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12168 [pid 5067] <... unlink resumed>) = 0 [pid 5071] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12167] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... close resumed>) = 0 [pid 12168] chdir("./1414" [pid 12167] <... symlink resumed>) = 0 [pid 5071] rmdir("./1450" [pid 5067] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1372", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12168] <... chdir resumed>) = 0 [pid 12167] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12168] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12167] <... bpf resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] close(3 [pid 12168] <... prctl resumed>) = 0 [pid 12167] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... close resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12168] setpgid(0, 0 [pid 5071] mkdir("./1451", 0777 [pid 12168] <... setpgid resumed>) = 0 [pid 12167] <... bpf resumed>) = 4 [pid 5067] rmdir("./1396" [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12168] <... openat resumed>) = 3 [pid 12167] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12169 attached [pid 12168] write(3, "1000", 4 [pid 5066] umount2("./1372/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12167] <... bpf resumed>) = 5 [pid 12168] <... write resumed>) = 4 [pid 12167] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] mkdir("./1397", 0777 [pid 12168] close(3 [pid 12169] set_robust_list(0x5555686ec660, 24 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12169] <... set_robust_list resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1372/binderfs", [pid 12169] chdir("./1451" [pid 12168] <... close resumed>) = 0 [pid 12167] <... bpf resumed>) = 6 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12169] <... chdir resumed>) = 0 [pid 12168] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12169 [pid 5066] unlink("./1372/binderfs" [pid 12169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12169] <... prctl resumed>) = 0 [pid 5066] getdents64(3, [pid 12169] setpgid(0, 0 [pid 12168] <... symlink resumed>) = 0 [pid 12167] exit_group(0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12169] <... setpgid resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] close(3 [pid 12169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12168] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12167] <... exit_group resumed>) = ? [pid 5066] <... close resumed>) = 0 [pid 12169] <... openat resumed>) = 3 [pid 5066] rmdir("./1372"./strace-static-x86_64: Process 12170 attached ) = 0 [pid 12170] set_robust_list(0x5555686ec660, 24 [pid 12169] write(3, "1000", 4) = 4 [pid 12170] <... set_robust_list resumed>) = 0 [pid 12169] close(3 [pid 12170] chdir("./1397" [pid 12169] <... close resumed>) = 0 [pid 12168] <... bpf resumed>) = 3 [pid 12167] +++ exited with 0 +++ [pid 5066] mkdir("./1373", 0777 [pid 12170] <... chdir resumed>) = 0 [pid 12169] symlink("/dev/binderfs", "./binderfs" [pid 12168] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12167, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12170 [pid 5066] <... mkdir resumed>) = 0 [pid 12170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12169] <... symlink resumed>) = 0 [pid 12168] <... bpf resumed>) = 4 [pid 12170] <... prctl resumed>) = 0 [pid 12169] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12168] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12170] setpgid(0, 0 [pid 12169] <... bpf resumed>) = 3 [pid 12168] <... bpf resumed>) = 5 [pid 5069] umount2("./1436", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12171 attached [pid 12170] <... setpgid resumed>) = 0 [pid 12169] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12171] set_robust_list(0x5555686ec660, 24 [pid 12170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12169] <... bpf resumed>) = 4 [pid 12168] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12171 [pid 12171] <... set_robust_list resumed>) = 0 [pid 12169] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] openat(AT_FDCWD, "./1436", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12171] chdir("./1373" [pid 12170] <... openat resumed>) = 3 [pid 12169] <... bpf resumed>) = 5 [pid 5069] <... openat resumed>) = 3 [pid 12171] <... chdir resumed>) = 0 [pid 12170] write(3, "1000", 4 [pid 5069] newfstatat(3, "", [pid 12169] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12170] <... write resumed>) = 4 [pid 12171] <... prctl resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12171] setpgid(0, 0 [pid 12170] close(3 [pid 12171] <... setpgid resumed>) = 0 [pid 5069] getdents64(3, [pid 12170] <... close resumed>) = 0 [pid 12170] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12170] <... symlink resumed>) = 0 [pid 5069] umount2("./1436/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12171] <... openat resumed>) = 3 [pid 12170] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12171] write(3, "1000", 4) = 4 [pid 12170] <... bpf resumed>) = 3 [pid 5069] newfstatat(AT_FDCWD, "./1436/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12171] close(3 [pid 12170] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] unlink("./1436/binderfs" [pid 12171] <... close resumed>) = 0 [pid 12170] <... bpf resumed>) = 4 [pid 5069] <... unlink resumed>) = 0 [pid 12171] symlink("/dev/binderfs", "./binderfs" [pid 12170] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] getdents64(3, [pid 12171] <... symlink resumed>) = 0 [pid 12169] <... bpf resumed>) = 6 [pid 12168] <... bpf resumed>) = 6 [pid 12169] exit_group(0) = ? [pid 12168] exit_group(0 [pid 12170] <... bpf resumed>) = 5 [pid 12171] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12171] <... bpf resumed>) = 3 [pid 5069] close(3 [pid 12170] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12169] +++ exited with 0 +++ [pid 12168] <... exit_group resumed>) = ? [pid 12171] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 12171] <... bpf resumed>) = 4 [pid 12170] <... bpf resumed>) = 6 [pid 5069] rmdir("./1436" [pid 12171] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12169, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12170] exit_group(0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12170] <... exit_group resumed>) = ? [pid 5071] <... restart_syscall resumed>) = 0 [pid 12171] <... bpf resumed>) = 5 [pid 5069] mkdir("./1437", 0777 [pid 12171] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1451", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] openat(AT_FDCWD, "./1451", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12172 attached [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12172 [pid 12172] set_robust_list(0x5555686ec660, 24 [pid 5071] umount2("./1451/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12172] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1451/binderfs", [pid 12172] chdir("./1437" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1451/binderfs" [pid 12172] <... chdir resumed>) = 0 [pid 12170] +++ exited with 0 +++ [pid 12168] +++ exited with 0 +++ [pid 12172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... unlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12170, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12172] <... prctl resumed>) = 0 [pid 5071] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12168, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12172] setpgid(0, 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./1414", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 12171] <... bpf resumed>) = 6 [pid 5071] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1414", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12172] <... setpgid resumed>) = 0 [pid 5067] umount2("./1397", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12171] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12171] <... exit_group resumed>) = ? [pid 12172] <... openat resumed>) = 3 [pid 5071] rmdir("./1451" [pid 5068] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 12172] write(3, "1000", 4 [pid 12171] +++ exited with 0 +++ [pid 5068] newfstatat(3, "", [pid 5067] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12171, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12172] <... write resumed>) = 4 [pid 5071] mkdir("./1452", 0777 [pid 5068] getdents64(3, [pid 5067] newfstatat(3, "", [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12172] close(3 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12172] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1414/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 12172] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1373", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12173 attached [pid 12172] <... symlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12173 [pid 5068] newfstatat(AT_FDCWD, "./1414/binderfs", [pid 5067] umount2("./1397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12173] set_robust_list(0x5555686ec660, 24) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12173] chdir("./1452" [pid 12172] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] openat(AT_FDCWD, "./1373", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12173] <... chdir resumed>) = 0 [pid 5068] unlink("./1414/binderfs" [pid 5067] newfstatat(AT_FDCWD, "./1397/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 12173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12172] <... bpf resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 12173] <... prctl resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12172] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12173] setpgid(0, 0 [pid 5068] <... unlink resumed>) = 0 [pid 12173] <... setpgid resumed>) = 0 [pid 5067] unlink("./1397/binderfs" [pid 5066] getdents64(3, [pid 12172] <... bpf resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] umount2("./1373/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12172] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12173] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 5066] newfstatat(AT_FDCWD, "./1373/binderfs", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1373/binderfs" [pid 12173] write(3, "1000", 4 [pid 12172] <... bpf resumed>) = 5 [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 12173] <... write resumed>) = 4 [pid 12172] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... close resumed>) = 0 [pid 5067] close(3 [pid 12173] close(3 [pid 5068] rmdir("./1414" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12173] <... close resumed>) = 0 [pid 12172] <... bpf resumed>) = 6 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] close(3 [pid 12173] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... close resumed>) = 0 [pid 12172] exit_group(0 [pid 5067] rmdir("./1397" [pid 5066] rmdir("./1373" [pid 12173] <... symlink resumed>) = 0 [pid 5068] mkdir("./1415", 0777 [pid 12173] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... rmdir resumed>) = 0 [pid 12172] <... exit_group resumed>) = ? [pid 5067] <... rmdir resumed>) = 0 [pid 12173] <... bpf resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 12173] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] mkdir("./1374", 0777 [pid 12173] <... bpf resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12173] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12172] +++ exited with 0 +++ [pid 5067] mkdir("./1398", 0777 [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12174 attached [pid 12173] <... bpf resumed>) = 5 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12174] set_robust_list(0x5555686ec660, 24) = 0 [pid 12173] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12172, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12174 [pid 12174] chdir("./1415" [pid 5069] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12174] <... chdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] umount2("./1437", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12174] setpgid(0, 0) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] openat(AT_FDCWD, "./1437", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12174] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12174] write(3, "1000", 4 [pid 5069] getdents64(3, [pid 12174] <... write resumed>) = 4 [pid 12174] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12174] <... close resumed>) = 0 [pid 12174] symlink("/dev/binderfs", "./binderfs" [pid 5069] umount2("./1437/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12174] <... symlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12175 attached ./strace-static-x86_64: Process 12176 attached [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12175 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12176 [pid 12175] set_robust_list(0x5555686ec660, 24 [pid 12174] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12176] set_robust_list(0x5555686ec660, 24 [pid 5069] newfstatat(AT_FDCWD, "./1437/binderfs", [pid 12175] <... set_robust_list resumed>) = 0 [pid 12176] <... set_robust_list resumed>) = 0 [pid 12174] <... bpf resumed>) = 3 [pid 12173] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12176] chdir("./1398" [pid 12175] chdir("./1374" [pid 12174] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12173] exit_group(0 [pid 5069] unlink("./1437/binderfs" [pid 12176] <... chdir resumed>) = 0 [pid 12175] <... chdir resumed>) = 0 [pid 12174] <... bpf resumed>) = 4 [pid 12176] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12176] <... prctl resumed>) = 0 [pid 12175] <... prctl resumed>) = 0 [pid 12176] setpgid(0, 0 [pid 12175] setpgid(0, 0 [pid 12174] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12173] <... exit_group resumed>) = ? [pid 5069] <... unlink resumed>) = 0 [pid 12176] <... setpgid resumed>) = 0 [pid 12175] <... setpgid resumed>) = 0 [pid 12176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12173] +++ exited with 0 +++ [pid 12176] <... openat resumed>) = 3 [pid 12175] write(3, "1000", 4) = 4 [pid 12175] close(3 [pid 12174] <... bpf resumed>) = 5 [pid 5069] getdents64(3, [pid 12176] write(3, "1000", 4 [pid 12175] <... close resumed>) = 0 [pid 12176] <... write resumed>) = 4 [pid 12175] symlink("/dev/binderfs", "./binderfs" [pid 12176] close(3 [pid 12175] <... symlink resumed>) = 0 [pid 12174] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12173, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12176] <... close resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] close(3 [pid 12176] symlink("/dev/binderfs", "./binderfs" [pid 12175] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12176] <... symlink resumed>) = 0 [pid 5069] rmdir("./1437" [pid 12175] <... bpf resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 12176] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12175] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1452", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1438", 0777 [pid 12176] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... mkdir resumed>) = 0 [pid 12176] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12175] <... bpf resumed>) = 4 [pid 12175] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12176] <... bpf resumed>) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12176] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12175] <... bpf resumed>) = 5 [pid 12174] <... bpf resumed>) = 6 ./strace-static-x86_64: Process 12177 attached [pid 12174] exit_group(0 [pid 5071] openat(AT_FDCWD, "./1452", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12174] <... exit_group resumed>) = ? [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12177 [pid 12177] set_robust_list(0x5555686ec660, 24 [pid 12176] <... bpf resumed>) = 5 [pid 12175] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... openat resumed>) = 3 [pid 12177] <... set_robust_list resumed>) = 0 [pid 12174] +++ exited with 0 +++ [pid 12177] chdir("./1438" [pid 5071] newfstatat(3, "", [pid 12176] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12177] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12174, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12177] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 5068] umount2("./1415", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12177] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12177] setpgid(0, 0 [pid 5071] umount2("./1452/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./1415", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12177] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 12177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(AT_FDCWD, "./1452/binderfs", [pid 5068] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12177] <... openat resumed>) = 3 [pid 5071] unlink("./1452/binderfs" [pid 5068] getdents64(3, [pid 12177] write(3, "1000", 4 [pid 5071] <... unlink resumed>) = 0 [pid 12177] <... write resumed>) = 4 [pid 12177] close(3) = 0 [pid 12177] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12177] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5068] umount2("./1415/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12177] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5071] close(3 [pid 5068] newfstatat(AT_FDCWD, "./1415/binderfs", [pid 12177] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 12177] <... bpf resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] rmdir("./1452" [pid 5068] unlink("./1415/binderfs" [pid 12177] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12177] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12176] <... bpf resumed>) = 6 [pid 12175] <... bpf resumed>) = 6 [pid 5071] mkdir("./1453", 0777 [pid 5068] getdents64(3, [pid 12177] <... bpf resumed>) = 6 [pid 12176] exit_group(0 [pid 12177] exit_group(0 [pid 12176] <... exit_group resumed>) = ? [pid 12175] exit_group(0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12177] <... exit_group resumed>) = ? [pid 12175] <... exit_group resumed>) = ? [pid 12176] +++ exited with 0 +++ [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] close(3) = 0 [pid 5068] rmdir("./1415"./strace-static-x86_64: Process 12178 attached [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12176, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12178] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12178 [pid 5067] umount2("./1398", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12178] <... set_robust_list resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 12178] chdir("./1453" [pid 5067] openat(AT_FDCWD, "./1398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12178] <... chdir resumed>) = 0 [pid 5068] mkdir("./1416", 0777 [pid 5067] <... openat resumed>) = 3 [pid 12178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 12175] +++ exited with 0 +++ [pid 12178] setpgid(0, 0 [pid 12177] +++ exited with 0 +++ [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12178] <... setpgid resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12177, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12179 attached [pid 12178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12179] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12179 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12175, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] umount2("./1398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12179] <... set_robust_list resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1374", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12179] chdir("./1416" [pid 12178] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1374", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12179] <... chdir resumed>) = 0 [pid 5069] umount2("./1438", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(AT_FDCWD, "./1398/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 12179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12178] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12179] <... prctl resumed>) = 0 [pid 12178] <... write resumed>) = 4 [pid 5069] openat(AT_FDCWD, "./1438", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] unlink("./1398/binderfs" [pid 5066] newfstatat(3, "", [pid 12179] setpgid(0, 0 [pid 12178] close(3 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... unlink resumed>) = 0 [pid 12179] <... setpgid resumed>) = 0 [pid 12178] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12178] symlink("/dev/binderfs", "./binderfs" [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 12179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(3, "", [pid 12178] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12178] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1374/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12179] <... openat resumed>) = 3 [pid 12178] <... bpf resumed>) = 3 [pid 5069] getdents64(3, [pid 5067] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12179] write(3, "1000", 4 [pid 12178] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... close resumed>) = 0 [pid 12179] <... write resumed>) = 4 [pid 12178] <... bpf resumed>) = 4 [pid 5069] umount2("./1438/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1398" [pid 5066] newfstatat(AT_FDCWD, "./1374/binderfs", [pid 12178] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12179] close(3 [pid 12178] <... bpf resumed>) = 5 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12179] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1438/binderfs", [pid 5067] mkdir("./1399", 0777 [pid 5066] unlink("./1374/binderfs" [pid 12179] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12179] <... symlink resumed>) = 0 [pid 12178] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] unlink("./1438/binderfs" [pid 5066] getdents64(3, [pid 12179] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12179] <... bpf resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1374" [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./1438"./strace-static-x86_64: Process 12180 attached [pid 12179] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12178] <... bpf resumed>) = 6 [pid 5066] <... rmdir resumed>) = 0 [pid 12180] set_robust_list(0x5555686ec660, 24 [pid 12179] <... bpf resumed>) = 4 [pid 12178] exit_group(0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12180 [pid 5066] mkdir("./1375", 0777 [pid 12180] <... set_robust_list resumed>) = 0 [pid 12178] <... exit_group resumed>) = ? [pid 12180] chdir("./1399" [pid 12179] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] mkdir("./1439", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 12178] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12178, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12180] <... chdir resumed>) = 0 [pid 12179] <... bpf resumed>) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./1453", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12180] <... prctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1453", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12180] setpgid(0, 0 [pid 5071] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12182 attached ./strace-static-x86_64: Process 12181 attached [pid 12180] <... setpgid resumed>) = 0 [pid 12179] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(3, "", [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12181 [pid 12181] set_robust_list(0x5555686ec660, 24 [pid 12182] set_robust_list(0x5555686ec660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12182] <... set_robust_list resumed>) = 0 [pid 12182] chdir("./1375" [pid 12181] <... set_robust_list resumed>) = 0 [pid 12180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12182 [pid 12182] <... chdir resumed>) = 0 [pid 12182] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12181] chdir("./1439" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12182] <... prctl resumed>) = 0 [pid 12182] setpgid(0, 0 [pid 5071] umount2("./1453/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12182] <... setpgid resumed>) = 0 [pid 12181] <... chdir resumed>) = 0 [pid 12180] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12180] write(3, "1000", 4 [pid 5071] newfstatat(AT_FDCWD, "./1453/binderfs", [pid 12182] <... openat resumed>) = 3 [pid 12181] <... prctl resumed>) = 0 [pid 12180] <... write resumed>) = 4 [pid 12180] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12181] setpgid(0, 0 [pid 12182] write(3, "1000", 4 [pid 12181] <... setpgid resumed>) = 0 [pid 12180] <... close resumed>) = 0 [pid 5071] unlink("./1453/binderfs" [pid 12182] <... write resumed>) = 4 [pid 12180] symlink("/dev/binderfs", "./binderfs" [pid 12182] close(3 [pid 5071] <... unlink resumed>) = 0 [pid 12181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12182] <... close resumed>) = 0 [pid 12180] <... symlink resumed>) = 0 [pid 12182] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 12179] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12182] <... symlink resumed>) = 0 [pid 5071] close(3) = 0 [pid 12179] exit_group(0 [pid 5071] rmdir("./1453" [pid 12182] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12181] <... openat resumed>) = 3 [pid 12180] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12179] <... exit_group resumed>) = ? [pid 5071] <... rmdir resumed>) = 0 [pid 12182] <... bpf resumed>) = 3 [pid 12181] write(3, "1000", 4 [pid 12180] <... bpf resumed>) = 3 [pid 5071] mkdir("./1454", 0777 [pid 12182] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12181] <... write resumed>) = 4 [pid 12180] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12179] +++ exited with 0 +++ [pid 12182] <... bpf resumed>) = 4 [pid 12182] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12181] close(3 [pid 5071] <... mkdir resumed>) = 0 [pid 12180] <... bpf resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12182] <... bpf resumed>) = 5 [pid 12181] <... close resumed>) = 0 [pid 12180] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12179, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12183 attached [pid 12182] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12181] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./1416", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12183] set_robust_list(0x5555686ec660, 24 [pid 12182] <... bpf resumed>) = 6 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12183] <... set_robust_list resumed>) = 0 [pid 12182] exit_group(0 [pid 12180] <... bpf resumed>) = 5 [pid 12183] chdir("./1454" [pid 12182] <... exit_group resumed>) = ? [pid 12181] <... symlink resumed>) = 0 [pid 12180] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12183 [pid 5068] openat(AT_FDCWD, "./1416", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12183] <... chdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] newfstatat(3, "", [pid 12183] <... prctl resumed>) = 0 [pid 12183] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12183] <... setpgid resumed>) = 0 [pid 12183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12181] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12183] <... openat resumed>) = 3 [pid 12180] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 12183] write(3, "1000", 4 [pid 12181] <... bpf resumed>) = 3 [pid 12180] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12180] <... exit_group resumed>) = ? [pid 5068] umount2("./1416/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12181] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12183] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12183] close(3 [pid 12181] <... bpf resumed>) = 4 [pid 5068] newfstatat(AT_FDCWD, "./1416/binderfs", [pid 12183] <... close resumed>) = 0 [pid 12182] +++ exited with 0 +++ [pid 12181] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12183] symlink("/dev/binderfs", "./binderfs" [pid 12180] +++ exited with 0 +++ [pid 5068] unlink("./1416/binderfs" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12182, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12181] <... bpf resumed>) = 5 [pid 5068] <... unlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12180, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12183] <... symlink resumed>) = 0 [pid 12181] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5068] getdents64(3, [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./1375", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12183] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12183] <... bpf resumed>) = 3 [pid 5068] close(3 [pid 5066] openat(AT_FDCWD, "./1375", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12183] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12181] <... bpf resumed>) = 6 [pid 5066] newfstatat(3, "", [pid 12183] <... bpf resumed>) = 4 [pid 12181] exit_group(0 [pid 5068] rmdir("./1416" [pid 5067] umount2("./1399", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12183] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12181] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12183] <... bpf resumed>) = 5 [pid 5067] umount2("./1399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5067] newfstatat(AT_FDCWD, "./1399/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] unlink("./1399/binderfs") = 0 [pid 5067] getdents64(3, [pid 12183] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12181] +++ exited with 0 +++ [pid 5068] mkdir("./1417", 0777 [pid 5066] umount2("./1375/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12181, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1375/binderfs", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1375/binderfs" [pid 5068] <... mkdir resumed>) = 0 [pid 5067] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5069] umount2("./1439", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./1375" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./1399" [pid 12183] <... bpf resumed>) = 6 [pid 5069] openat(AT_FDCWD, "./1439", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12183] exit_group(0 [pid 5069] <... openat resumed>) = 3 [pid 12183] <... exit_group resumed>) = ? [pid 5066] mkdir("./1376", 0777./strace-static-x86_64: Process 12184 attached [pid 5069] newfstatat(3, "", [pid 5067] mkdir("./1400", 0777 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12184] set_robust_list(0x5555686ec660, 24 [pid 12183] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12184 [pid 5066] <... mkdir resumed>) = 0 [pid 12184] <... set_robust_list resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12183, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] umount2("./1439/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12184] chdir("./1417" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12185 attached [pid 12184] <... chdir resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12185] set_robust_list(0x5555686ec660, 24 [pid 12184] <... prctl resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1439/binderfs", ./strace-static-x86_64: Process 12186 attached [pid 12185] <... set_robust_list resumed>) = 0 [pid 12184] setpgid(0, 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12186] set_robust_list(0x5555686ec660, 24 [pid 12185] chdir("./1376" [pid 12184] <... setpgid resumed>) = 0 [pid 5071] umount2("./1454", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] unlink("./1439/binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12186 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12185 [pid 12186] <... set_robust_list resumed>) = 0 [pid 12184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... unlink resumed>) = 0 [pid 12186] chdir("./1400" [pid 12185] <... chdir resumed>) = 0 [pid 12185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] openat(AT_FDCWD, "./1454", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(3, [pid 12186] <... chdir resumed>) = 0 [pid 12185] <... prctl resumed>) = 0 [pid 12184] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 12186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] newfstatat(3, "", [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12186] <... prctl resumed>) = 0 [pid 12185] setpgid(0, 0 [pid 12184] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] close(3 [pid 12186] setpgid(0, 0 [pid 12185] <... setpgid resumed>) = 0 [pid 12184] <... write resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 12186] <... setpgid resumed>) = 0 [pid 12186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12184] close(3 [pid 5069] rmdir("./1439" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12184] <... close resumed>) = 0 [pid 12186] <... openat resumed>) = 3 [pid 12185] <... openat resumed>) = 3 [pid 12184] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./1454/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12184] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 12186] write(3, "1000", 4) = 4 [pid 12185] write(3, "1000", 4 [pid 5071] newfstatat(AT_FDCWD, "./1454/binderfs", [pid 5069] mkdir("./1440", 0777 [pid 12186] close(3 [pid 12185] <... write resumed>) = 4 [pid 12184] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12186] <... close resumed>) = 0 [pid 12185] close(3 [pid 12184] <... bpf resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 12186] symlink("/dev/binderfs", "./binderfs" [pid 12185] <... close resumed>) = 0 [pid 12184] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] unlink("./1454/binderfs" [pid 12186] <... symlink resumed>) = 0 [pid 12185] symlink("/dev/binderfs", "./binderfs" [pid 12184] <... bpf resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12185] <... symlink resumed>) = 0 [pid 12184] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 12186] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12185] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12184] <... bpf resumed>) = 5 [pid 12186] <... bpf resumed>) = 3 [pid 12185] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12187 attached [pid 12186] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12187] set_robust_list(0x5555686ec660, 24 [pid 12185] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] close(3 [pid 12187] <... set_robust_list resumed>) = 0 [pid 12186] <... bpf resumed>) = 4 [pid 12185] <... bpf resumed>) = 4 [pid 12184] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... close resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12187 [pid 12187] chdir("./1440" [pid 12186] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12185] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12184] <... bpf resumed>) = 6 [pid 5071] rmdir("./1454" [pid 12187] <... chdir resumed>) = 0 [pid 12186] <... bpf resumed>) = 5 [pid 12185] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 12187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12186] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12184] exit_group(0 [pid 12187] <... prctl resumed>) = 0 [pid 12186] <... bpf resumed>) = 6 [pid 12185] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12184] <... exit_group resumed>) = ? [pid 5071] mkdir("./1455", 0777 [pid 12187] setpgid(0, 0 [pid 12186] exit_group(0 [pid 12187] <... setpgid resumed>) = 0 [pid 12186] <... exit_group resumed>) = ? [pid 12187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12185] <... bpf resumed>) = 6 [pid 5071] <... mkdir resumed>) = 0 [pid 12184] +++ exited with 0 +++ [pid 12185] exit_group(0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12184, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12187] <... openat resumed>) = 3 [pid 12185] <... exit_group resumed>) = ? [pid 5068] umount2("./1417", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12187] write(3, "1000", 4 [pid 5068] openat(AT_FDCWD, "./1417", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12187] <... write resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 12187] close(3 [pid 5068] newfstatat(3, "", [pid 12187] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12187] symlink("/dev/binderfs", "./binderfs" [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12188 attached [pid 12187] <... symlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1417/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12188] set_robust_list(0x5555686ec660, 24 [pid 12187] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12188 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12188] <... set_robust_list resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1417/binderfs", [pid 12187] <... bpf resumed>) = 3 [pid 12188] chdir("./1455") = 0 [pid 12188] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12187] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12188] <... prctl resumed>) = 0 [pid 5068] unlink("./1417/binderfs" [pid 12188] setpgid(0, 0) = 0 [pid 12188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12187] <... bpf resumed>) = 4 [pid 5068] <... unlink resumed>) = 0 [pid 12188] <... openat resumed>) = 3 [pid 12187] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12186] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 12188] write(3, "1000", 4 [pid 12185] +++ exited with 0 +++ [pid 12188] <... write resumed>) = 4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12186, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12188] close(3) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12185, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12188] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12187] <... bpf resumed>) = 5 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12188] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12187] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] close(3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12188] <... bpf resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 12188] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] rmdir("./1417" [pid 12188] <... bpf resumed>) = 4 [pid 5067] umount2("./1400", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1376", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1376", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12188] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 12188] <... bpf resumed>) = 5 [pid 5067] openat(AT_FDCWD, "./1400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(3, "", [pid 5068] mkdir("./1418", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12187] <... bpf resumed>) = 6 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] getdents64(3, [pid 12188] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12187] exit_group(0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12188] <... bpf resumed>) = 6 [pid 5067] getdents64(3, [pid 12188] exit_group(0 [pid 12187] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1376/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12188] <... exit_group resumed>) = ? [pid 5067] umount2("./1400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1376/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1400/binderfs", ./strace-static-x86_64: Process 12189 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12189] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12189 [pid 5066] unlink("./1376/binderfs" [pid 12189] <... set_robust_list resumed>) = 0 [pid 5067] unlink("./1400/binderfs" [pid 12189] chdir("./1418" [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12189] <... chdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12189] <... prctl resumed>) = 0 [pid 12189] setpgid(0, 0 [pid 5067] getdents64(3, [pid 5066] close(3 [pid 12189] <... setpgid resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5066] <... close resumed>) = 0 [pid 12189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1400" [pid 5066] rmdir("./1376" [pid 12189] <... openat resumed>) = 3 [pid 12189] write(3, "1000", 4 [pid 5067] <... rmdir resumed>) = 0 [pid 12189] <... write resumed>) = 4 [pid 5067] mkdir("./1401", 0777 [pid 5066] <... rmdir resumed>) = 0 [pid 12189] close(3) = 0 [pid 12189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] mkdir("./1377", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12189] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12189] <... bpf resumed>) = 3 ./strace-static-x86_64: Process 12190 attached [pid 12190] set_robust_list(0x5555686ec660, 24 [pid 12189] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12187] +++ exited with 0 +++ ./strace-static-x86_64: Process 12191 attached [pid 12190] <... set_robust_list resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12190 [pid 12191] set_robust_list(0x5555686ec660, 24 [pid 12190] chdir("./1377" [pid 12191] <... set_robust_list resumed>) = 0 [pid 12190] <... chdir resumed>) = 0 [pid 12189] <... bpf resumed>) = 4 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12187, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12191] chdir("./1401" [pid 12190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12189] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12188] +++ exited with 0 +++ [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12191 [pid 12191] <... chdir resumed>) = 0 [pid 12190] <... prctl resumed>) = 0 [pid 12191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12190] setpgid(0, 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12188, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12191] <... prctl resumed>) = 0 [pid 12190] <... setpgid resumed>) = 0 [pid 12189] <... bpf resumed>) = 5 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12191] setpgid(0, 0 [pid 12190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... restart_syscall resumed>) = 0 [pid 12191] <... setpgid resumed>) = 0 [pid 12191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12190] <... openat resumed>) = 3 [pid 12189] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] umount2("./1440", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12191] <... openat resumed>) = 3 [pid 5071] umount2("./1455", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1440", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12191] write(3, "1000", 4 [pid 12190] write(3, "1000", 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12191] <... write resumed>) = 4 [pid 12190] <... write resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./1455", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12191] close(3 [pid 12190] close(3 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 12191] <... close resumed>) = 0 [pid 12190] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(3, "", [pid 12191] symlink("/dev/binderfs", "./binderfs" [pid 12190] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12191] <... symlink resumed>) = 0 [pid 12190] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 12191] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12191] <... bpf resumed>) = 3 [pid 12190] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1440/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12191] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12190] <... bpf resumed>) = 3 [pid 5071] umount2("./1455/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12191] <... bpf resumed>) = 4 [pid 12190] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1440/binderfs", [pid 12191] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12190] <... bpf resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./1455/binderfs", [pid 12191] <... bpf resumed>) = 5 [pid 12190] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12189] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1455/binderfs" [pid 5069] unlink("./1440/binderfs" [pid 12190] <... bpf resumed>) = 5 [pid 12189] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12189] <... exit_group resumed>) = ? [pid 12191] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12191] exit_group(0 [pid 5071] getdents64(3, [pid 12191] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] getdents64(3, [pid 12190] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 5069] close(3 [pid 5071] rmdir("./1455" [pid 5069] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] rmdir("./1440" [pid 5071] mkdir("./1456", 0777) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5069] mkdir("./1441", 0777 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12190] <... bpf resumed>) = 6 [pid 12189] +++ exited with 0 +++ [pid 5069] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12192 attached [pid 12190] exit_group(0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12189, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12192 ./strace-static-x86_64: Process 12193 attached [pid 12192] set_robust_list(0x5555686ec660, 24 [pid 12190] <... exit_group resumed>) = ? [pid 12193] set_robust_list(0x5555686ec660, 24 [pid 12192] <... set_robust_list resumed>) = 0 [pid 12193] <... set_robust_list resumed>) = 0 [pid 5068] umount2("./1418", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12193] chdir("./1441" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12193 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12192] chdir("./1456" [pid 12193] <... chdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1418", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... openat resumed>) = 3 [pid 12193] <... prctl resumed>) = 0 [pid 12193] setpgid(0, 0 [pid 12192] <... chdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12193] <... setpgid resumed>) = 0 [pid 12192] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12192] <... prctl resumed>) = 0 [pid 12193] <... openat resumed>) = 3 [pid 12192] setpgid(0, 0 [pid 12191] +++ exited with 0 +++ [pid 12190] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 12193] write(3, "1000", 4 [pid 12192] <... setpgid resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12193] <... write resumed>) = 4 [pid 5068] umount2("./1418/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12190, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12193] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12191, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12193] <... close resumed>) = 0 [pid 12192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] newfstatat(AT_FDCWD, "./1418/binderfs", [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12193] symlink("/dev/binderfs", "./binderfs" [pid 12192] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12193] <... symlink resumed>) = 0 [pid 12192] write(3, "1000", 4 [pid 5068] unlink("./1418/binderfs" [pid 12192] <... write resumed>) = 4 [pid 12193] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12192] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 12193] <... bpf resumed>) = 3 [pid 12192] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] umount2("./1401", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12193] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12192] symlink("/dev/binderfs", "./binderfs" [pid 5068] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1377", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12193] <... bpf resumed>) = 4 [pid 12192] <... symlink resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12193] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12192] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] rmdir("./1418" [pid 5067] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1377", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12192] <... bpf resumed>) = 3 [pid 12193] <... bpf resumed>) = 5 [pid 12192] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] <... openat resumed>) = 3 [pid 12193] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12192] <... bpf resumed>) = 4 [pid 5068] mkdir("./1419", 0777 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 12192] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] getdents64(3, [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12192] <... bpf resumed>) = 5 [pid 5066] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./1401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1401/binderfs", [pid 12192] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./1377/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1401/binderfs"./strace-static-x86_64: Process 12194 attached [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12194 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12194] set_robust_list(0x5555686ec660, 24 [pid 12193] <... bpf resumed>) = 6 [pid 12192] <... bpf resumed>) = 6 [pid 5067] <... unlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1377/binderfs", [pid 12194] <... set_robust_list resumed>) = 0 [pid 12193] exit_group(0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12193] <... exit_group resumed>) = ? [pid 12192] exit_group(0 [pid 12194] chdir("./1419" [pid 5067] getdents64(3, [pid 5066] unlink("./1377/binderfs" [pid 12192] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12194] <... chdir resumed>) = 0 [pid 5067] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12194] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] rmdir("./1401" [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12194] setpgid(0, 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1377" [pid 12194] <... setpgid resumed>) = 0 [pid 5067] mkdir("./1402", 0777 [pid 12194] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1378", 0777 [pid 12194] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12194] write(3, "1000", 4 [pid 12193] +++ exited with 0 +++ [pid 12192] +++ exited with 0 +++ [pid 5066] <... mkdir resumed>) = 0 [pid 12194] <... write resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12192, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12193, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12194] close(3) = 0 [pid 12194] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12196 attached ./strace-static-x86_64: Process 12195 attached [pid 12194] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1456", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12196] set_robust_list(0x5555686ec660, 24 [pid 12195] set_robust_list(0x5555686ec660, 24) = 0 [pid 12194] <... bpf resumed>) = 3 [pid 5069] umount2("./1441", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12196 [pid 12196] <... set_robust_list resumed>) = 0 [pid 12195] chdir("./1402" [pid 12194] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] openat(AT_FDCWD, "./1456", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12195 [pid 12194] <... bpf resumed>) = 4 [pid 5069] openat(AT_FDCWD, "./1441", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12196] chdir("./1378" [pid 12195] <... chdir resumed>) = 0 [pid 12194] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 12196] <... chdir resumed>) = 0 [pid 12196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12194] <... bpf resumed>) = 5 [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(3, "", [pid 12196] <... prctl resumed>) = 0 [pid 12195] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12194] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12196] setpgid(0, 0 [pid 12195] setpgid(0, 0 [pid 12194] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 12196] <... setpgid resumed>) = 0 [pid 12195] <... setpgid resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12194] exit_group(0 [pid 5069] umount2("./1441/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(AT_FDCWD, "./1441/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12194] <... exit_group resumed>) = ? [pid 5071] umount2("./1456/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] unlink("./1441/binderfs") = 0 [pid 5069] getdents64(3, [pid 12196] <... openat resumed>) = 3 [pid 12195] <... openat resumed>) = 3 [pid 12194] +++ exited with 0 +++ [pid 5071] newfstatat(AT_FDCWD, "./1456/binderfs", [pid 12196] write(3, "1000", 4 [pid 12195] write(3, "1000", 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12194, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12196] <... write resumed>) = 4 [pid 12195] <... write resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] close(3 [pid 12196] close(3 [pid 12195] close(3 [pid 5071] unlink("./1456/binderfs" [pid 5069] <... close resumed>) = 0 [pid 12196] <... close resumed>) = 0 [pid 12195] <... close resumed>) = 0 [pid 5069] rmdir("./1441" [pid 5068] umount2("./1419", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12196] symlink("/dev/binderfs", "./binderfs" [pid 12195] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1419", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12196] <... symlink resumed>) = 0 [pid 12195] <... symlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12196] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5069] mkdir("./1442", 0777 [pid 5068] newfstatat(3, "", [pid 12196] <... bpf resumed>) = 3 [pid 12195] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12196] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12195] <... bpf resumed>) = 3 [pid 5071] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] rmdir("./1456" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1419/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12196] <... bpf resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12195] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(AT_FDCWD, "./1419/binderfs", [pid 12196] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12197 attached [pid 12195] <... bpf resumed>) = 4 [pid 12197] set_robust_list(0x5555686ec660, 24 [pid 12195] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1457", 0777 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12197 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12197] <... set_robust_list resumed>) = 0 [pid 12196] <... bpf resumed>) = 5 [pid 5068] unlink("./1419/binderfs" [pid 12197] chdir("./1442" [pid 12196] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12196] <... bpf resumed>) = 6 [pid 12195] <... bpf resumed>) = 5 [pid 12197] <... chdir resumed>) = 0 [pid 12197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12195] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12196] exit_group(0 [pid 5068] getdents64(3, [pid 12196] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12195] <... bpf resumed>) = 6 [pid 12197] setpgid(0, 0 [pid 5068] close(3 [pid 12195] exit_group(0 [pid 5068] <... close resumed>) = 0 ./strace-static-x86_64: Process 12198 attached [pid 5068] rmdir("./1419" [pid 12198] set_robust_list(0x5555686ec660, 24) = 0 [pid 12195] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 12197] <... setpgid resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12198 [pid 12198] chdir("./1457") = 0 [pid 12197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] mkdir("./1420", 0777 [pid 12198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12197] <... openat resumed>) = 3 [pid 12196] +++ exited with 0 +++ [pid 12195] +++ exited with 0 +++ [pid 12198] <... prctl resumed>) = 0 [pid 12197] write(3, "1000", 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12195, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12198] setpgid(0, 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12196, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12197] <... write resumed>) = 4 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12198] <... setpgid resumed>) = 0 [pid 12197] close(3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12197] <... close resumed>) = 0 [pid 12197] symlink("/dev/binderfs", "./binderfs" [pid 12198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 12199 attached ) = 3 [pid 12197] <... symlink resumed>) = 0 [pid 5067] umount2("./1402", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1378", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12199] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12199 [pid 12199] <... set_robust_list resumed>) = 0 [pid 12198] write(3, "1000", 4 [pid 12199] chdir("./1420" [pid 12198] <... write resumed>) = 4 [pid 12197] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12199] <... chdir resumed>) = 0 [pid 12198] close(3 [pid 12197] <... bpf resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1378", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12198] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12199] <... prctl resumed>) = 0 [pid 12198] symlink("/dev/binderfs", "./binderfs" [pid 12197] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 12199] setpgid(0, 0 [pid 12198] <... symlink resumed>) = 0 [pid 12199] <... setpgid resumed>) = 0 [pid 12199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12198] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12199] <... openat resumed>) = 3 [pid 12198] <... bpf resumed>) = 3 [pid 12197] <... bpf resumed>) = 4 [pid 5067] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12199] write(3, "1000", 4 [pid 12198] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12197] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12199] <... write resumed>) = 4 [pid 12198] <... bpf resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12199] close(3 [pid 12198] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] getdents64(3, [pid 12199] <... close resumed>) = 0 [pid 12198] <... bpf resumed>) = 5 [pid 12197] <... bpf resumed>) = 5 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1378/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12199] symlink("/dev/binderfs", "./binderfs" [pid 12197] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] umount2("./1402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12199] <... symlink resumed>) = 0 [pid 12198] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12197] <... bpf resumed>) = 6 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1378/binderfs", [pid 12199] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12198] exit_group(0 [pid 12197] exit_group(0 [pid 5067] newfstatat(AT_FDCWD, "./1402/binderfs", [pid 12198] <... exit_group resumed>) = ? [pid 12197] <... exit_group resumed>) = ? [pid 12199] <... bpf resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1402/binderfs" [pid 12199] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... unlink resumed>) = 0 [pid 5066] unlink("./1378/binderfs" [pid 12199] <... bpf resumed>) = 4 [pid 5067] getdents64(3, [pid 12199] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5067] close(3 [pid 12199] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12198] +++ exited with 0 +++ [pid 12197] +++ exited with 0 +++ [pid 5067] rmdir("./1402" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12197, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12198, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5071] umount2("./1457", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] mkdir("./1403", 0777 [pid 5066] rmdir("./1378" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1457", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] mkdir("./1379", 0777 [pid 5069] umount2("./1442", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1442", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(3, "", [pid 5069] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12200 attached [pid 5071] umount2("./1457/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1457/binderfs", ./strace-static-x86_64: Process 12201 attached [pid 12200] set_robust_list(0x5555686ec660, 24 [pid 12199] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12200 [pid 12201] set_robust_list(0x5555686ec660, 24 [pid 12200] <... set_robust_list resumed>) = 0 [pid 5069] umount2("./1442/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12201] <... set_robust_list resumed>) = 0 [pid 12200] chdir("./1403" [pid 12199] exit_group(0 [pid 5071] unlink("./1457/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12201 [pid 12201] chdir("./1379" [pid 12200] <... chdir resumed>) = 0 [pid 12199] <... exit_group resumed>) = ? [pid 5071] <... unlink resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1442/binderfs", [pid 12200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12200] setpgid(0, 0) = 0 [pid 12201] <... chdir resumed>) = 0 [pid 12200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12199] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] unlink("./1442/binderfs" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12199, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12201] <... prctl resumed>) = 0 [pid 12200] <... openat resumed>) = 3 [pid 5071] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 12201] setpgid(0, 0 [pid 5071] <... close resumed>) = 0 [pid 12201] <... setpgid resumed>) = 0 [pid 5071] rmdir("./1457" [pid 12201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12200] write(3, "1000", 4 [pid 5069] getdents64(3, [pid 5068] umount2("./1420", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12201] <... openat resumed>) = 3 [pid 12200] <... write resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12200] close(3 [pid 5068] openat(AT_FDCWD, "./1420", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12200] <... close resumed>) = 0 [pid 12200] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 12201] write(3, "1000", 4) = 4 [pid 12200] <... symlink resumed>) = 0 [pid 5071] mkdir("./1458", 0777 [pid 5069] close(3 [pid 5068] <... openat resumed>) = 3 [pid 12201] close(3 [pid 12200] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12201] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] rmdir("./1442" [pid 5068] newfstatat(3, "", [pid 12201] symlink("/dev/binderfs", "./binderfs" [pid 12200] <... bpf resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12201] <... symlink resumed>) = 0 [pid 12200] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12202 attached [pid 12201] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12202 [pid 5069] mkdir("./1443", 0777 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12202] set_robust_list(0x5555686ec660, 24 [pid 12201] <... bpf resumed>) = 3 [pid 12200] <... bpf resumed>) = 4 [pid 5068] umount2("./1420/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12202] <... set_robust_list resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12202] chdir("./1458" [pid 12201] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(AT_FDCWD, "./1420/binderfs", [pid 12202] <... chdir resumed>) = 0 [pid 12201] <... bpf resumed>) = 4 [pid 12200] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12202] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12201] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] unlink("./1420/binderfs" [pid 12202] <... prctl resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12202] setpgid(0, 0 [pid 12200] <... bpf resumed>) = 5 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12202] <... setpgid resumed>) = 0 [pid 5068] getdents64(3, [pid 12202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3./strace-static-x86_64: Process 12203 attached [pid 12202] <... openat resumed>) = 3 [pid 12201] <... bpf resumed>) = 5 [pid 12200] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12203] set_robust_list(0x5555686ec660, 24 [pid 12202] write(3, "1000", 4 [pid 12201] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12200] <... bpf resumed>) = 6 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12203 [pid 5068] <... close resumed>) = 0 [pid 12203] <... set_robust_list resumed>) = 0 [pid 5068] rmdir("./1420" [pid 12203] chdir("./1443" [pid 12202] <... write resumed>) = 4 [pid 12201] <... bpf resumed>) = 6 [pid 12200] exit_group(0 [pid 12203] <... chdir resumed>) = 0 [pid 12202] close(3 [pid 12201] exit_group(0 [pid 12200] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 12203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12202] <... close resumed>) = 0 [pid 5068] mkdir("./1421", 0777 [pid 12203] <... prctl resumed>) = 0 [pid 12203] setpgid(0, 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12203] <... setpgid resumed>) = 0 [pid 12203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12202] symlink("/dev/binderfs", "./binderfs" [pid 12201] <... exit_group resumed>) = ? [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12203] <... openat resumed>) = 3 [pid 12202] <... symlink resumed>) = 0 [pid 12203] write(3, "1000", 4) = 4 [pid 12203] close(3) = 0 ./strace-static-x86_64: Process 12204 attached [pid 12202] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12204] set_robust_list(0x5555686ec660, 24 [pid 12202] <... bpf resumed>) = 3 [pid 12204] <... set_robust_list resumed>) = 0 [pid 12203] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12204 [pid 12204] chdir("./1421" [pid 12203] <... symlink resumed>) = 0 [pid 12202] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12204] <... chdir resumed>) = 0 [pid 12203] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12204] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12203] <... bpf resumed>) = 3 [pid 12202] <... bpf resumed>) = 4 [pid 12200] +++ exited with 0 +++ [pid 12204] <... prctl resumed>) = 0 [pid 12203] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12202] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12200, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12204] setpgid(0, 0 [pid 12203] <... bpf resumed>) = 4 [pid 12201] +++ exited with 0 +++ [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12204] <... setpgid resumed>) = 0 [pid 12203] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12201, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12202] <... bpf resumed>) = 5 [pid 12203] <... bpf resumed>) = 5 [pid 5066] umount2("./1379", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12204] <... openat resumed>) = 3 [pid 12203] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12202] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] umount2("./1403", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12204] write(3, "1000", 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12204] <... write resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1379", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12204] close(3 [pid 5067] openat(AT_FDCWD, "./1403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12204] <... close resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 12204] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... openat resumed>) = 3 [pid 12204] <... symlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 12204] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12203] <... bpf resumed>) = 6 [pid 12202] <... bpf resumed>) = 6 [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12204] <... bpf resumed>) = 3 [pid 12204] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12203] exit_group(0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12202] exit_group(0 [pid 12203] <... exit_group resumed>) = ? [pid 12202] <... exit_group resumed>) = ? [pid 5067] umount2("./1403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12204] <... bpf resumed>) = 4 [pid 12204] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12203] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1379/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12202] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12203, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] newfstatat(AT_FDCWD, "./1403/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1379/binderfs", [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12202, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] umount2("./1443", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1403/binderfs" [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 12204] <... bpf resumed>) = 5 [pid 5066] unlink("./1379/binderfs" [pid 12204] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] openat(AT_FDCWD, "./1443", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 5071] umount2("./1458", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] close(3 [pid 5066] getdents64(3, [pid 5071] openat(AT_FDCWD, "./1458", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] rmdir("./1403" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(3, "", [pid 5069] umount2("./1443/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5066] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1443/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] rmdir("./1379" [pid 5071] getdents64(3, [pid 5069] unlink("./1443/binderfs" [pid 5067] mkdir("./1404", 0777 [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12204] <... bpf resumed>) = 6 [pid 5071] umount2("./1458/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1380", 0777 [pid 5069] getdents64(3, [pid 12204] exit_group(0) = ? [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1458/binderfs", [pid 5069] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... close resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] unlink("./1458/binderfs" [pid 5069] rmdir("./1443"./strace-static-x86_64: Process 12205 attached [pid 12204] +++ exited with 0 +++ [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12205 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12205] set_robust_list(0x5555686ec660, 24 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12204, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12205] <... set_robust_list resumed>) = 0 [pid 5071] getdents64(3, ./strace-static-x86_64: Process 12206 attached [pid 12205] chdir("./1404" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] mkdir("./1444", 0777 [pid 12205] <... chdir resumed>) = 0 [pid 5068] umount2("./1421", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12206 [pid 12206] set_robust_list(0x5555686ec660, 24 [pid 12205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12206] <... set_robust_list resumed>) = 0 [pid 12205] <... prctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] openat(AT_FDCWD, "./1421", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12205] setpgid(0, 0 [pid 5068] <... openat resumed>) = 3 [pid 12206] chdir("./1380" [pid 12205] <... setpgid resumed>) = 0 [pid 5071] rmdir("./1458" [pid 5068] newfstatat(3, "", [pid 12205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12206] <... chdir resumed>) = 0 [pid 12205] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12205] write(3, "1000", 4 [pid 5068] umount2("./1421/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12207 attached [pid 12206] <... prctl resumed>) = 0 [pid 12205] <... write resumed>) = 4 [pid 5071] mkdir("./1459", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12207 [pid 12206] setpgid(0, 0 [pid 12205] close(3 [pid 5068] newfstatat(AT_FDCWD, "./1421/binderfs", [pid 12205] <... close resumed>) = 0 [pid 12206] <... setpgid resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12205] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12205] <... symlink resumed>) = 0 [pid 5068] unlink("./1421/binderfs") = 0 [pid 12205] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12207] set_robust_list(0x5555686ec660, 24 [pid 12206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12205] <... bpf resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12207] <... set_robust_list resumed>) = 0 [pid 5068] getdents64(3, [pid 12205] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12207] chdir("./1444" [pid 12206] <... openat resumed>) = 3 [pid 12205] <... bpf resumed>) = 4 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1421" [pid 12207] <... chdir resumed>) = 0 [pid 12206] write(3, "1000", 4 [pid 12205] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... rmdir resumed>) = 0 [pid 12207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12206] <... write resumed>) = 4 [pid 12207] <... prctl resumed>) = 0 [pid 12206] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12208 ./strace-static-x86_64: Process 12208 attached [pid 12207] setpgid(0, 0 [pid 12206] <... close resumed>) = 0 [pid 12205] <... bpf resumed>) = 5 [pid 5068] mkdir("./1422", 0777 [pid 12208] set_robust_list(0x5555686ec660, 24 [pid 12207] <... setpgid resumed>) = 0 [pid 12206] symlink("/dev/binderfs", "./binderfs" [pid 12208] <... set_robust_list resumed>) = 0 [pid 12207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12205] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... mkdir resumed>) = 0 [pid 12206] <... symlink resumed>) = 0 [pid 12208] chdir("./1459" [pid 12206] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12205] <... bpf resumed>) = 6 [pid 12208] <... chdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12208] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12207] <... openat resumed>) = 3 [pid 12206] <... bpf resumed>) = 3 [pid 12205] exit_group(0./strace-static-x86_64: Process 12209 attached [pid 12208] <... prctl resumed>) = 0 [pid 12209] set_robust_list(0x5555686ec660, 24 [pid 12208] setpgid(0, 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12209 [pid 12208] <... setpgid resumed>) = 0 [pid 12209] <... set_robust_list resumed>) = 0 [pid 12206] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12207] write(3, "1000", 4 [pid 12205] <... exit_group resumed>) = ? [pid 12209] chdir("./1422" [pid 12208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12206] <... bpf resumed>) = 4 [pid 12209] <... chdir resumed>) = 0 [pid 12208] <... openat resumed>) = 3 [pid 12207] <... write resumed>) = 4 [pid 12209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12208] write(3, "1000", 4 [pid 12207] close(3 [pid 12209] <... prctl resumed>) = 0 [pid 12208] <... write resumed>) = 4 [pid 12207] <... close resumed>) = 0 [pid 12206] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12208] close(3) = 0 [pid 12205] +++ exited with 0 +++ [pid 12209] setpgid(0, 0 [pid 12207] symlink("/dev/binderfs", "./binderfs" [pid 12209] <... setpgid resumed>) = 0 [pid 12208] symlink("/dev/binderfs", "./binderfs" [pid 12207] <... symlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12205, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12208] <... symlink resumed>) = 0 [pid 12207] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12209] <... openat resumed>) = 3 [pid 12208] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12207] <... bpf resumed>) = 3 [pid 12206] <... bpf resumed>) = 5 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12209] write(3, "1000", 4 [pid 12208] <... bpf resumed>) = 3 [pid 12207] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12206] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12209] <... write resumed>) = 4 [pid 12208] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12207] <... bpf resumed>) = 4 [pid 12209] close(3) = 0 [pid 12207] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] umount2("./1404", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12209] symlink("/dev/binderfs", "./binderfs" [pid 12208] <... bpf resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12208] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12207] <... bpf resumed>) = 5 [pid 5067] openat(AT_FDCWD, "./1404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12209] <... symlink resumed>) = 0 [pid 12207] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... openat resumed>) = 3 [pid 12209] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12208] <... bpf resumed>) = 5 [pid 5067] newfstatat(3, "", [pid 12209] <... bpf resumed>) = 3 [pid 12208] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12209] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, [pid 12209] <... bpf resumed>) = 4 [pid 12209] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1404/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12209] <... bpf resumed>) = 5 [pid 12206] <... bpf resumed>) = 6 [pid 12207] <... bpf resumed>) = 6 [pid 5067] unlink("./1404/binderfs" [pid 12209] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12208] <... bpf resumed>) = 6 [pid 12206] exit_group(0 [pid 5067] <... unlink resumed>) = 0 [pid 12207] exit_group(0 [pid 12208] exit_group(0 [pid 12206] <... exit_group resumed>) = ? [pid 12209] <... bpf resumed>) = 6 [pid 12208] <... exit_group resumed>) = ? [pid 12207] <... exit_group resumed>) = ? [pid 12206] +++ exited with 0 +++ [pid 5067] getdents64(3, [pid 12209] exit_group(0 [pid 12207] +++ exited with 0 +++ [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12206, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12209] <... exit_group resumed>) = ? [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12207, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] close(3) = 0 [pid 12209] +++ exited with 0 +++ [pid 12208] +++ exited with 0 +++ [pid 5066] umount2("./1380", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12208, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12209, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] rmdir("./1404" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1380", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] umount2("./1459", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 5069] umount2("./1444", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1459", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./1444", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5068] umount2("./1422", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5069] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./1405", 0777 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./1422", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./1380/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./1459/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... openat resumed>) = 3 [pid 5069] umount2("./1444/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(3, "", [pid 5067] <... mkdir resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1380/binderfs", [pid 5071] newfstatat(AT_FDCWD, "./1459/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] getdents64(3, [pid 5066] unlink("./1380/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1444/binderfs", [pid 5068] umount2("./1422/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... unlink resumed>) = 0 [pid 5071] unlink("./1459/binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] unlink("./1444/binderfs") = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3./strace-static-x86_64: Process 12210 attached [pid 5071] <... unlink resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1422/binderfs", [pid 5066] getdents64(3, [pid 12210] set_robust_list(0x5555686ec660, 24 [pid 5071] getdents64(3, [pid 5069] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12210 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12210] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] rmdir("./1444" [pid 5068] unlink("./1422/binderfs" [pid 5066] close(3 [pid 12210] chdir("./1405" [pid 5071] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] rmdir("./1380" [pid 12210] <... chdir resumed>) = 0 [pid 5071] rmdir("./1459" [pid 5069] mkdir("./1445", 0777 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12210] setpgid(0, 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 12210] <... setpgid resumed>) = 0 [pid 5071] mkdir("./1460", 0777 [pid 5068] <... close resumed>) = 0 [pid 5066] mkdir("./1381", 0777 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] rmdir("./1422" [pid 12210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12211 attached [pid 5068] <... rmdir resumed>) = 0 [pid 12210] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12211 [pid 5068] mkdir("./1423", 0777 [pid 12211] set_robust_list(0x5555686ec660, 24 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12210] write(3, "1000", 4 [pid 12211] <... set_robust_list resumed>) = 0 [pid 12211] chdir("./1445" [pid 5068] <... mkdir resumed>) = 0 [pid 12210] <... write resumed>) = 4 [pid 12211] <... chdir resumed>) = 0 [pid 12211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12211] setpgid(0, 0) = 0 [pid 12211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12210] close(3./strace-static-x86_64: Process 12213 attached ./strace-static-x86_64: Process 12212 attached ) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12212 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12213 [pid 12211] <... openat resumed>) = 3 [pid 12213] set_robust_list(0x5555686ec660, 24) = 0 ./strace-static-x86_64: Process 12214 attached [pid 12212] set_robust_list(0x5555686ec660, 24 [pid 12211] write(3, "1000", 4 [pid 12210] symlink("/dev/binderfs", "./binderfs" [pid 12214] set_robust_list(0x5555686ec660, 24) = 0 [pid 12213] chdir("./1381" [pid 12212] <... set_robust_list resumed>) = 0 [pid 12211] <... write resumed>) = 4 [pid 12210] <... symlink resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12214 [pid 12214] chdir("./1423" [pid 12213] <... chdir resumed>) = 0 [pid 12212] chdir("./1460" [pid 12211] close(3 [pid 12210] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12212] <... chdir resumed>) = 0 [pid 12211] <... close resumed>) = 0 [pid 12213] <... prctl resumed>) = 0 [pid 12211] symlink("/dev/binderfs", "./binderfs" [pid 12210] <... bpf resumed>) = 3 [pid 12212] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12214] <... chdir resumed>) = 0 [pid 12210] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12213] setpgid(0, 0 [pid 12214] <... prctl resumed>) = 0 [pid 12212] <... prctl resumed>) = 0 [pid 12214] setpgid(0, 0) = 0 [pid 12212] setpgid(0, 0 [pid 12214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12211] <... symlink resumed>) = 0 [pid 12213] <... setpgid resumed>) = 0 [pid 12210] <... bpf resumed>) = 4 [pid 12212] <... setpgid resumed>) = 0 [pid 12214] <... openat resumed>) = 3 [pid 12214] write(3, "1000", 4) = 4 [pid 12214] close(3) = 0 [pid 12213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12211] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12214] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12213] <... openat resumed>) = 3 [pid 12210] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12214] <... bpf resumed>) = 3 [pid 12213] write(3, "1000", 4 [pid 12212] <... openat resumed>) = 3 [pid 12211] <... bpf resumed>) = 3 [pid 12211] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12213] <... write resumed>) = 4 [pid 12214] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12212] write(3, "1000", 4 [pid 12210] <... bpf resumed>) = 5 [pid 12214] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12211] <... bpf resumed>) = 4 [pid 12213] close(3 [pid 12212] <... write resumed>) = 4 [pid 12210] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12214] <... bpf resumed>) = 5 [pid 12213] <... close resumed>) = 0 [pid 12212] close(3 [pid 12211] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12214] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12213] symlink("/dev/binderfs", "./binderfs" [pid 12212] <... close resumed>) = 0 [pid 12210] <... bpf resumed>) = 6 [pid 12212] symlink("/dev/binderfs", "./binderfs" [pid 12213] <... symlink resumed>) = 0 [pid 12212] <... symlink resumed>) = 0 [pid 12210] exit_group(0 [pid 12214] <... bpf resumed>) = 6 [pid 12213] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12212] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12211] <... bpf resumed>) = 5 [pid 12210] <... exit_group resumed>) = ? [pid 12214] exit_group(0 [pid 12213] <... bpf resumed>) = 3 [pid 12212] <... bpf resumed>) = 3 [pid 12211] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12214] <... exit_group resumed>) = ? [pid 12213] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12212] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12213] <... bpf resumed>) = 4 [pid 12212] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12213] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12212] <... bpf resumed>) = 5 [pid 12213] <... bpf resumed>) = 5 [pid 12212] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12213] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12211] <... bpf resumed>) = 6 [pid 12210] +++ exited with 0 +++ [pid 12211] exit_group(0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12210, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12211] <... exit_group resumed>) = ? [pid 5067] umount2("./1405", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1405/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1405/binderfs") = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 12214] +++ exited with 0 +++ [pid 12212] <... bpf resumed>) = 6 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12214, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... close resumed>) = 0 [pid 12212] exit_group(0 [pid 5067] rmdir("./1405") = 0 [pid 12212] <... exit_group resumed>) = ? [pid 5068] umount2("./1423", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12213] <... bpf resumed>) = 6 [pid 12211] +++ exited with 0 +++ [pid 5068] openat(AT_FDCWD, "./1423", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] mkdir("./1406", 0777 [pid 12213] exit_group(0) = ? [pid 5068] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12211, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] newfstatat(3, "", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1445", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1445", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12215 attached [pid 12215] set_robust_list(0x5555686ec660, 24 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12215 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12215] <... set_robust_list resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] umount2("./1423/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12215] chdir("./1406" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12215] <... chdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] newfstatat(AT_FDCWD, "./1423/binderfs", [pid 12215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12215] <... prctl resumed>) = 0 [pid 12215] setpgid(0, 0 [pid 5069] umount2("./1445/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] unlink("./1423/binderfs" [pid 12215] <... setpgid resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 12215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(AT_FDCWD, "./1445/binderfs", [pid 12215] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] getdents64(3, [pid 5069] unlink("./1445/binderfs" [pid 12215] write(3, "1000", 4 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12215] <... write resumed>) = 4 [pid 5068] close(3 [pid 12215] close(3 [pid 5068] <... close resumed>) = 0 [pid 12215] <... close resumed>) = 0 [pid 12215] symlink("/dev/binderfs", "./binderfs" [pid 12212] +++ exited with 0 +++ [pid 5068] rmdir("./1423" [pid 12213] +++ exited with 0 +++ [pid 12215] <... symlink resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12212, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... rmdir resumed>) = 0 [pid 12215] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5068] mkdir("./1424", 0777 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12213, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12215] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12215] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1460", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12215] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12215] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] openat(AT_FDCWD, "./1460", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] rmdir("./1445"./strace-static-x86_64: Process 12216 attached [pid 12215] <... bpf resumed>) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] umount2("./1381", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12216] set_robust_list(0x5555686ec660, 24 [pid 5071] <... openat resumed>) = 3 [pid 12216] <... set_robust_list resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12216] chdir("./1424" [pid 5069] mkdir("./1446", 0777 [pid 5066] openat(AT_FDCWD, "./1381", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 12215] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12216] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12216 [pid 5066] newfstatat(3, "", [pid 12216] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12216] <... prctl resumed>) = 0 [pid 5071] umount2("./1460/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12217 attached [pid 12216] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12216] <... setpgid resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1460/binderfs", [pid 12216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12217] set_robust_list(0x5555686ec660, 24 [pid 5071] unlink("./1460/binderfs" [pid 12217] <... set_robust_list resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5066] umount2("./1381/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12217] chdir("./1446" [pid 12216] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12216] write(3, "1000", 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12217 [pid 5066] newfstatat(AT_FDCWD, "./1381/binderfs", [pid 12216] <... write resumed>) = 4 [pid 12215] <... bpf resumed>) = 6 [pid 12217] <... chdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(3, [pid 12217] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12216] close(3 [pid 12215] exit_group(0 [pid 5066] unlink("./1381/binderfs" [pid 12216] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12216] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] getdents64(3, [pid 12217] <... prctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12217] setpgid(0, 0 [pid 12216] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12215] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 5066] close(3 [pid 12217] <... setpgid resumed>) = 0 [pid 12216] <... bpf resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 12216] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] rmdir("./1381" [pid 12216] <... bpf resumed>) = 4 [pid 12215] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12216] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12216] <... bpf resumed>) = 5 [pid 5071] rmdir("./1460" [pid 5066] mkdir("./1382", 0777 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12215, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12217] <... openat resumed>) = 3 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12216] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12217] write(3, "1000", 4 [pid 5071] mkdir("./1461", 0777 [pid 5067] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12218 attached [pid 12217] <... write resumed>) = 4 [pid 5067] umount2("./1406", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12217] close(3) = 0 [pid 12218] set_robust_list(0x5555686ec660, 24 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12218 [pid 12218] <... set_robust_list resumed>) = 0 [pid 12217] symlink("/dev/binderfs", "./binderfs" [pid 12216] <... bpf resumed>) = 6 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12218] chdir("./1382" [pid 12216] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] openat(AT_FDCWD, "./1406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12218] <... chdir resumed>) = 0 [pid 12217] <... symlink resumed>) = 0 [pid 12216] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 12218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12217] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12218] <... prctl resumed>) = 0 [pid 12217] <... bpf resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12218] setpgid(0, 0 [pid 12217] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12218] <... setpgid resumed>) = 0 [pid 12217] <... bpf resumed>) = 4 [pid 12216] +++ exited with 0 +++ [pid 5067] getdents64(3, [pid 12218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12216, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12219 attached [pid 12218] <... openat resumed>) = 3 [pid 12217] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12219] set_robust_list(0x5555686ec660, 24 [pid 12218] write(3, "1000", 4 [pid 5067] umount2("./1406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12219] <... set_robust_list resumed>) = 0 [pid 12217] <... bpf resumed>) = 5 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12219 [pid 12218] <... write resumed>) = 4 [pid 12217] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12219] chdir("./1461" [pid 12218] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12219] <... chdir resumed>) = 0 [pid 12218] <... close resumed>) = 0 [pid 12219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12218] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./1424", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(AT_FDCWD, "./1406/binderfs", [pid 12219] <... prctl resumed>) = 0 [pid 12218] <... symlink resumed>) = 0 [pid 12219] setpgid(0, 0) = 0 [pid 12218] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12219] <... openat resumed>) = 3 [pid 12218] <... bpf resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./1424", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] unlink("./1406/binderfs" [pid 12219] write(3, "1000", 4 [pid 12218] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12219] <... write resumed>) = 4 [pid 12218] <... bpf resumed>) = 4 [pid 12217] <... bpf resumed>) = 6 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... unlink resumed>) = 0 [pid 12219] close(3 [pid 12218] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12219] <... close resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12219] symlink("/dev/binderfs", "./binderfs" [pid 12217] exit_group(0 [pid 5067] getdents64(3, [pid 12217] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12219] <... symlink resumed>) = 0 [pid 12218] <... bpf resumed>) = 5 [pid 12219] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12217] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 5067] close(3 [pid 12219] <... bpf resumed>) = 3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12217, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12219] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12218] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12219] <... bpf resumed>) = 4 [pid 5068] umount2("./1424/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1406" [pid 12219] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12219] <... bpf resumed>) = 5 [pid 5068] newfstatat(AT_FDCWD, "./1424/binderfs", [pid 5067] <... rmdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1424/binderfs" [pid 5067] mkdir("./1407", 0777 [pid 5069] umount2("./1446", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12219] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1446", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... unlink resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 12219] <... bpf resumed>) = 6 [pid 12218] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 12219] exit_group(0 [pid 12218] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12219] <... exit_group resumed>) = ? [pid 12218] <... exit_group resumed>) = ? [pid 5069] umount2("./1446/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3./strace-static-x86_64: Process 12220 attached [pid 12219] +++ exited with 0 +++ [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 12220] set_robust_list(0x5555686ec660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12219, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] newfstatat(AT_FDCWD, "./1446/binderfs", [pid 5068] rmdir("./1424" [pid 12220] <... set_robust_list resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12220] chdir("./1407" [pid 5068] <... rmdir resumed>) = 0 [pid 5071] umount2("./1461", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] unlink("./1446/binderfs" [pid 5071] openat(AT_FDCWD, "./1461", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... unlink resumed>) = 0 [pid 12220] <... chdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12220 [pid 12220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] newfstatat(3, "", [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] mkdir("./1425", 0777 [pid 12220] <... prctl resumed>) = 0 [pid 5069] close(3 [pid 5068] <... mkdir resumed>) = 0 [pid 12220] setpgid(0, 0 [pid 5069] <... close resumed>) = 0 [pid 12218] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12220] <... setpgid resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] rmdir("./1446" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12218, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] umount2("./1461/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... rmdir resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12220] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./1461/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12221 attached [pid 12220] write(3, "1000", 4 [pid 5071] unlink("./1461/binderfs" [pid 5069] mkdir("./1447", 0777 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12221 [pid 12221] set_robust_list(0x5555686ec660, 24 [pid 12220] <... write resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 12221] <... set_robust_list resumed>) = 0 [pid 12220] close(3 [pid 5071] getdents64(3, [pid 5066] umount2("./1382", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12221] chdir("./1425" [pid 12220] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12220] symlink("/dev/binderfs", "./binderfs" [pid 5071] close(3 [pid 5066] openat(AT_FDCWD, "./1382", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12221] <... chdir resumed>) = 0 [pid 12220] <... symlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5071] rmdir("./1461" [pid 12221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12220] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(3, "", [pid 12221] <... prctl resumed>) = 0 [pid 12221] setpgid(0, 0 [pid 12220] <... bpf resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12220] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1462", 0777 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12222 attached [pid 12221] <... setpgid resumed>) = 0 [pid 12220] <... bpf resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12222] set_robust_list(0x5555686ec660, 24 [pid 12221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12220] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12222] <... set_robust_list resumed>) = 0 [pid 12221] <... openat resumed>) = 3 [pid 12220] <... bpf resumed>) = 5 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12222 [pid 5066] umount2("./1382/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12222] chdir("./1447" [pid 12221] write(3, "1000", 4 [pid 12222] <... chdir resumed>) = 0 [pid 12221] <... write resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12223 attached [pid 12222] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] newfstatat(AT_FDCWD, "./1382/binderfs", [pid 12222] <... prctl resumed>) = 0 [pid 12221] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12222] setpgid(0, 0 [pid 12221] <... close resumed>) = 0 [pid 12223] set_robust_list(0x5555686ec660, 24 [pid 12222] <... setpgid resumed>) = 0 [pid 12221] symlink("/dev/binderfs", "./binderfs" [pid 12220] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] unlink("./1382/binderfs" [pid 12223] <... set_robust_list resumed>) = 0 [pid 12222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12221] <... symlink resumed>) = 0 [pid 12220] <... bpf resumed>) = 6 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12223 [pid 5066] <... unlink resumed>) = 0 [pid 12223] chdir("./1462" [pid 12222] <... openat resumed>) = 3 [pid 12220] exit_group(0 [pid 5066] getdents64(3, [pid 12221] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12223] <... chdir resumed>) = 0 [pid 12220] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12221] <... bpf resumed>) = 3 [pid 12222] write(3, "1000", 4 [pid 12221] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] close(3 [pid 12223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12222] <... write resumed>) = 4 [pid 5066] <... close resumed>) = 0 [pid 12223] setpgid(0, 0 [pid 12222] close(3 [pid 12221] <... bpf resumed>) = 4 [pid 5066] rmdir("./1382" [pid 12223] <... setpgid resumed>) = 0 [pid 12222] <... close resumed>) = 0 [pid 12221] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12220] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 12223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12222] symlink("/dev/binderfs", "./binderfs" [pid 12223] <... openat resumed>) = 3 [pid 12222] <... symlink resumed>) = 0 [pid 12222] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12223] write(3, "1000", 4 [pid 12221] <... bpf resumed>) = 5 [pid 5066] mkdir("./1383", 0777 [pid 12223] <... write resumed>) = 4 [pid 12222] <... bpf resumed>) = 3 [pid 12221] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12220, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12223] close(3 [pid 12222] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12223] <... close resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12222] <... bpf resumed>) = 4 [pid 12223] symlink("/dev/binderfs", "./binderfs" [pid 12222] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12223] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12224 attached [pid 12223] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12222] <... bpf resumed>) = 5 [pid 12221] <... bpf resumed>) = 6 [pid 5067] umount2("./1407", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12224] set_robust_list(0x5555686ec660, 24 [pid 12223] <... bpf resumed>) = 3 [pid 12222] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12221] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12222] <... bpf resumed>) = 6 [pid 5067] <... openat resumed>) = 3 [pid 12224] <... set_robust_list resumed>) = 0 [pid 12223] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12222] exit_group(0 [pid 12221] <... exit_group resumed>) = ? [pid 5067] newfstatat(3, "", [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12224 [pid 12224] chdir("./1383" [pid 12223] <... bpf resumed>) = 4 [pid 12222] <... exit_group resumed>) = ? [pid 12223] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12224] <... chdir resumed>) = 0 [pid 12224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12224] setpgid(0, 0) = 0 [pid 5067] getdents64(3, [pid 12224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12223] <... bpf resumed>) = 5 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12224] <... openat resumed>) = 3 [pid 12223] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12224] write(3, "1000", 4 [pid 12222] +++ exited with 0 +++ [pid 12221] +++ exited with 0 +++ [pid 12224] <... write resumed>) = 4 [pid 5067] newfstatat(AT_FDCWD, "./1407/binderfs", [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12221, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12222, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12224] close(3) = 0 [pid 12224] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1407/binderfs" [pid 12224] <... symlink resumed>) = 0 [pid 5069] umount2("./1447", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12224] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1447", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] rmdir("./1407" [pid 12224] <... bpf resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./1425", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12224] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 12224] <... bpf resumed>) = 4 [pid 5069] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./1425", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] mkdir("./1408", 0777 [pid 5068] <... openat resumed>) = 3 [pid 12224] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] newfstatat(3, "", [pid 5067] <... mkdir resumed>) = 0 [pid 12224] <... bpf resumed>) = 5 [pid 5069] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1425/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1425/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12224] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] unlink("./1425/binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... unlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1447/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3./strace-static-x86_64: Process 12225 attached [pid 12224] <... bpf resumed>) = 6 [pid 12223] <... bpf resumed>) = 6 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12225 [pid 12225] set_robust_list(0x5555686ec660, 24 [pid 12224] exit_group(0 [pid 12223] exit_group(0 [pid 5069] newfstatat(AT_FDCWD, "./1447/binderfs", [pid 5068] <... close resumed>) = 0 [pid 12225] <... set_robust_list resumed>) = 0 [pid 12224] <... exit_group resumed>) = ? [pid 12223] <... exit_group resumed>) = ? [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] rmdir("./1425" [pid 12225] chdir("./1408" [pid 12224] +++ exited with 0 +++ [pid 12223] +++ exited with 0 +++ [pid 5069] unlink("./1447/binderfs" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12223, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... rmdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12224, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] mkdir("./1426", 0777 [pid 12225] <... chdir resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5071] umount2("./1462", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5068] <... mkdir resumed>) = 0 [pid 12225] <... prctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1462", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12225] setpgid(0, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] close(3 [pid 5066] umount2("./1383", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12225] <... setpgid resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] rmdir("./1447" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] openat(AT_FDCWD, "./1383", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12225] <... openat resumed>) = 3 [pid 5071] umount2("./1462/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12226 attached [pid 12225] write(3, "1000", 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12225] <... write resumed>) = 4 [pid 5066] newfstatat(3, "", [pid 12226] set_robust_list(0x5555686ec660, 24 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12225] close(3 [pid 5071] newfstatat(AT_FDCWD, "./1462/binderfs", [pid 12226] <... set_robust_list resumed>) = 0 [pid 12225] <... close resumed>) = 0 [pid 12226] chdir("./1426" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12225] symlink("/dev/binderfs", "./binderfs" [pid 5069] mkdir("./1448", 0777 [pid 5066] getdents64(3, [pid 12226] <... chdir resumed>) = 0 [pid 12225] <... symlink resumed>) = 0 [pid 5071] unlink("./1462/binderfs" [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12226 [pid 12226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12225] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12226] <... prctl resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1383/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12226] setpgid(0, 0 [pid 12225] <... bpf resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 12226] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 12227 attached [pid 12227] set_robust_list(0x5555686ec660, 24 [pid 12226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12225] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12227 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12227] <... set_robust_list resumed>) = 0 [pid 12226] <... openat resumed>) = 3 [pid 12225] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1383/binderfs", [pid 12227] chdir("./1448") = 0 [pid 12226] write(3, "1000", 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12226] <... write resumed>) = 4 [pid 12225] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] close(3 [pid 5066] unlink("./1383/binderfs" [pid 12227] <... prctl resumed>) = 0 [pid 12226] close(3 [pid 5071] <... close resumed>) = 0 [pid 12227] setpgid(0, 0 [pid 12226] <... close resumed>) = 0 [pid 5071] rmdir("./1462" [pid 12227] <... setpgid resumed>) = 0 [pid 12226] symlink("/dev/binderfs", "./binderfs" [pid 12227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... unlink resumed>) = 0 [pid 12226] <... symlink resumed>) = 0 [pid 12225] <... bpf resumed>) = 5 [pid 12227] <... openat resumed>) = 3 [pid 12226] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 12227] write(3, "1000", 4 [pid 12225] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] getdents64(3, [pid 12226] <... bpf resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12227] <... write resumed>) = 4 [pid 12226] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] close(3 [pid 12227] close(3 [pid 12226] <... bpf resumed>) = 4 [pid 12225] <... bpf resumed>) = 6 [pid 5071] mkdir("./1463", 0777 [pid 5066] <... close resumed>) = 0 [pid 12227] <... close resumed>) = 0 [pid 12226] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] rmdir("./1383" [pid 12227] symlink("/dev/binderfs", "./binderfs" [pid 12225] exit_group(0 [pid 5071] <... mkdir resumed>) = 0 [pid 12227] <... symlink resumed>) = 0 [pid 12225] <... exit_group resumed>) = ? [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... rmdir resumed>) = 0 [pid 12226] <... bpf resumed>) = 5 [pid 12226] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12227] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12226] <... bpf resumed>) = 6 [pid 5066] mkdir("./1384", 0777./strace-static-x86_64: Process 12228 attached [pid 12227] <... bpf resumed>) = 3 [pid 12226] exit_group(0 [pid 12228] set_robust_list(0x5555686ec660, 24 [pid 5066] <... mkdir resumed>) = 0 [pid 12227] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12226] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12228 [pid 12228] <... set_robust_list resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12228] chdir("./1463" [pid 12227] <... bpf resumed>) = 4 [pid 12228] <... chdir resumed>) = 0 [pid 12227] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12229 attached [pid 12228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12227] <... bpf resumed>) = 5 [pid 12226] +++ exited with 0 +++ [pid 12225] +++ exited with 0 +++ [pid 12229] set_robust_list(0x5555686ec660, 24 [pid 12228] <... prctl resumed>) = 0 [pid 12229] <... set_robust_list resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12226, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12229] chdir("./1384" [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12229] <... chdir resumed>) = 0 [pid 12228] setpgid(0, 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12225, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12229] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12228] <... setpgid resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12229 [pid 12229] <... prctl resumed>) = 0 [pid 12228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12227] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12229] setpgid(0, 0 [pid 5068] umount2("./1426", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12229] <... setpgid resumed>) = 0 [pid 12228] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12228] write(3, "1000", 4 [pid 5068] openat(AT_FDCWD, "./1426", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12229] <... openat resumed>) = 3 [pid 12228] <... write resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 12229] write(3, "1000", 4 [pid 12228] close(3 [pid 5068] newfstatat(3, "", [pid 12229] <... write resumed>) = 4 [pid 12228] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12229] close(3 [pid 12228] symlink("/dev/binderfs", "./binderfs" [pid 5068] getdents64(3, [pid 12229] <... close resumed>) = 0 [pid 12229] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12229] <... symlink resumed>) = 0 [pid 12228] <... symlink resumed>) = 0 [pid 5067] umount2("./1408", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1426/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12229] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12228] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(AT_FDCWD, "./1426/binderfs", [pid 5067] openat(AT_FDCWD, "./1408", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12229] <... bpf resumed>) = 3 [pid 12228] <... bpf resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12229] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1426/binderfs" [pid 12229] <... bpf resumed>) = 4 [pid 12228] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... unlink resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 12229] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] getdents64(3, [pid 12229] <... bpf resumed>) = 5 [pid 12228] <... bpf resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1426" [pid 12229] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12228] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12227] <... bpf resumed>) = 6 [pid 12229] <... bpf resumed>) = 6 [pid 5068] mkdir("./1427", 0777 [pid 12229] exit_group(0 [pid 12228] <... bpf resumed>) = 5 [pid 12227] exit_group(0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12229] <... exit_group resumed>) = ? [pid 5068] <... mkdir resumed>) = 0 [pid 5067] umount2("./1408/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12229] +++ exited with 0 +++ [pid 12228] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12227] <... exit_group resumed>) = ? [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12229, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 12230 attached [pid 12227] +++ exited with 0 +++ [pid 5067] newfstatat(AT_FDCWD, "./1408/binderfs", [pid 12230] set_robust_list(0x5555686ec660, 24 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12227, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5067] unlink("./1408/binderfs" [pid 12230] <... set_robust_list resumed>) = 0 [pid 5066] umount2("./1384", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12230] chdir("./1427" [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12230 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12230] <... chdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1384", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12230] <... prctl resumed>) = 0 [pid 5069] umount2("./1448", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5066] newfstatat(3, "", [pid 12230] setpgid(0, 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 12230] <... setpgid resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1448", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] rmdir("./1408" [pid 5066] getdents64(3, [pid 12230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12230] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5067] <... rmdir resumed>) = 0 [pid 5066] umount2("./1384/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12230] write(3, "1000", 4 [pid 12228] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mkdir("./1409", 0777 [pid 5066] newfstatat(AT_FDCWD, "./1384/binderfs", [pid 12230] <... write resumed>) = 4 [pid 12228] exit_group(0 [pid 12230] close(3 [pid 12228] <... exit_group resumed>) = ? [pid 5069] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12230] <... close resumed>) = 0 [pid 12228] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12228, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] umount2("./1448/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1448/binderfs", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12230] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1384/binderfs"./strace-static-x86_64: Process 12231 attached [pid 12230] <... symlink resumed>) = 0 [pid 5071] umount2("./1463", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] unlink("./1448/binderfs" [pid 5066] <... unlink resumed>) = 0 [pid 12231] set_robust_list(0x5555686ec660, 24 [pid 12230] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12231 [pid 12230] <... bpf resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1463", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(3, [pid 5066] getdents64(3, [pid 12230] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12230] <... bpf resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 5069] close(3 [pid 5066] close(3 [pid 12230] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12231] <... set_robust_list resumed>) = 0 [pid 12231] chdir("./1409" [pid 5071] getdents64(3, [pid 5069] rmdir("./1448" [pid 5066] rmdir("./1384" [pid 12231] <... chdir resumed>) = 0 [pid 12231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... rmdir resumed>) = 0 [pid 12231] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12230] <... bpf resumed>) = 5 [pid 12231] setpgid(0, 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12230] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1463/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1449", 0777 [pid 5066] mkdir("./1385", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12231] <... setpgid resumed>) = 0 [pid 12231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] newfstatat(AT_FDCWD, "./1463/binderfs", [pid 5066] <... mkdir resumed>) = 0 [pid 12231] write(3, "1000", 4) = 4 [pid 12231] close(3) = 0 [pid 12231] symlink("/dev/binderfs", "./binderfs" [pid 12230] <... bpf resumed>) = 6 [pid 12230] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12231] <... symlink resumed>) = 0 [pid 12230] <... exit_group resumed>) = ? [pid 5071] unlink("./1463/binderfs" [pid 12231] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12231] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12231] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12233 attached ./strace-static-x86_64: Process 12232 attached [pid 12230] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 12233] set_robust_list(0x5555686ec660, 24 [pid 12232] set_robust_list(0x5555686ec660, 24 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12233 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12230, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12232 [pid 12232] <... set_robust_list resumed>) = 0 [pid 12231] <... bpf resumed>) = 5 [pid 12233] <... set_robust_list resumed>) = 0 [pid 12232] chdir("./1385" [pid 12231] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] close(3 [pid 12232] <... chdir resumed>) = 0 [pid 5068] umount2("./1427", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12233] chdir("./1449" [pid 12232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12233] <... chdir resumed>) = 0 [pid 12232] <... prctl resumed>) = 0 [pid 12231] <... bpf resumed>) = 6 [pid 12233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12232] setpgid(0, 0 [pid 5071] rmdir("./1463" [pid 5068] openat(AT_FDCWD, "./1427", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12233] <... prctl resumed>) = 0 [pid 12232] <... setpgid resumed>) = 0 [pid 12231] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12233] setpgid(0, 0 [pid 12232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12232] <... openat resumed>) = 3 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] mkdir("./1464", 0777 [pid 12233] <... setpgid resumed>) = 0 [pid 12233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12232] write(3, "1000", 4 [pid 12231] <... exit_group resumed>) = ? [pid 5071] <... mkdir resumed>) = 0 [pid 5068] umount2("./1427/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12233] <... openat resumed>) = 3 [pid 12232] <... write resumed>) = 4 [pid 12232] close(3) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12232] symlink("/dev/binderfs", "./binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1427/binderfs", [pid 12232] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12233] write(3, "1000", 4 [pid 12232] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12231] +++ exited with 0 +++ ./strace-static-x86_64: Process 12234 attached [pid 12233] <... write resumed>) = 4 [pid 5068] unlink("./1427/binderfs" [pid 12233] close(3 [pid 12232] <... bpf resumed>) = 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12231, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12233] <... close resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12234] set_robust_list(0x5555686ec660, 24 [pid 12233] symlink("/dev/binderfs", "./binderfs" [pid 12232] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... unlink resumed>) = 0 [pid 12234] <... set_robust_list resumed>) = 0 [pid 12233] <... symlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12234 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12232] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 12234] chdir("./1464" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 12233] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12234] <... chdir resumed>) = 0 [pid 12232] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] rmdir("./1427" [pid 12233] <... bpf resumed>) = 3 [pid 12234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... rmdir resumed>) = 0 [pid 12234] <... prctl resumed>) = 0 [pid 12233] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12232] <... bpf resumed>) = 5 [pid 5067] umount2("./1409", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12234] setpgid(0, 0 [pid 5068] mkdir("./1428", 0777 [pid 12234] <... setpgid resumed>) = 0 [pid 12233] <... bpf resumed>) = 4 [pid 12232] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 12234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12233] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] openat(AT_FDCWD, "./1409", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12234] <... openat resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12234] write(3, "1000", 4 [pid 12233] <... bpf resumed>) = 5 [pid 5067] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12235 attached [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12235 [pid 12234] <... write resumed>) = 4 [pid 5067] newfstatat(3, "", [pid 12235] set_robust_list(0x5555686ec660, 24 [pid 12234] close(3 [pid 12233] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12234] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 12234] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12235] <... set_robust_list resumed>) = 0 [pid 5067] umount2("./1409/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12232] <... bpf resumed>) = 6 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12235] chdir("./1428") = 0 [pid 12234] <... symlink resumed>) = 0 [pid 12233] <... bpf resumed>) = 6 [pid 12232] exit_group(0 [pid 5067] newfstatat(AT_FDCWD, "./1409/binderfs", [pid 12235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12234] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12233] exit_group(0 [pid 12232] <... exit_group resumed>) = ? [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12235] <... prctl resumed>) = 0 [pid 12234] <... bpf resumed>) = 3 [pid 5067] unlink("./1409/binderfs" [pid 12235] setpgid(0, 0 [pid 12233] <... exit_group resumed>) = ? [pid 12235] <... setpgid resumed>) = 0 [pid 12234] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... unlink resumed>) = 0 [pid 12235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12234] <... bpf resumed>) = 4 [pid 12234] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] getdents64(3, [pid 12235] <... openat resumed>) = 3 [pid 12235] write(3, "1000", 4) = 4 [pid 12235] close(3 [pid 12234] <... bpf resumed>) = 5 [pid 12233] +++ exited with 0 +++ [pid 12232] +++ exited with 0 +++ [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12235] <... close resumed>) = 0 [pid 12234] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12233, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12232, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] close(3 [pid 5069] umount2("./1449", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12235] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1385", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 12235] <... bpf resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1449", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12235] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1385", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12235] <... bpf resumed>) = 4 [pid 5069] newfstatat(3, "", [pid 5067] rmdir("./1409" [pid 5066] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12235] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] getdents64(3, [pid 5066] newfstatat(3, "", [pid 12235] <... bpf resumed>) = 5 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./1449/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./1410", 0777 [pid 12235] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] newfstatat(AT_FDCWD, "./1449/binderfs", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5069] unlink("./1449/binderfs" [pid 5066] umount2("./1385/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1385/binderfs", [pid 12235] <... bpf resumed>) = 6 [pid 12234] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12235] exit_group(0./strace-static-x86_64: Process 12236 attached ) = ? [pid 12234] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] unlink("./1385/binderfs" [pid 12236] set_robust_list(0x5555686ec660, 24 [pid 12234] <... exit_group resumed>) = ? [pid 5069] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 12236] <... set_robust_list resumed>) = 0 [pid 12235] +++ exited with 0 +++ [pid 12234] +++ exited with 0 +++ [pid 5069] <... close resumed>) = 0 [pid 12236] chdir("./1410" [pid 5069] rmdir("./1449" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12235, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12236 [pid 5066] getdents64(3, [pid 12236] <... chdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12234, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] close(3 [pid 12236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] umount2("./1464", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1450", 0777 [pid 5066] <... close resumed>) = 0 [pid 12236] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... mkdir resumed>) = 0 [pid 5068] umount2("./1428", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1385" [pid 12236] <... setpgid resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1464", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./1428", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12237 attached [pid 12236] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5068] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12237] set_robust_list(0x5555686ec660, 24 [pid 12236] write(3, "1000", 4 [pid 5071] getdents64(3, [pid 5066] mkdir("./1386", 0777 [pid 12237] <... set_robust_list resumed>) = 0 [pid 12236] <... write resumed>) = 4 [pid 5068] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1464/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12238 attached [pid 12237] chdir("./1450" [pid 12236] close(3 [pid 5071] newfstatat(AT_FDCWD, "./1464/binderfs", [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12237 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12236] <... close resumed>) = 0 [pid 5071] unlink("./1464/binderfs" [pid 5068] umount2("./1428/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12238] set_robust_list(0x5555686ec660, 24 [pid 12237] <... chdir resumed>) = 0 [pid 12236] symlink("/dev/binderfs", "./binderfs" [pid 12238] <... set_robust_list resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12237] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] newfstatat(AT_FDCWD, "./1428/binderfs", [pid 12238] chdir("./1386" [pid 12237] <... prctl resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12238 [pid 12237] setpgid(0, 0 [pid 12236] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 12237] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] unlink("./1428/binderfs" [pid 12238] <... chdir resumed>) = 0 [pid 5071] close(3) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] rmdir("./1464" [pid 12238] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12236] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 12238] <... prctl resumed>) = 0 [pid 12237] <... openat resumed>) = 3 [pid 12238] setpgid(0, 0 [pid 12237] write(3, "1000", 4 [pid 12238] <... setpgid resumed>) = 0 [pid 12236] <... bpf resumed>) = 3 [pid 12237] <... write resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12237] close(3) = 0 [pid 5068] close(3 [pid 12238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12237] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./1465", 0777 [pid 5068] <... close resumed>) = 0 [pid 12236] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12237] <... symlink resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] rmdir("./1428" [pid 12238] <... openat resumed>) = 3 [pid 12237] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... rmdir resumed>) = 0 [pid 12238] write(3, "1000", 4 [pid 12237] <... bpf resumed>) = 3 [pid 12236] <... bpf resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12238] <... write resumed>) = 4 [pid 12237] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12236] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] mkdir("./1429", 0777./strace-static-x86_64: Process 12239 attached [pid 12238] close(3 [pid 12237] <... bpf resumed>) = 4 [pid 12239] set_robust_list(0x5555686ec660, 24 [pid 12238] <... close resumed>) = 0 [pid 12238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12236] <... bpf resumed>) = 5 [pid 12238] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12237] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... mkdir resumed>) = 0 [pid 12239] <... set_robust_list resumed>) = 0 [pid 12238] <... bpf resumed>) = 3 [pid 12236] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12239 [pid 12239] chdir("./1465" [pid 12238] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12237] <... bpf resumed>) = 5 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12239] <... chdir resumed>) = 0 [pid 12238] <... bpf resumed>) = 4 [pid 12236] <... bpf resumed>) = 6 [pid 12239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12238] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12239] <... prctl resumed>) = 0 [pid 12238] <... bpf resumed>) = 5 [pid 12239] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 12240 attached [pid 12237] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12236] exit_group(0 [pid 12240] set_robust_list(0x5555686ec660, 24) = 0 [pid 12239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12238] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12237] <... bpf resumed>) = 6 [pid 12236] <... exit_group resumed>) = ? [pid 12240] chdir("./1429" [pid 12239] <... openat resumed>) = 3 [pid 12238] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12240 [pid 12238] exit_group(0 [pid 12239] write(3, "1000", 4 [pid 12238] <... exit_group resumed>) = ? [pid 12240] <... chdir resumed>) = 0 [pid 12237] exit_group(0 [pid 12240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12237] <... exit_group resumed>) = ? [pid 12240] <... prctl resumed>) = 0 [pid 12239] <... write resumed>) = 4 [pid 12236] +++ exited with 0 +++ [pid 12239] close(3 [pid 12240] setpgid(0, 0 [pid 12239] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12236, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12239] symlink("/dev/binderfs", "./binderfs" [pid 12240] <... setpgid resumed>) = 0 [pid 12239] <... symlink resumed>) = 0 [pid 12239] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12238] +++ exited with 0 +++ [pid 5067] umount2("./1410", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12239] <... bpf resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12239] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] openat(AT_FDCWD, "./1410", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12240] <... openat resumed>) = 3 [pid 12239] <... bpf resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12238, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12240] write(3, "1000", 4 [pid 12237] +++ exited with 0 +++ [pid 5066] umount2("./1386", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12239] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12240] <... write resumed>) = 4 [pid 12239] <... bpf resumed>) = 5 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./1386", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12240] close(3 [pid 12239] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12237, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 12240] <... close resumed>) = 0 [pid 5069] umount2("./1450", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(3, "", [pid 12240] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1410/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12240] <... symlink resumed>) = 0 [pid 5066] getdents64(3, [pid 5067] newfstatat(AT_FDCWD, "./1410/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12240] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] openat(AT_FDCWD, "./1450", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] unlink("./1410/binderfs" [pid 5066] umount2("./1386/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 12240] <... bpf resumed>) = 3 [pid 12239] <... bpf resumed>) = 6 [pid 5069] <... openat resumed>) = 3 [pid 5066] newfstatat(AT_FDCWD, "./1386/binderfs", [pid 12240] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12239] exit_group(0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12240] <... bpf resumed>) = 4 [pid 12239] <... exit_group resumed>) = ? [pid 5069] newfstatat(3, "", [pid 5067] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12240] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12239] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] unlink("./1386/binderfs" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12239, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5067] rmdir("./1410" [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... rmdir resumed>) = 0 [pid 12240] <... bpf resumed>) = 5 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 5071] umount2("./1465", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1411", 0777 [pid 12240] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5069] umount2("./1450/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./1465", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(AT_FDCWD, "./1450/binderfs", [pid 5066] close(3./strace-static-x86_64: Process 12241 attached [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... close resumed>) = 0 [pid 12241] set_robust_list(0x5555686ec660, 24 [pid 5069] unlink("./1450/binderfs" [pid 5066] rmdir("./1386" [pid 12241] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1465/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12241 [pid 5066] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1465/binderfs", [pid 12241] chdir("./1411" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5071] unlink("./1465/binderfs" [pid 5066] mkdir("./1387", 0777 [pid 12241] <... chdir resumed>) = 0 [pid 12240] <... bpf resumed>) = 6 [pid 5071] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5071] getdents64(3, [pid 12241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12240] exit_group(0 [pid 5069] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 12241] <... prctl resumed>) = 0 [pid 12240] <... exit_group resumed>) = ? [pid 5069] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1465") = 0 [pid 12241] setpgid(0, 0 [pid 5071] mkdir("./1466", 0777./strace-static-x86_64: Process 12242 attached [pid 12241] <... setpgid resumed>) = 0 [pid 12240] +++ exited with 0 +++ [pid 5069] rmdir("./1450" [pid 12242] set_robust_list(0x5555686ec660, 24 [pid 12241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12242] <... set_robust_list resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12240, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12242] chdir("./1387" [pid 5071] <... mkdir resumed>) = 0 [pid 12242] <... chdir resumed>) = 0 [pid 12241] write(3, "1000", 4 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] umount2("./1429", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12242 [pid 12242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12241] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12242] <... prctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] mkdir("./1451", 0777 [pid 5068] openat(AT_FDCWD, "./1429", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12242] setpgid(0, 0 [pid 12241] close(3 [pid 5068] <... openat resumed>) = 3 [pid 12242] <... setpgid resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] getdents64(3, [pid 12242] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1429/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12242] write(3, "1000", 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12243 attached [pid 12242] <... write resumed>) = 4 [pid 12241] <... close resumed>) = 0 [pid 12241] symlink("/dev/binderfs", "./binderfs" [pid 12243] set_robust_list(0x5555686ec660, 24 [pid 12242] close(3 [pid 5068] newfstatat(AT_FDCWD, "./1429/binderfs", [pid 12243] <... set_robust_list resumed>) = 0 [pid 12242] <... close resumed>) = 0 [pid 12241] <... symlink resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12243] chdir("./1466" [pid 12242] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12243 [pid 5068] unlink("./1429/binderfs" [pid 12243] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 12244 attached [pid 12243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12242] <... symlink resumed>) = 0 [pid 12241] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... unlink resumed>) = 0 [pid 12243] <... prctl resumed>) = 0 [pid 12242] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12241] <... bpf resumed>) = 3 [pid 12244] set_robust_list(0x5555686ec660, 24 [pid 12243] setpgid(0, 0 [pid 12242] <... bpf resumed>) = 3 [pid 12241] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 12244] <... set_robust_list resumed>) = 0 [pid 12243] <... setpgid resumed>) = 0 [pid 12242] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12244 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12244] chdir("./1451" [pid 12243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12241] <... bpf resumed>) = 4 [pid 5068] close(3 [pid 12244] <... chdir resumed>) = 0 [pid 12242] <... bpf resumed>) = 4 [pid 12243] <... openat resumed>) = 3 [pid 12241] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... close resumed>) = 0 [pid 12242] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12244] <... prctl resumed>) = 0 [pid 12243] write(3, "1000", 4 [pid 5068] rmdir("./1429" [pid 12241] <... bpf resumed>) = 5 [pid 5068] <... rmdir resumed>) = 0 [pid 12244] setpgid(0, 0 [pid 12243] <... write resumed>) = 4 [pid 12244] <... setpgid resumed>) = 0 [pid 12243] close(3 [pid 5068] mkdir("./1430", 0777 [pid 12244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12243] <... close resumed>) = 0 [pid 12242] <... bpf resumed>) = 5 [pid 12241] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12243] symlink("/dev/binderfs", "./binderfs" [pid 12244] <... openat resumed>) = 3 [pid 12243] <... symlink resumed>) = 0 [pid 12241] <... bpf resumed>) = 6 [pid 5068] <... mkdir resumed>) = 0 [pid 12244] write(3, "1000", 4 [pid 12243] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12242] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12241] exit_group(0 [pid 12244] <... write resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12243] <... bpf resumed>) = 3 [pid 12241] <... exit_group resumed>) = ? [pid 12244] close(3) = 0 [pid 12243] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12242] <... bpf resumed>) = 6 ./strace-static-x86_64: Process 12245 attached [pid 12244] symlink("/dev/binderfs", "./binderfs" [pid 12243] <... bpf resumed>) = 4 [pid 12242] exit_group(0 [pid 12245] set_robust_list(0x5555686ec660, 24 [pid 12242] <... exit_group resumed>) = ? [pid 12245] <... set_robust_list resumed>) = 0 [pid 12244] <... symlink resumed>) = 0 [pid 12243] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12245 [pid 12245] chdir("./1430") = 0 [pid 12245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12245] setpgid(0, 0) = 0 [pid 12244] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12243] <... bpf resumed>) = 5 [pid 12244] <... bpf resumed>) = 3 [pid 12244] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12243] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12245] <... openat resumed>) = 3 [pid 12245] write(3, "1000", 4 [pid 12244] <... bpf resumed>) = 4 [pid 12245] <... write resumed>) = 4 [pid 12245] close(3) = 0 [pid 12244] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12244] <... bpf resumed>) = 5 [pid 12245] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12244] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12242] +++ exited with 0 +++ [pid 12241] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12241, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12245] <... bpf resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12242, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12245] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12245] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] umount2("./1387", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1411", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1387", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1411", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] <... openat resumed>) = 3 [pid 12245] <... bpf resumed>) = 5 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12245] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] newfstatat(3, "", [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 5067] umount2("./1411/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1411/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1411/binderfs" [pid 5066] umount2("./1387/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1387/binderfs", [pid 5067] close(3) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] rmdir("./1411" [pid 5066] unlink("./1387/binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1412", 0777) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1387"./strace-static-x86_64: Process 12246 attached [pid 12244] <... bpf resumed>) = 6 [pid 12243] <... bpf resumed>) = 6 [pid 5066] <... rmdir resumed>) = 0 [pid 12245] <... bpf resumed>) = 6 [pid 12246] set_robust_list(0x5555686ec660, 24 [pid 12245] exit_group(0 [pid 12244] exit_group(0 [pid 12243] exit_group(0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12246 [pid 5066] mkdir("./1388", 0777 [pid 12246] <... set_robust_list resumed>) = 0 [pid 12245] <... exit_group resumed>) = ? [pid 12244] <... exit_group resumed>) = ? [pid 12243] <... exit_group resumed>) = ? [pid 12246] chdir("./1412" [pid 12245] +++ exited with 0 +++ [pid 5066] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12245, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12246] <... chdir resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12244] +++ exited with 0 +++ ./strace-static-x86_64: Process 12247 attached [pid 12246] <... prctl resumed>) = 0 [pid 12243] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12244, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12247] set_robust_list(0x5555686ec660, 24 [pid 12246] setpgid(0, 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12243, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12247] <... set_robust_list resumed>) = 0 [pid 12246] <... setpgid resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] umount2("./1430", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12247 [pid 12247] chdir("./1388" [pid 12246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12247] <... chdir resumed>) = 0 [pid 12246] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./1430", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12246] write(3, "1000", 4 [pid 12247] <... prctl resumed>) = 0 [pid 12246] <... write resumed>) = 4 [pid 5071] umount2("./1466", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12247] setpgid(0, 0 [pid 12246] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12247] <... setpgid resumed>) = 0 [pid 12246] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12246] symlink("/dev/binderfs", "./binderfs" [pid 5071] openat(AT_FDCWD, "./1466", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] umount2("./1451", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(3, "", [pid 12247] <... openat resumed>) = 3 [pid 12246] <... symlink resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12247] write(3, "1000", 4 [pid 12246] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 12247] <... write resumed>) = 4 [pid 12246] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5069] openat(AT_FDCWD, "./1451", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12247] close(3 [pid 12246] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12247] <... close resumed>) = 0 [pid 12246] <... bpf resumed>) = 4 [pid 12247] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./1430/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12247] <... symlink resumed>) = 0 [pid 12246] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1430/binderfs", [pid 12247] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12246] <... bpf resumed>) = 5 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12247] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] getdents64(3, [pid 5068] unlink("./1430/binderfs" [pid 12247] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12246] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1466/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... unlink resumed>) = 0 [pid 12247] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1451/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 12247] <... bpf resumed>) = 5 [pid 12246] <... bpf resumed>) = 6 [pid 5071] newfstatat(AT_FDCWD, "./1466/binderfs", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 12246] exit_group(0 [pid 5068] <... close resumed>) = 0 [pid 12247] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12246] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1451/binderfs", [pid 5068] rmdir("./1430" [pid 12247] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12247] exit_group(0) = ? [pid 5071] unlink("./1466/binderfs" [pid 5069] unlink("./1451/binderfs" [pid 5068] mkdir("./1431", 0777 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3./strace-static-x86_64: Process 12248 attached [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12248 [pid 5071] close(3 [pid 12248] set_robust_list(0x5555686ec660, 24 [pid 5071] <... close resumed>) = 0 [pid 5069] rmdir("./1451" [pid 12248] <... set_robust_list resumed>) = 0 [pid 5071] rmdir("./1466" [pid 12248] chdir("./1431" [pid 5071] <... rmdir resumed>) = 0 [pid 12248] <... chdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12248] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] mkdir("./1452", 0777 [pid 12248] <... prctl resumed>) = 0 [pid 12248] setpgid(0, 0 [pid 5071] mkdir("./1467", 0777 [pid 12248] <... setpgid resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 12248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12250 attached ./strace-static-x86_64: Process 12249 attached [pid 12248] <... openat resumed>) = 3 [pid 12246] +++ exited with 0 +++ [pid 12250] set_robust_list(0x5555686ec660, 24) = 0 [pid 12249] set_robust_list(0x5555686ec660, 24 [pid 12248] write(3, "1000", 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12249 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12246, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12249] <... set_robust_list resumed>) = 0 [pid 12248] <... write resumed>) = 4 [pid 12250] chdir("./1467" [pid 12249] chdir("./1452" [pid 12248] close(3 [pid 12247] +++ exited with 0 +++ [pid 12250] <... chdir resumed>) = 0 [pid 12249] <... chdir resumed>) = 0 [pid 12248] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12250 [pid 12250] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12249] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12248] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./1412", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12247, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12250] <... prctl resumed>) = 0 [pid 12249] <... prctl resumed>) = 0 [pid 12248] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12250] setpgid(0, 0 [pid 12249] setpgid(0, 0 [pid 12248] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] openat(AT_FDCWD, "./1412", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... restart_syscall resumed>) = 0 [pid 12250] <... setpgid resumed>) = 0 [pid 12249] <... setpgid resumed>) = 0 [pid 12248] <... bpf resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 12249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] newfstatat(3, "", [pid 12250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12248] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12250] <... openat resumed>) = 3 [pid 12249] <... openat resumed>) = 3 [pid 12248] <... bpf resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./1388", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12250] write(3, "1000", 4 [pid 12249] write(3, "1000", 4 [pid 12248] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12250] <... write resumed>) = 4 [pid 12249] <... write resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] openat(AT_FDCWD, "./1388", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12250] close(3 [pid 12249] close(3 [pid 12248] <... bpf resumed>) = 5 [pid 5067] umount2("./1412/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 12250] <... close resumed>) = 0 [pid 12249] <... close resumed>) = 0 [pid 12248] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 12250] symlink("/dev/binderfs", "./binderfs" [pid 12249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] newfstatat(AT_FDCWD, "./1412/binderfs", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12249] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12250] <... symlink resumed>) = 0 [pid 12250] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12249] <... bpf resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(3, [pid 12250] <... bpf resumed>) = 3 [pid 12249] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] unlink("./1412/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12250] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12249] <... bpf resumed>) = 4 [pid 12248] <... bpf resumed>) = 6 [pid 5067] <... unlink resumed>) = 0 [pid 5066] umount2("./1388/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12250] <... bpf resumed>) = 4 [pid 12249] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12248] exit_group(0 [pid 12250] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12249] <... bpf resumed>) = 5 [pid 12248] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1388/binderfs", [pid 12250] <... bpf resumed>) = 5 [pid 5067] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12250] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... close resumed>) = 0 [pid 5066] unlink("./1388/binderfs" [pid 5067] rmdir("./1412" [pid 5066] <... unlink resumed>) = 0 [pid 12248] +++ exited with 0 +++ [pid 12249] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12248, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] mkdir("./1413", 0777 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./1431", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 5068] openat(AT_FDCWD, "./1431", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... close resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] rmdir("./1388"./strace-static-x86_64: Process 12251 attached [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12251] set_robust_list(0x5555686ec660, 24 [pid 5068] getdents64(3, [pid 12251] <... set_robust_list resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12251] chdir("./1413" [pid 5068] umount2("./1431/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1389", 0777 [pid 12251] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1431/binderfs", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12251 [pid 5066] <... mkdir resumed>) = 0 [pid 12251] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12251] <... setpgid resumed>) = 0 [pid 5068] unlink("./1431/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 12251] write(3, "1000", 4 [pid 5068] getdents64(3, [pid 12251] <... write resumed>) = 4 [pid 12251] close(3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12251] <... close resumed>) = 0 [pid 5068] close(3 [pid 12251] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... close resumed>) = 0 ./strace-static-x86_64: Process 12252 attached [pid 12251] <... symlink resumed>) = 0 [pid 12250] <... bpf resumed>) = 6 [pid 12249] <... bpf resumed>) = 6 [pid 5068] rmdir("./1431" [pid 12252] set_robust_list(0x5555686ec660, 24 [pid 12251] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12249] exit_group(0 [pid 12252] <... set_robust_list resumed>) = 0 [pid 12250] exit_group(0 [pid 12249] <... exit_group resumed>) = ? [pid 12251] <... bpf resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12252 [pid 12252] chdir("./1389" [pid 12250] <... exit_group resumed>) = ? [pid 12251] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12252] <... chdir resumed>) = 0 [pid 12252] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12251] <... bpf resumed>) = 4 [pid 5068] mkdir("./1432", 0777 [pid 12252] <... prctl resumed>) = 0 [pid 12252] setpgid(0, 0 [pid 12251] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... mkdir resumed>) = 0 [pid 12252] <... setpgid resumed>) = 0 [pid 12250] +++ exited with 0 +++ [pid 12249] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12250, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5071] umount2("./1467", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12249, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12252] <... openat resumed>) = 3 [pid 12251] <... bpf resumed>) = 5 [pid 5071] openat(AT_FDCWD, "./1467", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 12253 attached [pid 12252] write(3, "1000", 4 [pid 12251] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12253 [pid 12253] set_robust_list(0x5555686ec660, 24 [pid 12252] <... write resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 12253] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12253] chdir("./1432" [pid 12252] close(3 [pid 5071] getdents64(3, [pid 12253] <... chdir resumed>) = 0 [pid 12252] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1452", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12252] symlink("/dev/binderfs", "./binderfs" [pid 12253] <... prctl resumed>) = 0 [pid 5071] umount2("./1467/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12253] setpgid(0, 0 [pid 12252] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12253] <... setpgid resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1467/binderfs", [pid 12253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] openat(AT_FDCWD, "./1452", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12252] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12253] <... openat resumed>) = 3 [pid 5071] unlink("./1467/binderfs" [pid 5069] <... openat resumed>) = 3 [pid 12252] <... bpf resumed>) = 3 [pid 12253] write(3, "1000", 4 [pid 12252] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 12253] <... write resumed>) = 4 [pid 5071] getdents64(3, [pid 12253] close(3 [pid 12252] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12253] <... close resumed>) = 0 [pid 5071] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12253] symlink("/dev/binderfs", "./binderfs" [pid 12252] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 12253] <... symlink resumed>) = 0 [pid 5071] rmdir("./1467" [pid 12252] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 12253] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12252] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1452/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12253] <... bpf resumed>) = 3 [pid 5071] mkdir("./1468", 0777 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12253] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12252] <... bpf resumed>) = 6 [pid 12251] <... bpf resumed>) = 6 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1452/binderfs", [pid 12253] <... bpf resumed>) = 4 [pid 12252] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12253] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12254 attached [pid 12252] <... exit_group resumed>) = ? [pid 12251] exit_group(0 [pid 5069] unlink("./1452/binderfs" [pid 12254] set_robust_list(0x5555686ec660, 24 [pid 12253] <... bpf resumed>) = 5 [pid 12251] <... exit_group resumed>) = ? [pid 5069] <... unlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12254 [pid 12253] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12253] exit_group(0) = ? [pid 12253] +++ exited with 0 +++ [pid 12252] +++ exited with 0 +++ [pid 12254] <... set_robust_list resumed>) = 0 [pid 12251] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 12254] chdir("./1468" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12253, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12254] <... chdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12251, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12252, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12254] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] close(3 [pid 12254] <... prctl resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12254] setpgid(0, 0 [pid 5069] rmdir("./1452" [pid 5068] umount2("./1432", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1413", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12254] <... setpgid resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1389", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] mkdir("./1453", 0777 [pid 5068] openat(AT_FDCWD, "./1432", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1413", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12254] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 12254] write(3, "1000", 4 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5067] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./1389", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12254] <... write resumed>) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5066] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12255 attached [pid 5068] umount2("./1432/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1413/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12255] set_robust_list(0x5555686ec660, 24 [pid 12254] close(3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12255 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12255] <... set_robust_list resumed>) = 0 [pid 12254] <... close resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1432/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1413/binderfs", [pid 12254] symlink("/dev/binderfs", "./binderfs" [pid 12255] chdir("./1453" [pid 12254] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./1389/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12255] <... chdir resumed>) = 0 [pid 12254] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1432/binderfs" [pid 5067] unlink("./1413/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12255] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12254] <... bpf resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1389/binderfs", [pid 12255] <... prctl resumed>) = 0 [pid 5068] getdents64(3, [pid 12254] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12255] setpgid(0, 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12255] <... setpgid resumed>) = 0 [pid 12254] <... bpf resumed>) = 4 [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] unlink("./1389/binderfs" [pid 12255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12254] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... close resumed>) = 0 [pid 5067] close(3 [pid 12255] <... openat resumed>) = 3 [pid 5068] rmdir("./1432" [pid 5067] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12255] write(3, "1000", 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] rmdir("./1413" [pid 5066] getdents64(3, [pid 12255] <... write resumed>) = 4 [pid 12255] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12255] <... close resumed>) = 0 [pid 12255] symlink("/dev/binderfs", "./binderfs" [pid 5068] mkdir("./1433", 0777 [pid 5066] close(3 [pid 12255] <... symlink resumed>) = 0 [pid 12254] <... bpf resumed>) = 5 [pid 5068] <... mkdir resumed>) = 0 [pid 12255] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] mkdir("./1414", 0777 [pid 5066] <... close resumed>) = 0 [pid 12255] <... bpf resumed>) = 3 [pid 12254] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 5066] rmdir("./1389" [pid 12255] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12254] <... bpf resumed>) = 6 ./strace-static-x86_64: Process 12256 attached [pid 12255] <... bpf resumed>) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... rmdir resumed>) = 0 [pid 12255] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12256] set_robust_list(0x5555686ec660, 24 [pid 12254] exit_group(0./strace-static-x86_64: Process 12257 attached [pid 12256] <... set_robust_list resumed>) = 0 [pid 12255] <... bpf resumed>) = 5 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12256 [pid 5066] mkdir("./1390", 0777 [pid 12257] set_robust_list(0x5555686ec660, 24 [pid 12256] chdir("./1433" [pid 12254] <... exit_group resumed>) = ? [pid 5066] <... mkdir resumed>) = 0 [pid 12255] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12255] exit_group(0 [pid 12257] <... set_robust_list resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12257 [pid 12255] <... exit_group resumed>) = ? [pid 12257] chdir("./1414" [pid 12256] <... chdir resumed>) = 0 [pid 12257] <... chdir resumed>) = 0 [pid 12256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 12258 attached [pid 12257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12256] setpgid(0, 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12258 [pid 12258] set_robust_list(0x5555686ec660, 24 [pid 12257] <... prctl resumed>) = 0 [pid 12256] <... setpgid resumed>) = 0 [pid 12258] <... set_robust_list resumed>) = 0 [pid 12257] setpgid(0, 0 [pid 12258] chdir("./1390" [pid 12257] <... setpgid resumed>) = 0 [pid 12256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12258] <... chdir resumed>) = 0 [pid 12257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12256] <... openat resumed>) = 3 [pid 12255] +++ exited with 0 +++ [pid 12254] +++ exited with 0 +++ [pid 12258] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12257] <... openat resumed>) = 3 [pid 12256] write(3, "1000", 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12254, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12258] <... prctl resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12255, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12258] setpgid(0, 0 [pid 12256] <... write resumed>) = 4 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] umount2("./1453", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12258] <... setpgid resumed>) = 0 [pid 12257] write(3, "1000", 4 [pid 12256] close(3 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12257] <... write resumed>) = 4 [pid 12256] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1453", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12257] close(3 [pid 12256] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... openat resumed>) = 3 [pid 12258] <... openat resumed>) = 3 [pid 12257] <... close resumed>) = 0 [pid 12256] <... symlink resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 12258] write(3, "1000", 4 [pid 12257] symlink("/dev/binderfs", "./binderfs" [pid 12256] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1468", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12258] <... write resumed>) = 4 [pid 12257] <... symlink resumed>) = 0 [pid 12256] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 12258] close(3 [pid 12257] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12256] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] openat(AT_FDCWD, "./1468", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12258] <... close resumed>) = 0 [pid 12257] <... bpf resumed>) = 3 [pid 12256] <... bpf resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5069] umount2("./1453/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12258] symlink("/dev/binderfs", "./binderfs" [pid 12257] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12256] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(3, "", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12258] <... symlink resumed>) = 0 [pid 12257] <... bpf resumed>) = 4 [pid 12256] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1453/binderfs", [pid 12258] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12257] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12258] <... bpf resumed>) = 3 [pid 12257] <... bpf resumed>) = 5 [pid 12256] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 5069] unlink("./1453/binderfs" [pid 12258] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12258] <... bpf resumed>) = 4 [pid 12257] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12256] <... bpf resumed>) = 6 [pid 5071] umount2("./1468/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... unlink resumed>) = 0 [pid 12258] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12257] <... bpf resumed>) = 6 [pid 12256] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 12258] <... bpf resumed>) = 5 [pid 12257] exit_group(0 [pid 12256] <... exit_group resumed>) = ? [pid 5071] newfstatat(AT_FDCWD, "./1468/binderfs", [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12257] <... exit_group resumed>) = ? [pid 5071] unlink("./1468/binderfs" [pid 12258] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... unlink resumed>) = 0 [pid 5069] close(3 [pid 5071] getdents64(3, [pid 5069] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] rmdir("./1453" [pid 5071] close(3) = 0 [pid 5071] rmdir("./1468" [pid 12257] +++ exited with 0 +++ [pid 12256] +++ exited with 0 +++ [pid 5069] <... rmdir resumed>) = 0 [pid 5069] mkdir("./1454", 0777 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12256, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12257, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1469", 0777 [pid 5069] <... mkdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1433", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1414", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1433", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", ./strace-static-x86_64: Process 12260 attached ./strace-static-x86_64: Process 12259 attached [pid 12258] <... bpf resumed>) = 6 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12259 [pid 5067] openat(AT_FDCWD, "./1414", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12260] set_robust_list(0x5555686ec660, 24 [pid 12259] set_robust_list(0x5555686ec660, 24 [pid 12258] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12260 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12260] <... set_robust_list resumed>) = 0 [pid 12259] <... set_robust_list resumed>) = 0 [pid 12258] <... exit_group resumed>) = ? [pid 12259] chdir("./1454" [pid 5068] getdents64(3, [pid 12259] <... chdir resumed>) = 0 [pid 12260] chdir("./1469" [pid 12258] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(3, "", [pid 12260] <... chdir resumed>) = 0 [pid 12259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] umount2("./1433/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12258, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 12260] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12259] <... prctl resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1433/binderfs", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12260] <... prctl resumed>) = 0 [pid 12259] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1414/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12260] setpgid(0, 0 [pid 12259] <... setpgid resumed>) = 0 [pid 5068] unlink("./1433/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1390", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12260] <... setpgid resumed>) = 0 [pid 12259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... unlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1414/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12259] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] openat(AT_FDCWD, "./1390", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12260] <... openat resumed>) = 3 [pid 12259] write(3, "1000", 4 [pid 5068] getdents64(3, [pid 5067] unlink("./1414/binderfs" [pid 5066] <... openat resumed>) = 3 [pid 12260] write(3, "1000", 4 [pid 12259] <... write resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12259] close(3 [pid 5066] newfstatat(3, "", [pid 12260] <... write resumed>) = 4 [pid 12259] <... close resumed>) = 0 [pid 5068] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12260] close(3 [pid 12259] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1433" [pid 5066] getdents64(3, [pid 12260] <... close resumed>) = 0 [pid 12259] <... symlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12260] symlink("/dev/binderfs", "./binderfs" [pid 12259] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12260] <... symlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] mkdir("./1434", 0777 [pid 5066] umount2("./1390/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12260] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12259] <... bpf resumed>) = 3 [pid 5067] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12260] <... bpf resumed>) = 3 [pid 12259] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1390/binderfs", [pid 12260] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12259] <... bpf resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] rmdir("./1414" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12260] <... bpf resumed>) = 4 [pid 12260] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12259] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12261 attached [pid 12260] <... bpf resumed>) = 5 [pid 5066] unlink("./1390/binderfs" [pid 12261] set_robust_list(0x5555686ec660, 24 [pid 12259] <... bpf resumed>) = 5 [pid 5066] <... unlink resumed>) = 0 [pid 12261] <... set_robust_list resumed>) = 0 [pid 12260] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12259] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12261 [pid 5067] mkdir("./1415", 0777 [pid 5066] getdents64(3, [pid 12261] chdir("./1434" [pid 12260] <... bpf resumed>) = 6 [pid 5067] <... mkdir resumed>) = 0 [pid 12259] <... bpf resumed>) = 6 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12261] <... chdir resumed>) = 0 [pid 12260] exit_group(0 [pid 12261] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12260] <... exit_group resumed>) = ? [pid 12259] exit_group(0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] close(3 [pid 12261] <... prctl resumed>) = 0 [pid 12261] setpgid(0, 0 [pid 12259] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12262 attached [pid 5066] <... close resumed>) = 0 [pid 12262] set_robust_list(0x5555686ec660, 24) = 0 [pid 12261] <... setpgid resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12262 [pid 5066] rmdir("./1390" [pid 12262] chdir("./1415" [pid 12261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12262] <... chdir resumed>) = 0 [pid 12262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... rmdir resumed>) = 0 [pid 12262] <... prctl resumed>) = 0 [pid 12262] setpgid(0, 0 [pid 12261] <... openat resumed>) = 3 [pid 12262] <... setpgid resumed>) = 0 [pid 12261] write(3, "1000", 4 [pid 12262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] mkdir("./1391", 0777 [pid 12262] <... openat resumed>) = 3 [pid 12261] <... write resumed>) = 4 [pid 12262] write(3, "1000", 4 [pid 12261] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 12262] <... write resumed>) = 4 [pid 12261] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12262] close(3 [pid 12261] symlink("/dev/binderfs", "./binderfs" [pid 12262] <... close resumed>) = 0 [pid 12261] <... symlink resumed>) = 0 [pid 12262] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12263 attached ) = 0 [pid 12261] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12263 [pid 12263] set_robust_list(0x5555686ec660, 24) = 0 [pid 12262] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12261] <... bpf resumed>) = 3 [pid 12263] chdir("./1391" [pid 12262] <... bpf resumed>) = 3 [pid 12261] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12263] <... chdir resumed>) = 0 [pid 12262] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12261] <... bpf resumed>) = 4 [pid 12262] <... bpf resumed>) = 4 [pid 12263] <... prctl resumed>) = 0 [pid 12261] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12263] setpgid(0, 0 [pid 12262] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12263] <... setpgid resumed>) = 0 [pid 12261] <... bpf resumed>) = 5 [pid 12263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12261] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12262] <... bpf resumed>) = 5 [pid 12262] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12263] <... openat resumed>) = 3 [pid 12260] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12260, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12263] write(3, "1000", 4 [pid 12262] <... bpf resumed>) = 6 [pid 5071] <... restart_syscall resumed>) = 0 [pid 12263] <... write resumed>) = 4 [pid 12262] exit_group(0 [pid 12261] <... bpf resumed>) = 6 [pid 12259] +++ exited with 0 +++ [pid 12263] close(3 [pid 12262] <... exit_group resumed>) = ? [pid 12261] exit_group(0 [pid 12263] <... close resumed>) = 0 [pid 12261] <... exit_group resumed>) = ? [pid 12263] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./1469", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12263] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12259, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12263] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] openat(AT_FDCWD, "./1469", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12263] <... bpf resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5069] umount2("./1454", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12263] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12263] <... bpf resumed>) = 4 [pid 5069] openat(AT_FDCWD, "./1454", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... openat resumed>) = 3 [pid 12263] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] newfstatat(3, "", [pid 5071] umount2("./1469/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1469/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] getdents64(3, [pid 12263] <... bpf resumed>) = 5 [pid 5071] unlink("./1469/binderfs" [pid 12263] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... unlink resumed>) = 0 [pid 5069] umount2("./1454/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1454/binderfs", [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1454/binderfs" [pid 5071] close(3) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5071] rmdir("./1469" [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5071] mkdir("./1470", 0777 [pid 5069] rmdir("./1454" [pid 12262] +++ exited with 0 +++ [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12261] +++ exited with 0 +++ [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] mkdir("./1455", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12262, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12261, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12264 attached [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12264] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12264 [pid 12264] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 12265 attached [pid 12264] chdir("./1470" [pid 5068] umount2("./1434", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1415", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12264] <... chdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12265 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12265] set_robust_list(0x5555686ec660, 24 [pid 5068] openat(AT_FDCWD, "./1434", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1415", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12265] <... set_robust_list resumed>) = 0 [pid 12264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12263] <... bpf resumed>) = 6 [pid 5068] <... openat resumed>) = 3 [pid 12265] chdir("./1455" [pid 12264] <... prctl resumed>) = 0 [pid 12263] exit_group(0 [pid 5068] newfstatat(3, "", [pid 5067] <... openat resumed>) = 3 [pid 12264] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12265] <... chdir resumed>) = 0 [pid 12264] <... setpgid resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5068] getdents64(3, [pid 12265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12263] <... exit_group resumed>) = ? [pid 12265] setpgid(0, 0 [pid 12264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12265] <... setpgid resumed>) = 0 [pid 12263] +++ exited with 0 +++ [pid 12264] <... openat resumed>) = 3 [pid 5068] umount2("./1434/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 12265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12264] write(3, "1000", 4 [pid 12265] <... openat resumed>) = 3 [pid 12264] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12263, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 12265] write(3, "1000", 4 [pid 12264] close(3 [pid 12265] <... write resumed>) = 4 [pid 12264] <... close resumed>) = 0 [pid 12265] close(3 [pid 12264] symlink("/dev/binderfs", "./binderfs" [pid 12265] <... close resumed>) = 0 [pid 12265] symlink("/dev/binderfs", "./binderfs" [pid 12264] <... symlink resumed>) = 0 [pid 12265] <... symlink resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1434/binderfs", [pid 12265] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12264] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1415/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12265] <... bpf resumed>) = 3 [pid 12264] <... bpf resumed>) = 3 [pid 5068] unlink("./1434/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... restart_syscall resumed>) = 0 [pid 12265] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12264] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12265] <... bpf resumed>) = 4 [pid 5068] <... unlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1415/binderfs", [pid 12265] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12264] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1415/binderfs" [pid 5066] umount2("./1391", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12265] <... bpf resumed>) = 5 [pid 12264] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1391", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12265] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 5068] rmdir("./1434" [pid 5066] newfstatat(3, "", [pid 12264] <... bpf resumed>) = 5 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12264] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] mkdir("./1435", 0777 [pid 5067] close(3) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1391/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1391/binderfs", [pid 12265] <... bpf resumed>) = 6 [pid 12264] <... bpf resumed>) = 6 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] rmdir("./1415" [pid 12265] exit_group(0 [pid 12264] exit_group(0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12264] <... exit_group resumed>) = ? [pid 5066] unlink("./1391/binderfs"./strace-static-x86_64: Process 12266 attached [pid 12265] <... exit_group resumed>) = ? [pid 5067] mkdir("./1416", 0777 [pid 5066] <... unlink resumed>) = 0 [pid 12264] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12264, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5066] getdents64(3, [pid 12266] set_robust_list(0x5555686ec660, 24 [pid 12265] +++ exited with 0 +++ [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12266 [pid 5067] <... mkdir resumed>) = 0 [pid 12266] <... set_robust_list resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12265, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12266] chdir("./1435" [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5066] close(3 [pid 12266] <... chdir resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12266] setpgid(0, 0 [pid 5071] umount2("./1470", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1391" [pid 5069] umount2("./1455", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12266] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12267 attached [pid 12266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1470", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./1455", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] mkdir("./1392", 0777 [pid 12267] set_robust_list(0x5555686ec660, 24 [pid 5069] <... openat resumed>) = 3 [pid 12267] <... set_robust_list resumed>) = 0 [pid 12266] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 12267] chdir("./1416" [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(3, "", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12267 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12267] <... chdir resumed>) = 0 [pid 12266] write(3, "1000", 4 [pid 12267] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12266] <... write resumed>) = 4 [pid 12267] <... prctl resumed>) = 0 [pid 12266] close(3 [pid 12267] setpgid(0, 0 [pid 12266] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5071] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12267] <... setpgid resumed>) = 0 [pid 12266] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12266] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12268 attached [pid 12267] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1455/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12268] set_robust_list(0x5555686ec660, 24 [pid 5071] umount2("./1470/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12267] write(3, "1000", 4 [pid 12266] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(AT_FDCWD, "./1455/binderfs", [pid 12268] <... set_robust_list resumed>) = 0 [pid 12267] <... write resumed>) = 4 [pid 12266] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12268 [pid 12268] chdir("./1392" [pid 12267] close(3 [pid 12266] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1470/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12268] <... chdir resumed>) = 0 [pid 12267] <... close resumed>) = 0 [pid 12266] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1455/binderfs" [pid 12268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12267] symlink("/dev/binderfs", "./binderfs" [pid 12266] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] unlink("./1470/binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 12268] <... prctl resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 12268] setpgid(0, 0 [pid 12267] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12268] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12266] <... bpf resumed>) = 5 [pid 5071] close(3 [pid 5069] close(3 [pid 12267] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12268] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12268] write(3, "1000", 4 [pid 5071] rmdir("./1470" [pid 5069] rmdir("./1455" [pid 12268] <... write resumed>) = 4 [pid 12267] <... bpf resumed>) = 3 [pid 12266] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... rmdir resumed>) = 0 [pid 12268] close(3 [pid 12267] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12268] <... close resumed>) = 0 [pid 5071] mkdir("./1471", 0777 [pid 5069] <... rmdir resumed>) = 0 [pid 12268] symlink("/dev/binderfs", "./binderfs" [pid 12267] <... bpf resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 12268] <... symlink resumed>) = 0 [pid 12266] <... bpf resumed>) = 6 [pid 5069] mkdir("./1456", 0777 [pid 12268] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12268] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12267] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12266] exit_group(0 [pid 5069] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12269 attached [pid 12268] <... bpf resumed>) = 4 [pid 12266] <... exit_group resumed>) = ? [pid 12269] set_robust_list(0x5555686ec660, 24 [pid 12268] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12269] <... set_robust_list resumed>) = 0 [pid 12268] <... bpf resumed>) = 5 [pid 12267] <... bpf resumed>) = 5 [pid 12266] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12269 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12269] chdir("./1471" [pid 12268] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12269] <... chdir resumed>) = 0 [pid 12269] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12267] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12266, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12270 attached [pid 12269] <... prctl resumed>) = 0 [pid 12269] setpgid(0, 0) = 0 [pid 12270] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12270 [pid 12270] <... set_robust_list resumed>) = 0 [pid 12269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./1435", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12269] <... openat resumed>) = 3 [pid 12269] write(3, "1000", 4 [pid 12270] chdir("./1456" [pid 12269] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12270] <... chdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1435", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12269] close(3 [pid 5068] <... openat resumed>) = 3 [pid 12269] <... close resumed>) = 0 [pid 12269] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] newfstatat(3, "", [pid 12270] <... prctl resumed>) = 0 [pid 12269] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12270] setpgid(0, 0 [pid 12269] <... bpf resumed>) = 3 [pid 12270] <... setpgid resumed>) = 0 [pid 12269] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12269] <... bpf resumed>) = 4 [pid 12270] <... openat resumed>) = 3 [pid 12269] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12270] write(3, "1000", 4 [pid 12269] <... bpf resumed>) = 5 [pid 5068] umount2("./1435/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12270] <... write resumed>) = 4 [pid 12270] close(3) = 0 [pid 12269] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12270] symlink("/dev/binderfs", "./binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1435/binderfs", [pid 12270] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12270] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1435/binderfs" [pid 12270] <... bpf resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12270] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1435" [pid 12268] <... bpf resumed>) = 6 [pid 5068] <... rmdir resumed>) = 0 [pid 12270] <... bpf resumed>) = 4 [pid 12270] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12268] exit_group(0 [pid 12267] <... bpf resumed>) = 6 [pid 5068] mkdir("./1436", 0777 [pid 12270] <... bpf resumed>) = 5 [pid 12269] <... bpf resumed>) = 6 [pid 12268] <... exit_group resumed>) = ? [pid 12267] exit_group(0 [pid 5068] <... mkdir resumed>) = 0 [pid 12267] <... exit_group resumed>) = ? [pid 12270] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12269] exit_group(0 [pid 12267] +++ exited with 0 +++ [pid 12269] <... exit_group resumed>) = ? [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12267, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12271 attached [pid 12271] set_robust_list(0x5555686ec660, 24) = 0 [pid 5067] umount2("./1416", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12271 [pid 12271] chdir("./1436" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12271] <... chdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1416", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12271] setpgid(0, 0 [pid 5067] newfstatat(3, "", [pid 12271] <... setpgid resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] getdents64(3, [pid 12271] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1416/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12271] write(3, "1000", 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12271] <... write resumed>) = 4 [pid 5067] newfstatat(AT_FDCWD, "./1416/binderfs", [pid 12271] close(3) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12271] symlink("/dev/binderfs", "./binderfs" [pid 12269] +++ exited with 0 +++ [pid 12268] +++ exited with 0 +++ [pid 5067] unlink("./1416/binderfs" [pid 12271] <... symlink resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12269, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... unlink resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12268, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12271] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5067] getdents64(3, [pid 12271] <... bpf resumed>) = 3 [pid 5071] umount2("./1471", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12271] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 12271] <... bpf resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./1471", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1416" [pid 5071] <... openat resumed>) = 3 [pid 5066] umount2("./1392", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12271] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(3, "", [pid 5067] <... rmdir resumed>) = 0 [pid 12271] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mkdir("./1417", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1392", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... openat resumed>) = 3 [pid 12271] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1471/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1471/binderfs", [pid 5066] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1471/binderfs" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... unlink resumed>) = 0 [pid 5066] umount2("./1392/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12270] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12271] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1392/binderfs", [pid 12271] exit_group(0 [pid 12270] exit_group(0 [pid 5071] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12271] <... exit_group resumed>) = ? [pid 12270] <... exit_group resumed>) = ? [pid 5071] <... close resumed>) = 0 [pid 5066] unlink("./1392/binderfs"./strace-static-x86_64: Process 12272 attached [pid 12271] +++ exited with 0 +++ [pid 12270] +++ exited with 0 +++ [pid 5071] rmdir("./1471" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12272 [pid 5066] <... unlink resumed>) = 0 [pid 12272] set_robust_list(0x5555686ec660, 24 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12270, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12272] <... set_robust_list resumed>) = 0 [pid 5066] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12271, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12272] chdir("./1417" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] mkdir("./1472", 0777 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] close(3 [pid 12272] <... chdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] rmdir("./1392" [pid 5068] umount2("./1436", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12272] setpgid(0, 0 [pid 5069] umount2("./1456", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12272] <... setpgid resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] openat(AT_FDCWD, "./1456", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./1436", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12273 attached [pid 12272] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5066] mkdir("./1393", 0777 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12273] set_robust_list(0x5555686ec660, 24 [pid 5066] <... mkdir resumed>) = 0 [pid 12272] write(3, "1000", 4 [pid 5069] newfstatat(3, "", [pid 5068] umount2("./1436/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12273] <... set_robust_list resumed>) = 0 [pid 12272] <... write resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12273 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(AT_FDCWD, "./1436/binderfs", ./strace-static-x86_64: Process 12274 attached [pid 12273] chdir("./1472" [pid 12272] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12274] set_robust_list(0x5555686ec660, 24 [pid 12272] <... close resumed>) = 0 [pid 12274] <... set_robust_list resumed>) = 0 [pid 12273] <... chdir resumed>) = 0 [pid 12272] symlink("/dev/binderfs", "./binderfs" [pid 5069] getdents64(3, [pid 5068] unlink("./1436/binderfs" [pid 12274] chdir("./1393" [pid 12272] <... symlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... unlink resumed>) = 0 [pid 12273] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12274] <... chdir resumed>) = 0 [pid 12273] <... prctl resumed>) = 0 [pid 12272] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1456/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12274 [pid 12274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12273] setpgid(0, 0 [pid 12272] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 12273] <... setpgid resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1436" [pid 12274] <... prctl resumed>) = 0 [pid 12273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12272] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(AT_FDCWD, "./1456/binderfs", [pid 5068] <... rmdir resumed>) = 0 [pid 12273] <... openat resumed>) = 3 [pid 12272] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12273] write(3, "1000", 4 [pid 5069] unlink("./1456/binderfs" [pid 12274] setpgid(0, 0 [pid 12273] <... write resumed>) = 4 [pid 12272] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12274] <... setpgid resumed>) = 0 [pid 12273] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5068] mkdir("./1437", 0777 [pid 12274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12273] <... close resumed>) = 0 [pid 12272] <... bpf resumed>) = 5 [pid 5069] getdents64(3, [pid 5068] <... mkdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12274] <... openat resumed>) = 3 [pid 12273] symlink("/dev/binderfs", "./binderfs" [pid 12272] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12274] write(3, "1000", 4 [pid 12273] <... symlink resumed>) = 0 [pid 12272] <... bpf resumed>) = 6 [pid 5069] close(3 [pid 12274] <... write resumed>) = 4 ./strace-static-x86_64: Process 12275 attached [pid 12274] close(3 [pid 12273] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 12275] set_robust_list(0x5555686ec660, 24) = 0 [pid 12275] chdir("./1437" [pid 12274] <... close resumed>) = 0 [pid 12272] exit_group(0 [pid 5069] rmdir("./1456" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12275 [pid 12274] symlink("/dev/binderfs", "./binderfs" [pid 12272] <... exit_group resumed>) = ? [pid 12275] <... chdir resumed>) = 0 [pid 12273] <... bpf resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 12275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12274] <... symlink resumed>) = 0 [pid 12273] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] mkdir("./1457", 0777 [pid 12275] <... prctl resumed>) = 0 [pid 12274] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12272] +++ exited with 0 +++ [pid 12273] <... bpf resumed>) = 4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12272, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12275] setpgid(0, 0 [pid 12274] <... bpf resumed>) = 3 [pid 12273] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... mkdir resumed>) = 0 [pid 12275] <... setpgid resumed>) = 0 [pid 12274] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./1417", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12274] <... bpf resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12275] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1417", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12276 attached 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12276] set_robust_list(0x5555686ec660, 24 [pid 12275] write(3, "1000", 4 [pid 12274] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12273] <... bpf resumed>) = 5 [pid 5067] umount2("./1417/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12276] <... set_robust_list resumed>) = 0 [pid 12275] <... write resumed>) = 4 [pid 12276] chdir("./1457" [pid 12274] <... bpf resumed>) = 5 [pid 12275] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12275] <... close resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1417/binderfs", [pid 12276] <... chdir resumed>) = 0 [pid 12275] symlink("/dev/binderfs", "./binderfs" [pid 12274] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12273] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12276 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12275] <... symlink resumed>) = 0 [pid 5067] unlink("./1417/binderfs" [pid 12276] <... prctl resumed>) = 0 [pid 12273] <... bpf resumed>) = 6 [pid 12274] <... bpf resumed>) = 6 [pid 12276] setpgid(0, 0 [pid 12275] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12274] exit_group(0 [pid 12273] exit_group(0 [pid 5067] <... unlink resumed>) = 0 [pid 12276] <... setpgid resumed>) = 0 [pid 12276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12275] <... bpf resumed>) = 3 [pid 12273] <... exit_group resumed>) = ? [pid 12275] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12274] <... exit_group resumed>) = ? [pid 5067] getdents64(3, [pid 12276] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12276] write(3, "1000", 4 [pid 5067] close(3 [pid 12276] <... write resumed>) = 4 [pid 12276] close(3 [pid 5067] <... close resumed>) = 0 [pid 12276] <... close resumed>) = 0 [pid 12276] symlink("/dev/binderfs", "./binderfs" [pid 5067] rmdir("./1417" [pid 12275] <... bpf resumed>) = 4 [pid 12276] <... symlink resumed>) = 0 [pid 12275] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... rmdir resumed>) = 0 [pid 12276] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12275] <... bpf resumed>) = 5 [pid 5067] mkdir("./1418", 0777 [pid 12276] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12275] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... mkdir resumed>) = 0 [pid 12276] <... bpf resumed>) = 4 [pid 12276] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12276] <... bpf resumed>) = 5 ./strace-static-x86_64: Process 12277 attached [pid 12277] set_robust_list(0x5555686ec660, 24 [pid 12276] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12277 [pid 12277] <... set_robust_list resumed>) = 0 [pid 12274] +++ exited with 0 +++ [pid 12273] +++ exited with 0 +++ [pid 12277] chdir("./1418" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12273, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12274, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 12277] <... chdir resumed>) = 0 [pid 12277] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12277] setpgid(0, 0 [pid 5071] umount2("./1472", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12277] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1393", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1472", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1393", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12277] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12277] write(3, "1000", 4 [pid 12276] <... bpf resumed>) = 6 [pid 12275] <... bpf resumed>) = 6 [pid 5066] <... openat resumed>) = 3 [pid 12277] <... write resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 12277] close(3 [pid 12276] exit_group(0 [pid 12277] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 12277] symlink("/dev/binderfs", "./binderfs" [pid 12276] <... exit_group resumed>) = ? [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12275] exit_group(0) = ? [pid 12277] <... symlink resumed>) = 0 [pid 12276] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12275] +++ exited with 0 +++ [pid 12277] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1472/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12277] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12276, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12277] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1472/binderfs", [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12275, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1393/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12277] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] umount2("./1437", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./1472/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1393/binderfs", [pid 12277] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... unlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1437", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 5069] umount2("./1457", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12277] <... bpf resumed>) = 5 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12277] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] openat(AT_FDCWD, "./1457", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(3, "", [pid 5066] unlink("./1393/binderfs" [pid 12277] <... bpf resumed>) = 6 [pid 5071] close(3 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] getdents64(3, [pid 12277] exit_group(0 [pid 5071] rmdir("./1472" [pid 5069] newfstatat(3, "", [pid 12277] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1457/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12277] +++ exited with 0 +++ [pid 5071] mkdir("./1473", 0777 [pid 5069] newfstatat(AT_FDCWD, "./1457/binderfs", [pid 5068] umount2("./1437/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3) = 0 [pid 5066] rmdir("./1393") = 0 [pid 5066] mkdir("./1394", 0777 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12277, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] unlink("./1457/binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1437/binderfs", [pid 5066] <... mkdir resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1437/binderfs"./strace-static-x86_64: Process 12278 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12278 [pid 5068] <... unlink resumed>) = 0 [pid 12278] set_robust_list(0x5555686ec660, 24 [pid 5069] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12278] <... set_robust_list resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12278] chdir("./1473") = 0 ./strace-static-x86_64: Process 12279 attached [pid 5069] close(3 [pid 5068] getdents64(3, [pid 5067] umount2("./1418", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12279] set_robust_list(0x5555686ec660, 24) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12279 [pid 5067] openat(AT_FDCWD, "./1418", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12279] chdir("./1394" [pid 12278] <... prctl resumed>) = 0 [pid 5069] rmdir("./1457" [pid 5068] close(3 [pid 5067] newfstatat(3, "", [pid 12279] <... chdir resumed>) = 0 [pid 12278] setpgid(0, 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12279] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12278] <... setpgid resumed>) = 0 [pid 5069] mkdir("./1458", 0777 [pid 5068] rmdir("./1437" [pid 5067] getdents64(3, [pid 12279] <... prctl resumed>) = 0 [pid 12278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12279] setpgid(0, 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12279] <... setpgid resumed>) = 0 [pid 12278] <... openat resumed>) = 3 [pid 5067] umount2("./1418/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12280 attached [pid 12278] write(3, "1000", 4 [pid 5068] mkdir("./1438", 0777 [pid 12279] <... openat resumed>) = 3 [pid 5067] newfstatat(AT_FDCWD, "./1418/binderfs", [pid 12279] write(3, "1000", 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12279] <... write resumed>) = 4 [pid 5067] unlink("./1418/binderfs" [pid 12279] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 12280] set_robust_list(0x5555686ec660, 24 [pid 12279] <... close resumed>) = 0 [pid 12278] <... write resumed>) = 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12280 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12280] <... set_robust_list resumed>) = 0 [pid 12278] close(3 [pid 12279] symlink("/dev/binderfs", "./binderfs" [pid 5067] getdents64(3, [pid 12280] chdir("./1458" [pid 12279] <... symlink resumed>) = 0 [pid 12278] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12279] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12278] symlink("/dev/binderfs", "./binderfs" [pid 5067] close(3 [pid 12279] <... bpf resumed>) = 3 [pid 12278] <... symlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12279] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12278] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] rmdir("./1418" [pid 12280] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 12281 attached [pid 12280] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12279] <... bpf resumed>) = 4 [pid 12278] <... bpf resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 12281] set_robust_list(0x5555686ec660, 24 [pid 12280] <... prctl resumed>) = 0 [pid 12279] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] mkdir("./1419", 0777 [pid 12281] <... set_robust_list resumed>) = 0 [pid 12280] setpgid(0, 0 [pid 12279] <... bpf resumed>) = 5 [pid 12278] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12281 [pid 5067] <... mkdir resumed>) = 0 [pid 12281] chdir("./1438" [pid 12280] <... setpgid resumed>) = 0 [pid 12279] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12281] <... chdir resumed>) = 0 [pid 12280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12279] <... bpf resumed>) = 6 [pid 12278] <... bpf resumed>) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12279] exit_group(0./strace-static-x86_64: Process 12282 attached [pid 12281] setpgid(0, 0 [pid 12280] <... openat resumed>) = 3 [pid 12278] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12282] set_robust_list(0x5555686ec660, 24 [pid 12281] <... setpgid resumed>) = 0 [pid 12280] write(3, "1000", 4 [pid 12279] <... exit_group resumed>) = ? [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12282 [pid 12282] <... set_robust_list resumed>) = 0 [pid 12281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12280] <... write resumed>) = 4 [pid 12278] <... bpf resumed>) = 5 [pid 12278] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12282] chdir("./1419" [pid 12281] <... openat resumed>) = 3 [pid 12280] close(3 [pid 12279] +++ exited with 0 +++ [pid 12282] <... chdir resumed>) = 0 [pid 12281] write(3, "1000", 4 [pid 12280] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12279, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12281] <... write resumed>) = 4 [pid 12280] symlink("/dev/binderfs", "./binderfs" [pid 12282] <... prctl resumed>) = 0 [pid 12281] close(3 [pid 12280] <... symlink resumed>) = 0 [pid 12282] setpgid(0, 0 [pid 12281] <... close resumed>) = 0 [pid 12282] <... setpgid resumed>) = 0 [pid 12281] symlink("/dev/binderfs", "./binderfs" [pid 12282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12281] <... symlink resumed>) = 0 [pid 12280] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] umount2("./1394", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12282] <... openat resumed>) = 3 [pid 12281] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12280] <... bpf resumed>) = 3 [pid 12278] <... bpf resumed>) = 6 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12282] write(3, "1000", 4 [pid 12281] <... bpf resumed>) = 3 [pid 12280] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12278] exit_group(0 [pid 5066] openat(AT_FDCWD, "./1394", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12282] <... write resumed>) = 4 [pid 12281] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12280] <... bpf resumed>) = 4 [pid 12282] close(3 [pid 5066] <... openat resumed>) = 3 [pid 12281] <... bpf resumed>) = 4 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1394/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1394/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12278] <... exit_group resumed>) = ? [pid 12282] <... close resumed>) = 0 [pid 5066] unlink("./1394/binderfs" [pid 12280] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 12282] symlink("/dev/binderfs", "./binderfs" [pid 12281] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12280] <... bpf resumed>) = 5 [pid 12278] +++ exited with 0 +++ [pid 12280] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12282] <... symlink resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12278, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 12282] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12281] <... bpf resumed>) = 5 [pid 12280] <... bpf resumed>) = 6 [pid 5066] rmdir("./1394" [pid 5071] umount2("./1473", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12280] exit_group(0 [pid 12282] <... bpf resumed>) = 3 [pid 12280] <... exit_group resumed>) = ? [pid 12282] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 12281] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] openat(AT_FDCWD, "./1473", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12282] <... bpf resumed>) = 4 [pid 5066] mkdir("./1395", 0777 [pid 12280] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 12282] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12280, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] newfstatat(3, "", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./1458", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1458", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] newfstatat(3, "", [pid 12282] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1458/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12283 attached [pid 12282] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 12283] set_robust_list(0x5555686ec660, 24 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12283 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12283] <... set_robust_list resumed>) = 0 [pid 5071] umount2("./1473/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./1458/binderfs", [pid 12283] chdir("./1395" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1473/binderfs", [pid 5069] unlink("./1458/binderfs" [pid 12283] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... unlink resumed>) = 0 [pid 12283] <... prctl resumed>) = 0 [pid 5071] unlink("./1473/binderfs" [pid 5069] getdents64(3, [pid 12283] setpgid(0, 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12283] <... setpgid resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... close resumed>) = 0 [pid 12283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3) = 0 [pid 5069] rmdir("./1458" [pid 12283] <... openat resumed>) = 3 [pid 12283] write(3, "1000", 4 [pid 5069] <... rmdir resumed>) = 0 [pid 12283] <... write resumed>) = 4 [pid 12282] <... bpf resumed>) = 6 [pid 12281] <... bpf resumed>) = 6 [pid 5071] rmdir("./1473" [pid 5069] mkdir("./1459", 0777 [pid 12282] exit_group(0 [pid 12283] close(3 [pid 12282] <... exit_group resumed>) = ? [pid 12281] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 12283] <... close resumed>) = 0 [pid 12281] <... exit_group resumed>) = ? [pid 12283] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12282] +++ exited with 0 +++ [pid 12281] +++ exited with 0 +++ [pid 5071] mkdir("./1474", 0777 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12283] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12284 attached [pid 5071] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12281, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12282, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12284 [pid 12284] set_robust_list(0x5555686ec660, 24 [pid 12283] <... bpf resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] umount2("./1419", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12284] <... set_robust_list resumed>) = 0 [pid 12283] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12285 attached [pid 12284] chdir("./1459" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12285] set_robust_list(0x5555686ec660, 24 [pid 12284] <... chdir resumed>) = 0 [pid 12283] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12285 [pid 5067] openat(AT_FDCWD, "./1419", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12285] <... set_robust_list resumed>) = 0 [pid 12284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12283] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] umount2("./1438", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 12285] chdir("./1474" [pid 12284] <... prctl resumed>) = 0 [pid 12283] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12285] <... chdir resumed>) = 0 [pid 12285] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12284] setpgid(0, 0 [pid 12283] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] openat(AT_FDCWD, "./1438", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 12285] <... prctl resumed>) = 0 [pid 12284] <... setpgid resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12285] setpgid(0, 0 [pid 12284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] newfstatat(3, "", [pid 5067] getdents64(3, [pid 12285] <... setpgid resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12285] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] getdents64(3, [pid 5067] umount2("./1419/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12285] <... openat resumed>) = 3 [pid 12284] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1419/binderfs", [pid 12285] write(3, "1000", 4 [pid 12283] <... bpf resumed>) = 6 [pid 5068] umount2("./1438/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12285] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12285] close(3 [pid 12283] exit_group(0 [pid 5068] newfstatat(AT_FDCWD, "./1438/binderfs", [pid 5067] unlink("./1419/binderfs" [pid 12285] <... close resumed>) = 0 [pid 12284] write(3, "1000", 4 [pid 12283] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12285] symlink("/dev/binderfs", "./binderfs" [pid 12284] <... write resumed>) = 4 [pid 12285] <... symlink resumed>) = 0 [pid 12284] close(3 [pid 5068] unlink("./1438/binderfs") = 0 [pid 5067] getdents64(3, [pid 12285] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12285] <... bpf resumed>) = 3 [pid 12284] <... close resumed>) = 0 [pid 12283] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 5067] close(3 [pid 12285] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12284] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... close resumed>) = 0 [pid 12285] <... bpf resumed>) = 4 [pid 5068] close(3 [pid 5067] rmdir("./1419" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12283, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12285] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12284] <... symlink resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12284] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12285] <... bpf resumed>) = 5 [pid 12284] <... bpf resumed>) = 3 [pid 12285] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] rmdir("./1438" [pid 5067] mkdir("./1420", 0777 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12284] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] umount2("./1395", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12284] <... bpf resumed>) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12284] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] mkdir("./1439", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12286 attached [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] openat(AT_FDCWD, "./1395", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12286] set_robust_list(0x5555686ec660, 24 [pid 5066] <... openat resumed>) = 3 [pid 12286] <... set_robust_list resumed>) = 0 [pid 12284] <... bpf resumed>) = 5 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12286 [pid 5066] newfstatat(3, "", [pid 12286] chdir("./1420"./strace-static-x86_64: Process 12287 attached ) = 0 [pid 12284] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12287] set_robust_list(0x5555686ec660, 24 [pid 12286] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12285] <... bpf resumed>) = 6 [pid 12284] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12287 [pid 5066] getdents64(3, [pid 12287] <... set_robust_list resumed>) = 0 [pid 12286] <... prctl resumed>) = 0 [pid 12285] exit_group(0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12287] chdir("./1439" [pid 12286] setpgid(0, 0 [pid 12284] exit_group(0 [pid 12287] <... chdir resumed>) = 0 [pid 12286] <... setpgid resumed>) = 0 [pid 12285] <... exit_group resumed>) = ? [pid 12284] <... exit_group resumed>) = ? [pid 5066] umount2("./1395/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12287] <... prctl resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1395/binderfs", [pid 12287] setpgid(0, 0 [pid 12286] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12287] <... setpgid resumed>) = 0 [pid 5066] unlink("./1395/binderfs" [pid 12287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... unlink resumed>) = 0 [pid 12286] write(3, "1000", 4 [pid 12287] <... openat resumed>) = 3 [pid 12285] +++ exited with 0 +++ [pid 12284] +++ exited with 0 +++ [pid 5066] getdents64(3, [pid 12287] write(3, "1000", 4 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12284, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12287] <... write resumed>) = 4 [pid 12286] <... write resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12285, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12287] close(3 [pid 12286] close(3 [pid 12287] <... close resumed>) = 0 [pid 12286] <... close resumed>) = 0 [pid 5066] close(3 [pid 12287] symlink("/dev/binderfs", "./binderfs" [pid 12286] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... close resumed>) = 0 [pid 12287] <... symlink resumed>) = 0 [pid 12286] <... symlink resumed>) = 0 [pid 5071] umount2("./1474", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1395" [pid 5069] umount2("./1459", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1459", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12286] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... rmdir resumed>) = 0 [pid 12287] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12286] <... bpf resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1474", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] umount2("./1459/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12287] <... bpf resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1396", 0777 [pid 12287] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12286] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(AT_FDCWD, "./1459/binderfs", [pid 12287] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] unlink("./1459/binderfs" [pid 12286] <... bpf resumed>) = 4 [pid 5069] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./1474/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, [pid 12287] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] close(3) = 0 [pid 5069] rmdir("./1459"./strace-static-x86_64: Process 12288 attached ) = 0 [pid 12286] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(AT_FDCWD, "./1474/binderfs", [pid 12288] set_robust_list(0x5555686ec660, 24 [pid 5069] mkdir("./1460", 0777 [pid 12288] <... set_robust_list resumed>) = 0 [pid 12287] <... bpf resumed>) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 12288] chdir("./1396" [pid 12286] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12288] <... chdir resumed>) = 0 [pid 12287] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12288] <... prctl resumed>) = 0 [pid 12287] <... bpf resumed>) = 6 [pid 5071] unlink("./1474/binderfs" [pid 12288] setpgid(0, 0 [pid 12286] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... unlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12288 ./strace-static-x86_64: Process 12289 attached [pid 12288] <... setpgid resumed>) = 0 [pid 12287] exit_group(0 [pid 12286] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 12289] set_robust_list(0x5555686ec660, 24 [pid 12288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12287] <... exit_group resumed>) = ? [pid 12286] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12289 [pid 12289] <... set_robust_list resumed>) = 0 [pid 12288] <... openat resumed>) = 3 [pid 12289] chdir("./1460" [pid 12286] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 12288] write(3, "1000", 4) = 4 [pid 5071] <... close resumed>) = 0 [pid 12289] <... chdir resumed>) = 0 [pid 12288] close(3 [pid 5071] rmdir("./1474" [pid 12289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12288] <... close resumed>) = 0 [pid 12289] <... prctl resumed>) = 0 [pid 12288] symlink("/dev/binderfs", "./binderfs" [pid 12289] setpgid(0, 0 [pid 12288] <... symlink resumed>) = 0 [pid 12289] <... setpgid resumed>) = 0 [pid 12289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 12288] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12289] <... openat resumed>) = 3 [pid 12288] <... bpf resumed>) = 3 [pid 5071] mkdir("./1475", 0777 [pid 12289] write(3, "1000", 4 [pid 12288] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12289] <... write resumed>) = 4 [pid 12288] <... bpf resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 12289] close(3) = 0 [pid 12288] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12289] symlink("/dev/binderfs", "./binderfs" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12289] <... symlink resumed>) = 0 [pid 12288] <... bpf resumed>) = 5 ./strace-static-x86_64: Process 12290 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12290 [pid 12290] set_robust_list(0x5555686ec660, 24 [pid 12288] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12290] <... set_robust_list resumed>) = 0 [pid 12289] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12290] chdir("./1475" [pid 12289] <... bpf resumed>) = 3 [pid 12290] <... chdir resumed>) = 0 [pid 12290] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12289] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12290] <... prctl resumed>) = 0 [pid 12289] <... bpf resumed>) = 4 [pid 12290] setpgid(0, 0 [pid 12289] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12290] <... setpgid resumed>) = 0 [pid 12287] +++ exited with 0 +++ [pid 12286] +++ exited with 0 +++ [pid 12290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12289] <... bpf resumed>) = 5 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12287, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12286, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12290] <... openat resumed>) = 3 [pid 12289] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12290] write(3, "1000", 4) = 4 [pid 12290] close(3 [pid 5068] umount2("./1439", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1420", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12290] <... close resumed>) = 0 [pid 12290] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1439", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12290] <... symlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1420", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... openat resumed>) = 3 [pid 12290] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(3, "", [pid 5067] <... openat resumed>) = 3 [pid 12290] <... bpf resumed>) = 3 [pid 12290] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] getdents64(3, [pid 5068] umount2("./1439/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(AT_FDCWD, "./1439/binderfs", [pid 5067] umount2("./1420/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1420/binderfs", [pid 5068] unlink("./1439/binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12290] <... bpf resumed>) = 4 [pid 12288] <... bpf resumed>) = 6 [pid 12289] <... bpf resumed>) = 6 [pid 12290] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12288] exit_group(0 [pid 5068] getdents64(3, [pid 5067] unlink("./1420/binderfs" [pid 12289] exit_group(0 [pid 12288] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5068] close(3) = 0 [pid 5067] getdents64(3, [pid 5068] rmdir("./1439") = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 12290] <... bpf resumed>) = 5 [pid 12289] <... exit_group resumed>) = ? [pid 5068] mkdir("./1440", 0777 [pid 5067] <... close resumed>) = 0 [pid 12290] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] rmdir("./1420" [pid 12289] +++ exited with 0 +++ [pid 12288] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12289, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1421", 0777) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12288, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1396", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12291 attached [pid 12290] <... bpf resumed>) = 6 [pid 5069] umount2("./1460", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12291 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] openat(AT_FDCWD, "./1396", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12291] set_robust_list(0x5555686ec660, 24 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 12290] exit_group(0 [pid 5069] openat(AT_FDCWD, "./1460", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(3, "", [pid 5069] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12291] <... set_robust_list resumed>) = 0 [pid 12290] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12292 attached [pid 12291] chdir("./1440" [pid 5069] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12292] set_robust_list(0x5555686ec660, 24 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1396/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12292] <... set_robust_list resumed>) = 0 [pid 5069] umount2("./1460/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12292] chdir("./1421" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12290] +++ exited with 0 +++ [pid 12292] <... chdir resumed>) = 0 [pid 12291] <... chdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12290, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] newfstatat(AT_FDCWD, "./1460/binderfs", [pid 5066] newfstatat(AT_FDCWD, "./1396/binderfs", [pid 12292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12292 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12292] <... prctl resumed>) = 0 [pid 12291] <... prctl resumed>) = 0 [pid 5069] unlink("./1460/binderfs" [pid 5066] unlink("./1396/binderfs" [pid 12291] setpgid(0, 0 [pid 5069] <... unlink resumed>) = 0 [pid 12291] <... setpgid resumed>) = 0 [pid 12292] setpgid(0, 0 [pid 12291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 12292] <... setpgid resumed>) = 0 [pid 12291] <... openat resumed>) = 3 [pid 5071] umount2("./1475", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] close(3 [pid 5071] openat(AT_FDCWD, "./1475", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12291] write(3, "1000", 4 [pid 5069] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12291] <... write resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5069] rmdir("./1460" [pid 12291] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12291] <... close resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12292] <... openat resumed>) = 3 [pid 12291] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(3, "", [pid 5069] mkdir("./1461", 0777 [pid 5066] close(3 [pid 12292] write(3, "1000", 4 [pid 12291] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12292] <... write resumed>) = 4 [pid 12291] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] rmdir("./1396" [pid 12292] close(3 [pid 12291] <... bpf resumed>) = 3 [pid 12291] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12293 attached [pid 12292] <... close resumed>) = 0 [pid 12291] <... bpf resumed>) = 4 [pid 5071] umount2("./1475/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1397", 0777 [pid 12293] set_robust_list(0x5555686ec660, 24 [pid 12292] symlink("/dev/binderfs", "./binderfs" [pid 12291] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12292] <... symlink resumed>) = 0 [pid 12291] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12293] <... set_robust_list resumed>) = 0 [pid 12292] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1475/binderfs", [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12293 [pid 5066] <... mkdir resumed>) = 0 [pid 12292] <... bpf resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1475/binderfs" [pid 12293] chdir("./1461" [pid 12291] <... bpf resumed>) = 6 [pid 5071] <... unlink resumed>) = 0 [pid 12293] <... chdir resumed>) = 0 [pid 12292] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12292] <... bpf resumed>) = 4 [pid 12291] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12293] <... prctl resumed>) = 0 [pid 12291] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12294 attached [pid 12293] setpgid(0, 0 [pid 12292] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] close(3 [pid 12293] <... setpgid resumed>) = 0 [pid 12294] set_robust_list(0x5555686ec660, 24 [pid 12292] <... bpf resumed>) = 5 [pid 5071] <... close resumed>) = 0 [pid 12294] <... set_robust_list resumed>) = 0 [pid 12291] +++ exited with 0 +++ [pid 12294] chdir("./1397" [pid 12293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] rmdir("./1475" [pid 12294] <... chdir resumed>) = 0 [pid 12293] <... openat resumed>) = 3 [pid 12292] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... rmdir resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12294 [pid 12294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] mkdir("./1476", 0777 [pid 12294] <... prctl resumed>) = 0 [pid 12294] setpgid(0, 0 [pid 12293] write(3, "1000", 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12291, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12294] <... setpgid resumed>) = 0 [pid 12293] <... write resumed>) = 4 [pid 5068] umount2("./1440", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... mkdir resumed>) = 0 [pid 12294] <... openat resumed>) = 3 [pid 12293] close(3 [pid 12292] <... bpf resumed>) = 6 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12293] <... close resumed>) = 0 [pid 12292] exit_group(0 [pid 5068] openat(AT_FDCWD, "./1440", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12294] write(3, "1000", 4 [pid 12293] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 3 [pid 12293] <... symlink resumed>) = 0 [pid 12292] <... exit_group resumed>) = ? [pid 5068] newfstatat(3, "", ./strace-static-x86_64: Process 12295 attached [pid 12294] <... write resumed>) = 4 [pid 12293] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12295] set_robust_list(0x5555686ec660, 24 [pid 12294] close(3 [pid 12292] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 12295] <... set_robust_list resumed>) = 0 [pid 12294] <... close resumed>) = 0 [pid 12293] <... bpf resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12292, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12295] chdir("./1476" [pid 12294] symlink("/dev/binderfs", "./binderfs" [pid 12293] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12295 [pid 12295] <... chdir resumed>) = 0 [pid 12294] <... symlink resumed>) = 0 [pid 12293] <... bpf resumed>) = 4 [pid 12295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] umount2("./1440/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12295] <... prctl resumed>) = 0 [pid 12294] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12293] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12295] setpgid(0, 0 [pid 12294] <... bpf resumed>) = 3 [pid 12295] <... setpgid resumed>) = 0 [pid 12294] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12293] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] newfstatat(AT_FDCWD, "./1440/binderfs", [pid 5067] umount2("./1421", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12294] <... bpf resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12295] <... openat resumed>) = 3 [pid 5068] unlink("./1440/binderfs" [pid 5067] openat(AT_FDCWD, "./1421", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12294] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... unlink resumed>) = 0 [pid 12295] write(3, "1000", 4 [pid 5067] <... openat resumed>) = 3 [pid 12293] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5067] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 12295] <... write resumed>) = 4 [pid 12293] <... bpf resumed>) = 6 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12295] close(3 [pid 12294] <... bpf resumed>) = 5 [pid 5068] rmdir("./1440" [pid 12295] <... close resumed>) = 0 [pid 12294] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12293] exit_group(0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] umount2("./1421/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12295] symlink("/dev/binderfs", "./binderfs" [pid 12294] <... bpf resumed>) = 6 [pid 12293] <... exit_group resumed>) = ? [pid 5068] mkdir("./1441", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12295] <... symlink resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1421/binderfs", [pid 12294] exit_group(0 [pid 12295] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12294] <... exit_group resumed>) = ? [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] unlink("./1421/binderfs"./strace-static-x86_64: Process 12296 attached [pid 12295] <... bpf resumed>) = 3 [pid 12296] set_robust_list(0x5555686ec660, 24 [pid 5067] <... unlink resumed>) = 0 [pid 12295] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./1421" [pid 12296] <... set_robust_list resumed>) = 0 [pid 12295] <... bpf resumed>) = 4 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12296 [pid 5067] <... rmdir resumed>) = 0 [pid 12296] chdir("./1441" [pid 12295] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12296] <... chdir resumed>) = 0 [pid 5067] mkdir("./1422", 0777 [pid 12296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12295] <... bpf resumed>) = 5 [pid 12296] <... prctl resumed>) = 0 [pid 12295] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12296] setpgid(0, 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12296] <... setpgid resumed>) = 0 [pid 12296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12296] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12297 attached [pid 12296] write(3, "1000", 4 [pid 12297] set_robust_list(0x5555686ec660, 24 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12297 [pid 12296] <... write resumed>) = 4 [pid 12296] close(3 [pid 12297] <... set_robust_list resumed>) = 0 [pid 12296] <... close resumed>) = 0 [pid 12296] symlink("/dev/binderfs", "./binderfs" [pid 12297] chdir("./1422" [pid 12296] <... symlink resumed>) = 0 [pid 12297] <... chdir resumed>) = 0 [pid 12297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12296] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12297] <... prctl resumed>) = 0 [pid 12293] +++ exited with 0 +++ [pid 12297] setpgid(0, 0 [pid 12296] <... bpf resumed>) = 3 [pid 12297] <... setpgid resumed>) = 0 [pid 12296] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12294] +++ exited with 0 +++ [pid 12297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12293, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12296] <... bpf resumed>) = 4 [pid 5069] umount2("./1461", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12294, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12297] <... openat resumed>) = 3 [pid 12296] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1397", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12297] write(3, "1000", 4 [pid 5069] openat(AT_FDCWD, "./1461", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12297] <... write resumed>) = 4 [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./1397", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12297] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 12297] <... close resumed>) = 0 [pid 12296] <... bpf resumed>) = 5 [pid 12297] symlink("/dev/binderfs", "./binderfs" [pid 12296] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(3, "", [pid 12297] <... symlink resumed>) = 0 [pid 5069] umount2("./1461/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12297] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12297] <... bpf resumed>) = 3 [pid 5069] newfstatat(AT_FDCWD, "./1461/binderfs", [pid 12297] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(3, [pid 12297] <... bpf resumed>) = 4 [pid 5069] unlink("./1461/binderfs" [pid 12297] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5066] umount2("./1397/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1397/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1397/binderfs" [pid 12297] <... bpf resumed>) = 5 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12297] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] rmdir("./1461" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] close(3) = 0 [pid 5069] mkdir("./1462", 0777 [pid 5066] rmdir("./1397" [pid 5069] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1398", 0777) = 0 ./strace-static-x86_64: Process 12298 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12298 [pid 12298] set_robust_list(0x5555686ec660, 24 [pid 12297] <... bpf resumed>) = 6 [pid 12296] <... bpf resumed>) = 6 [pid 12295] <... bpf resumed>) = 6 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12298] <... set_robust_list resumed>) = 0 [pid 12297] exit_group(0 [pid 12296] exit_group(0 [pid 12295] exit_group(0 [pid 12298] chdir("./1462" [pid 12296] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12299 attached [pid 12298] <... chdir resumed>) = 0 [pid 12297] <... exit_group resumed>) = ? [pid 12295] <... exit_group resumed>) = ? [pid 12296] +++ exited with 0 +++ [pid 12299] set_robust_list(0x5555686ec660, 24 [pid 12298] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12296, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12299] <... set_robust_list resumed>) = 0 [pid 12298] <... prctl resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12299 [pid 5068] <... restart_syscall resumed>) = 0 [pid 12299] chdir("./1398" [pid 12298] setpgid(0, 0 [pid 12297] +++ exited with 0 +++ [pid 12299] <... chdir resumed>) = 0 [pid 12298] <... setpgid resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12297, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./1441", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12299] <... prctl resumed>) = 0 [pid 12295] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... restart_syscall resumed>) = 0 [pid 12299] setpgid(0, 0 [pid 5068] openat(AT_FDCWD, "./1441", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12299] <... setpgid resumed>) = 0 [pid 12298] <... openat resumed>) = 3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12295, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... openat resumed>) = 3 [pid 12299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] newfstatat(3, "", [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 12299] <... openat resumed>) = 3 [pid 12298] write(3, "1000", 4 [pid 5071] umount2("./1476", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1422", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12299] write(3, "1000", 4 [pid 12298] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12299] <... write resumed>) = 4 [pid 12298] close(3 [pid 5071] openat(AT_FDCWD, "./1476", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1422", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12299] close(3 [pid 12298] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5068] umount2("./1441/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 12299] <... close resumed>) = 0 [pid 12298] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", [pid 5068] newfstatat(AT_FDCWD, "./1441/binderfs", [pid 12298] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] unlink("./1441/binderfs") = 0 [pid 5068] getdents64(3, [pid 12299] symlink("/dev/binderfs", "./binderfs" [pid 12298] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5067] getdents64(3, [pid 12299] <... symlink resumed>) = 0 [pid 12298] <... bpf resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12299] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12298] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] close(3 [pid 12299] <... bpf resumed>) = 3 [pid 12298] <... bpf resumed>) = 4 [pid 5071] umount2("./1476/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1422/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12299] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12298] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 12299] <... bpf resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./1476/binderfs", [pid 5068] rmdir("./1441" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12299] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12298] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1422/binderfs", [pid 12298] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] unlink("./1476/binderfs" [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12298] <... bpf resumed>) = 6 [pid 5071] <... unlink resumed>) = 0 [pid 5068] mkdir("./1442", 0777 [pid 5067] unlink("./1422/binderfs" [pid 12299] <... bpf resumed>) = 5 [pid 12298] exit_group(0 [pid 5071] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 12299] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12298] <... exit_group resumed>) = ? [pid 5068] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12299] <... bpf resumed>) = 6 [pid 12299] exit_group(0 [pid 5071] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12299] <... exit_group resumed>) = ? [pid 5067] close(3./strace-static-x86_64: Process 12300 attached [pid 12299] +++ exited with 0 +++ [pid 12298] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12300] set_robust_list(0x5555686ec660, 24 [pid 5071] rmdir("./1476" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12300 [pid 5067] rmdir("./1422" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12298, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 12300] <... set_robust_list resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12299, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... rmdir resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5067] mkdir("./1423", 0777 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12300] chdir("./1442" [pid 5069] <... restart_syscall resumed>) = 0 [pid 12300] <... chdir resumed>) = 0 [pid 5071] mkdir("./1477", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 12300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12300] setpgid(0, 0 [pid 5069] umount2("./1462", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1398", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12300] <... setpgid resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] openat(AT_FDCWD, "./1462", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12301 attached [pid 5066] openat(AT_FDCWD, "./1398", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12302 attached [pid 12301] set_robust_list(0x5555686ec660, 24 [pid 12300] <... openat resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12302 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12301 [pid 5066] <... openat resumed>) = 3 [pid 12302] set_robust_list(0x5555686ec660, 24 [pid 12301] <... set_robust_list resumed>) = 0 [pid 12300] write(3, "1000", 4 [pid 5069] newfstatat(3, "", [pid 12302] <... set_robust_list resumed>) = 0 [pid 12301] chdir("./1423" [pid 12300] <... write resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 12302] chdir("./1477" [pid 12301] <... chdir resumed>) = 0 [pid 5069] getdents64(3, [pid 12302] <... chdir resumed>) = 0 [pid 12301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12300] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12301] <... prctl resumed>) = 0 [pid 12300] <... close resumed>) = 0 [pid 5069] umount2("./1462/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12302] <... prctl resumed>) = 0 [pid 12300] symlink("/dev/binderfs", "./binderfs" [pid 12301] setpgid(0, 0 [pid 12302] setpgid(0, 0 [pid 12301] <... setpgid resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12302] <... setpgid resumed>) = 0 [pid 12301] <... openat resumed>) = 3 [pid 12300] <... symlink resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1462/binderfs", [pid 5066] umount2("./1398/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12301] write(3, "1000", 4) = 4 [pid 12301] close(3) = 0 [pid 12301] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12301] <... symlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] newfstatat(AT_FDCWD, "./1398/binderfs", [pid 5069] unlink("./1462/binderfs" [pid 12301] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12302] <... openat resumed>) = 3 [pid 12301] <... bpf resumed>) = 3 [pid 12300] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... unlink resumed>) = 0 [pid 12302] write(3, "1000", 4 [pid 12301] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] unlink("./1398/binderfs" [pid 12302] <... write resumed>) = 4 [pid 12301] <... bpf resumed>) = 4 [pid 12300] <... bpf resumed>) = 3 [pid 5069] getdents64(3, [pid 12302] close(3 [pid 12301] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12302] <... close resumed>) = 0 [pid 12300] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12302] symlink("/dev/binderfs", "./binderfs" [pid 12301] <... bpf resumed>) = 5 [pid 5069] close(3 [pid 12300] <... bpf resumed>) = 4 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12302] <... symlink resumed>) = 0 [pid 5066] close(3 [pid 12301] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12300] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12302] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12301] <... bpf resumed>) = 6 [pid 5066] rmdir("./1398" [pid 12302] <... bpf resumed>) = 3 [pid 5069] rmdir("./1462" [pid 5066] <... rmdir resumed>) = 0 [pid 12301] exit_group(0) = ? [pid 12302] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12300] <... bpf resumed>) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1399", 0777 [pid 12301] +++ exited with 0 +++ [pid 12302] <... bpf resumed>) = 4 [pid 12300] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12302] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12301, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... mkdir resumed>) = 0 [pid 5069] mkdir("./1463", 0777 [pid 12302] <... bpf resumed>) = 5 [pid 5067] umount2("./1423", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12302] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] openat(AT_FDCWD, "./1423", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12303 attached [pid 5067] getdents64(3, [pid 12303] set_robust_list(0x5555686ec660, 24 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12303] <... set_robust_list resumed>) = 0 [pid 5067] umount2("./1423/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12303] chdir("./1399"./strace-static-x86_64: Process 12304 attached [pid 12302] <... bpf resumed>) = 6 [pid 12300] <... bpf resumed>) = 6 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12304 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12303 [pid 12304] set_robust_list(0x5555686ec660, 24 [pid 12303] <... chdir resumed>) = 0 [pid 12302] exit_group(0 [pid 12300] exit_group(0 [pid 5067] newfstatat(AT_FDCWD, "./1423/binderfs", [pid 12300] <... exit_group resumed>) = ? [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12304] <... set_robust_list resumed>) = 0 [pid 12303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12302] <... exit_group resumed>) = ? [pid 12304] chdir("./1463" [pid 12303] <... prctl resumed>) = 0 [pid 5067] unlink("./1423/binderfs" [pid 12304] <... chdir resumed>) = 0 [pid 12303] setpgid(0, 0 [pid 12304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12303] <... setpgid resumed>) = 0 [pid 12304] <... prctl resumed>) = 0 [pid 12303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... unlink resumed>) = 0 [pid 12304] setpgid(0, 0 [pid 12303] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 12304] <... setpgid resumed>) = 0 [pid 12303] write(3, "1000", 4 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12303] <... write resumed>) = 4 [pid 5067] close(3 [pid 12304] <... openat resumed>) = 3 [pid 12303] close(3 [pid 12304] write(3, "1000", 4 [pid 12303] <... close resumed>) = 0 [pid 12302] +++ exited with 0 +++ [pid 12300] +++ exited with 0 +++ [pid 5067] <... close resumed>) = 0 [pid 12304] <... write resumed>) = 4 [pid 12303] symlink("/dev/binderfs", "./binderfs" [pid 12304] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12302, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12300, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] rmdir("./1423" [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12304] <... close resumed>) = 0 [pid 12303] <... symlink resumed>) = 0 [pid 12304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12303] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12304] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12303] <... bpf resumed>) = 3 [pid 5071] umount2("./1477", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1424", 0777 [pid 12304] <... bpf resumed>) = 3 [pid 12303] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12304] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12303] <... bpf resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./1477", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... mkdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12303] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12304] <... bpf resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 5068] umount2("./1442", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12303] <... bpf resumed>) = 5 [pid 12304] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12303] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12305 attached [pid 12305] set_robust_list(0x5555686ec660, 24) = 0 [pid 12304] <... bpf resumed>) = 5 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12305 [pid 12305] chdir("./1424" [pid 12304] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12303] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 5068] openat(AT_FDCWD, "./1442", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12305] <... chdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... openat resumed>) = 3 [pid 12304] <... bpf resumed>) = 6 [pid 5071] umount2("./1477/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12305] <... prctl resumed>) = 0 [pid 12303] exit_group(0 [pid 5068] newfstatat(3, "", [pid 12305] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12304] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 12304] <... exit_group resumed>) = ? [pid 12303] <... exit_group resumed>) = ? [pid 12305] <... setpgid resumed>) = 0 [pid 12305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12305] write(3, "1000", 4) = 4 [pid 12305] close(3 [pid 12304] +++ exited with 0 +++ [pid 12303] +++ exited with 0 +++ [pid 5071] newfstatat(AT_FDCWD, "./1477/binderfs", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1442/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12305] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12303, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12305] symlink("/dev/binderfs", "./binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1442/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1442/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 12305] <... symlink resumed>) = 0 [pid 5071] unlink("./1477/binderfs" [pid 5069] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./1399", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12305] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12305] <... bpf resumed>) = 3 [pid 5071] getdents64(3, [pid 12305] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5066] openat(AT_FDCWD, "./1399", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... close resumed>) = 0 [pid 12305] <... bpf resumed>) = 4 [pid 5071] close(3 [pid 5069] umount2("./1463", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./1442" [pid 5066] <... openat resumed>) = 3 [pid 12305] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 5071] rmdir("./1477" [pid 5068] <... rmdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1463", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] mkdir("./1443", 0777 [pid 5066] getdents64(3, [pid 12305] <... bpf resumed>) = 5 [pid 5071] mkdir("./1478", 0777 [pid 5069] newfstatat(3, "", [pid 12305] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12305] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1399/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12305] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1463/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1399/binderfs", [pid 5069] newfstatat(AT_FDCWD, "./1463/binderfs", ./strace-static-x86_64: Process 12307 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12307] set_robust_list(0x5555686ec660, 24 [pid 5069] unlink("./1463/binderfs" [pid 5066] unlink("./1399/binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12305] +++ exited with 0 +++ ./strace-static-x86_64: Process 12306 attached [pid 12307] <... set_robust_list resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12307 [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12306 [pid 5066] getdents64(3, [pid 12306] set_robust_list(0x5555686ec660, 24 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12305, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12306] <... set_robust_list resumed>) = 0 [pid 5067] umount2("./1424", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12307] chdir("./1478" [pid 12306] chdir("./1443" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12306] <... chdir resumed>) = 0 [pid 5069] close(3 [pid 5067] openat(AT_FDCWD, "./1424", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] close(3 [pid 12306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 12306] <... prctl resumed>) = 0 [pid 5069] rmdir("./1463" [pid 5067] newfstatat(3, "", [pid 12307] <... chdir resumed>) = 0 [pid 12306] setpgid(0, 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] rmdir("./1399" [pid 12306] <... setpgid resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5069] mkdir("./1464", 0777 [pid 12307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... rmdir resumed>) = 0 [pid 12307] <... prctl resumed>) = 0 [pid 5067] umount2("./1424/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1400", 0777 [pid 12307] setpgid(0, 0 [pid 12306] <... openat resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12307] <... setpgid resumed>) = 0 [pid 12306] write(3, "1000", 4 [pid 5067] newfstatat(AT_FDCWD, "./1424/binderfs", [pid 5066] <... mkdir resumed>) = 0 [pid 12306] <... write resumed>) = 4 [pid 12306] close(3./strace-static-x86_64: Process 12308 attached [pid 12307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12306] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12308] set_robust_list(0x5555686ec660, 24 [pid 12306] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12308 [pid 12306] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12309 attached [pid 12308] <... set_robust_list resumed>) = 0 [pid 12307] <... openat resumed>) = 3 [pid 5067] unlink("./1424/binderfs" [pid 12309] set_robust_list(0x5555686ec660, 24 [pid 12308] chdir("./1464" [pid 12307] write(3, "1000", 4 [pid 12306] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12309] <... set_robust_list resumed>) = 0 [pid 12308] <... chdir resumed>) = 0 [pid 12307] <... write resumed>) = 4 [pid 12306] <... bpf resumed>) = 3 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12309 [pid 12309] chdir("./1400" [pid 12308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12307] close(3 [pid 12306] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, [pid 12309] <... chdir resumed>) = 0 [pid 12308] <... prctl resumed>) = 0 [pid 12309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12309] <... prctl resumed>) = 0 [pid 5067] close(3) = 0 [pid 12309] setpgid(0, 0 [pid 12308] setpgid(0, 0 [pid 12307] <... close resumed>) = 0 [pid 12306] <... bpf resumed>) = 4 [pid 5067] rmdir("./1424" [pid 12309] <... setpgid resumed>) = 0 [pid 12308] <... setpgid resumed>) = 0 [pid 12307] symlink("/dev/binderfs", "./binderfs" [pid 12308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12307] <... symlink resumed>) = 0 [pid 12306] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... rmdir resumed>) = 0 [pid 12308] <... openat resumed>) = 3 [pid 12307] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12309] <... openat resumed>) = 3 [pid 12308] write(3, "1000", 4 [pid 12307] <... bpf resumed>) = 3 [pid 5067] mkdir("./1425", 0777 [pid 12306] <... bpf resumed>) = 5 [pid 12306] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 5067] <... mkdir resumed>) = 0 [pid 12306] exit_group(0 [pid 12309] write(3, "1000", 4 [pid 12308] <... write resumed>) = 4 [pid 12307] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12309] <... write resumed>) = 4 [pid 12308] close(3 [pid 12306] <... exit_group resumed>) = ? [pid 12309] close(3 [pid 12308] <... close resumed>) = 0 [pid 12307] <... bpf resumed>) = 4 ./strace-static-x86_64: Process 12310 attached [pid 12306] +++ exited with 0 +++ [pid 12309] <... close resumed>) = 0 [pid 12308] symlink("/dev/binderfs", "./binderfs" [pid 12307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12309] symlink("/dev/binderfs", "./binderfs" [pid 12308] <... symlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12306, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12309] <... symlink resumed>) = 0 [pid 12310] set_robust_list(0x5555686ec660, 24 [pid 12309] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12308] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12310 [pid 12310] <... set_robust_list resumed>) = 0 [pid 12307] <... bpf resumed>) = 5 [pid 12310] chdir("./1425" [pid 12309] <... bpf resumed>) = 3 [pid 12308] <... bpf resumed>) = 3 [pid 12307] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12309] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12308] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1443", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12310] <... chdir resumed>) = 0 [pid 12309] <... bpf resumed>) = 4 [pid 12308] <... bpf resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12309] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12308] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] openat(AT_FDCWD, "./1443", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12310] <... prctl resumed>) = 0 [pid 12310] setpgid(0, 0 [pid 5068] <... openat resumed>) = 3 [pid 12310] <... setpgid resumed>) = 0 [pid 12310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12309] <... bpf resumed>) = 5 [pid 12310] <... openat resumed>) = 3 [pid 12309] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12308] <... bpf resumed>) = 5 [pid 12307] <... bpf resumed>) = 6 [pid 5068] newfstatat(3, "", [pid 12309] <... bpf resumed>) = 6 [pid 12308] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12309] exit_group(0 [pid 12308] <... bpf resumed>) = 6 [pid 12308] exit_group(0 [pid 12310] write(3, "1000", 4 [pid 12309] <... exit_group resumed>) = ? [pid 12307] exit_group(0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12310] <... write resumed>) = 4 [pid 12308] <... exit_group resumed>) = ? [pid 12307] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 12310] close(3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12310] <... close resumed>) = 0 [pid 12309] +++ exited with 0 +++ [pid 12308] +++ exited with 0 +++ [pid 5068] umount2("./1443/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12310] symlink("/dev/binderfs", "./binderfs" [pid 12307] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12308, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1443/binderfs", [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12307, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1443/binderfs" [pid 12310] <... symlink resumed>) = 0 [pid 5069] umount2("./1464", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 12310] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5069] openat(AT_FDCWD, "./1464", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 12310] <... bpf resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12309, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1400", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1478", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12310] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(3, "", [pid 5068] rmdir("./1443" [pid 5066] openat(AT_FDCWD, "./1400", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12310] <... bpf resumed>) = 4 [pid 12310] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] openat(AT_FDCWD, "./1478", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12310] <... bpf resumed>) = 5 [pid 5071] <... openat resumed>) = 3 [pid 5069] getdents64(3, [pid 5068] mkdir("./1444", 0777 [pid 5066] newfstatat(3, "", [pid 12310] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(3, "", [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12310] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 12310] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1464/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12310] <... exit_group resumed>) = ? [pid 5071] umount2("./1478/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(3, [pid 5069] newfstatat(AT_FDCWD, "./1464/binderfs", ./strace-static-x86_64: Process 12311 attached [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12311] set_robust_list(0x5555686ec660, 24 [pid 5071] newfstatat(AT_FDCWD, "./1478/binderfs", [pid 12311] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12311] chdir("./1444" [pid 12310] +++ exited with 0 +++ [pid 5071] unlink("./1478/binderfs" [pid 5069] unlink("./1464/binderfs" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12311 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12311] <... chdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 12311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 5069] <... unlink resumed>) = 0 [pid 12311] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1400/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12311] setpgid(0, 0 [pid 5071] close(3 [pid 5069] getdents64(3, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12310, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12311] <... setpgid resumed>) = 0 [pid 5071] rmdir("./1478" [pid 5067] umount2("./1425", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1400/binderfs", [pid 12311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] close(3 [pid 5067] openat(AT_FDCWD, "./1425", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] unlink("./1400/binderfs" [pid 12311] <... openat resumed>) = 3 [pid 5071] mkdir("./1479", 0777 [pid 5069] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 12311] write(3, "1000", 4 [pid 5069] rmdir("./1464" [pid 5067] newfstatat(3, "", [pid 5066] getdents64(3, [pid 12311] <... write resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12311] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12311] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] close(3 [pid 12311] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... close resumed>) = 0 [pid 5069] mkdir("./1465", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] rmdir("./1400"./strace-static-x86_64: Process 12312 attached [pid 12311] <... symlink resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12312] set_robust_list(0x5555686ec660, 24 [pid 12311] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] umount2("./1425/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12312] <... set_robust_list resumed>) = 0 [pid 12311] <... bpf resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12312 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1401", 0777 [pid 12312] chdir("./1479" [pid 12311] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(AT_FDCWD, "./1425/binderfs", [pid 12312] <... chdir resumed>) = 0 [pid 12311] <... bpf resumed>) = 4 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12313 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12313 [pid 5067] unlink("./1425/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12311] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12312] <... prctl resumed>) = 0 [pid 12311] <... bpf resumed>) = 5 [pid 5067] <... unlink resumed>) = 0 [pid 12312] setpgid(0, 0 [pid 12313] set_robust_list(0x5555686ec660, 24./strace-static-x86_64: Process 12314 attached ) = 0 [pid 12312] <... setpgid resumed>) = 0 [pid 12311] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] getdents64(3, [pid 12314] set_robust_list(0x5555686ec660, 24 [pid 12313] chdir("./1465" [pid 12312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12314 [pid 12313] <... chdir resumed>) = 0 [pid 12313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12314] <... set_robust_list resumed>) = 0 [pid 12313] <... prctl resumed>) = 0 [pid 12311] <... bpf resumed>) = 6 [pid 5067] close(3 [pid 12314] chdir("./1401" [pid 12313] setpgid(0, 0 [pid 12312] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 12314] <... chdir resumed>) = 0 [pid 12311] exit_group(0 [pid 12314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12311] <... exit_group resumed>) = ? [pid 12314] <... prctl resumed>) = 0 [pid 12314] setpgid(0, 0 [pid 12313] <... setpgid resumed>) = 0 [pid 12312] write(3, "1000", 4 [pid 5067] rmdir("./1425" [pid 12313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12312] <... write resumed>) = 4 [pid 5067] <... rmdir resumed>) = 0 [pid 12313] <... openat resumed>) = 3 [pid 12312] close(3 [pid 12311] +++ exited with 0 +++ [pid 12312] <... close resumed>) = 0 [pid 12314] <... setpgid resumed>) = 0 [pid 12313] write(3, "1000", 4 [pid 12312] symlink("/dev/binderfs", "./binderfs" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12311, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] mkdir("./1426", 0777 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12312] <... symlink resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 12314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12313] <... write resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 12314] <... openat resumed>) = 3 [pid 12313] close(3 [pid 12312] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1444", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12312] <... bpf resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1444", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12314] write(3, "1000", 4 [pid 12313] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12314] <... write resumed>) = 4 [pid 12313] symlink("/dev/binderfs", "./binderfs" [pid 12312] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 12314] close(3 [pid 12313] <... symlink resumed>) = 0 [pid 12314] <... close resumed>) = 0 [pid 12314] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12313] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12312] <... bpf resumed>) = 4 [pid 5068] newfstatat(3, "", ./strace-static-x86_64: Process 12315 attached [pid 12314] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12313] <... bpf resumed>) = 3 [pid 12312] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12315] set_robust_list(0x5555686ec660, 24 [pid 12314] <... bpf resumed>) = 3 [pid 12313] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12315 [pid 12315] <... set_robust_list resumed>) = 0 [pid 12314] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12313] <... bpf resumed>) = 4 [pid 12312] <... bpf resumed>) = 5 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12315] chdir("./1426" [pid 12313] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12312] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] umount2("./1444/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12315] <... chdir resumed>) = 0 [pid 12314] <... bpf resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12315] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12314] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12313] <... bpf resumed>) = 5 [pid 5068] newfstatat(AT_FDCWD, "./1444/binderfs", [pid 12315] <... prctl resumed>) = 0 [pid 12312] <... bpf resumed>) = 6 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12313] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12312] exit_group(0 [pid 12314] <... bpf resumed>) = 5 [pid 12313] <... bpf resumed>) = 6 [pid 12312] <... exit_group resumed>) = ? [pid 12315] setpgid(0, 0 [pid 12314] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12313] exit_group(0 [pid 5068] unlink("./1444/binderfs" [pid 12315] <... setpgid resumed>) = 0 [pid 12313] <... exit_group resumed>) = ? [pid 12315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... unlink resumed>) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 12315] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1444" [pid 12315] write(3, "1000", 4) = 4 [pid 12315] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 12315] <... close resumed>) = 0 [pid 5068] mkdir("./1445", 0777 [pid 12315] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12315] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12315] <... bpf resumed>) = 3 [pid 12315] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12315] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12316 attached [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12316 [pid 12316] set_robust_list(0x5555686ec660, 24) = 0 [pid 12315] <... bpf resumed>) = 5 [pid 12316] chdir("./1445" [pid 12315] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12314] <... bpf resumed>) = 6 [pid 12312] +++ exited with 0 +++ [pid 12316] <... chdir resumed>) = 0 [pid 12315] <... bpf resumed>) = 6 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12312, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12315] exit_group(0 [pid 12316] <... prctl resumed>) = 0 [pid 12315] <... exit_group resumed>) = ? [pid 12313] +++ exited with 0 +++ [pid 12316] setpgid(0, 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12313, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12316] <... setpgid resumed>) = 0 [pid 12314] exit_group(0 [pid 5071] umount2("./1479", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1479", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12314] <... exit_group resumed>) = ? [pid 5069] umount2("./1465", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12316] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1479/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12316] write(3, "1000", 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1465", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12316] <... write resumed>) = 4 [pid 12316] close(3 [pid 5069] newfstatat(3, "", [pid 12316] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1479/binderfs", [pid 12316] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] getdents64(3, [pid 12316] <... symlink resumed>) = 0 [pid 5071] unlink("./1479/binderfs") = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12316] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1465/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1479" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12316] <... bpf resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1465/binderfs", [pid 12316] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1480", 0777 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12316] <... bpf resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] unlink("./1465/binderfs" [pid 12316] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... unlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12317 attached [pid 12316] <... bpf resumed>) = 5 [pid 12315] +++ exited with 0 +++ [pid 12314] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12317 [pid 5069] getdents64(3, [pid 12317] set_robust_list(0x5555686ec660, 24 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12315, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12314, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12317] <... set_robust_list resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12317] chdir("./1480") = 0 [pid 12316] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] close(3 [pid 12317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... close resumed>) = 0 [pid 5066] umount2("./1401", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12317] <... prctl resumed>) = 0 [pid 5069] rmdir("./1465" [pid 5067] umount2("./1426", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12317] setpgid(0, 0) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1401", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] mkdir("./1466", 0777 [pid 5066] <... openat resumed>) = 3 [pid 12317] <... openat resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1426", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(3, "", [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12317] write(3, "1000", 4 [pid 5067] newfstatat(3, "", [pid 5066] getdents64(3, [pid 12317] <... write resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12317] close(3) = 0 [pid 5067] getdents64(3, [pid 5066] umount2("./1401/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12317] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12317] <... symlink resumed>) = 0 [pid 5067] umount2("./1426/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1401/binderfs", [pid 12317] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12318 attached [pid 12316] <... bpf resumed>) = 6 [pid 12318] set_robust_list(0x5555686ec660, 24 [pid 12317] <... bpf resumed>) = 3 [pid 12316] exit_group(0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12318 [pid 5067] newfstatat(AT_FDCWD, "./1426/binderfs", [pid 5066] unlink("./1401/binderfs" [pid 12318] <... set_robust_list resumed>) = 0 [pid 12317] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12316] <... exit_group resumed>) = ? [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12318] chdir("./1466") = 0 [pid 12318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12318] setpgid(0, 0 [pid 12316] +++ exited with 0 +++ [pid 12318] <... setpgid resumed>) = 0 [pid 12317] <... bpf resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12316, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] unlink("./1426/binderfs" [pid 5066] getdents64(3, [pid 12318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12317] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12318] write(3, "1000", 4 [pid 12317] <... bpf resumed>) = 5 [pid 5067] getdents64(3, [pid 5066] close(3 [pid 12318] <... write resumed>) = 4 [pid 5066] <... close resumed>) = 0 [pid 12318] close(3) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] rmdir("./1401" [pid 12318] symlink("/dev/binderfs", "./binderfs" [pid 12317] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 12318] <... symlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1426") = 0 [pid 12318] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1445", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1402", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... mkdir resumed>) = 0 [pid 12318] <... bpf resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./1445", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] mkdir("./1427", 0777 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12318] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 12318] <... bpf resumed>) = 4 [pid 12317] <... bpf resumed>) = 6 [pid 5068] newfstatat(3, "", [pid 12318] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12317] exit_group(0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12319 attached [pid 12317] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12319] set_robust_list(0x5555686ec660, 24 [pid 5068] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12319 [pid 12319] <... set_robust_list resumed>) = 0 [pid 12318] <... bpf resumed>) = 5 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12319] chdir("./1402" [pid 5068] umount2("./1445/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12319] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 12320 attached [pid 12319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12317] +++ exited with 0 +++ [pid 12318] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] newfstatat(AT_FDCWD, "./1445/binderfs", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12320 [pid 12320] set_robust_list(0x5555686ec660, 24 [pid 12319] <... prctl resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12317, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12320] <... set_robust_list resumed>) = 0 [pid 12319] setpgid(0, 0) = 0 [pid 5068] unlink("./1445/binderfs" [pid 12320] chdir("./1427" [pid 12319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] umount2("./1480", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12320] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 12320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] openat(AT_FDCWD, "./1480", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12320] <... prctl resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12320] setpgid(0, 0 [pid 5071] newfstatat(3, "", [pid 5068] getdents64(3, [pid 12320] <... setpgid resumed>) = 0 [pid 12319] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 12319] write(3, "1000", 4 [pid 5068] close(3 [pid 12319] <... write resumed>) = 4 [pid 12319] close(3 [pid 5068] <... close resumed>) = 0 [pid 12319] <... close resumed>) = 0 [pid 12319] symlink("/dev/binderfs", "./binderfs" [pid 5068] rmdir("./1445" [pid 12320] <... openat resumed>) = 3 [pid 12319] <... symlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12320] write(3, "1000", 4 [pid 5071] umount2("./1480/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12320] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 12320] close(3 [pid 5071] newfstatat(AT_FDCWD, "./1480/binderfs", [pid 12320] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12320] symlink("/dev/binderfs", "./binderfs" [pid 5071] unlink("./1480/binderfs" [pid 12320] <... symlink resumed>) = 0 [pid 12319] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5068] mkdir("./1446", 0777 [pid 12320] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12319] <... bpf resumed>) = 3 [pid 12318] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 12319] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... mkdir resumed>) = 0 [pid 12320] <... bpf resumed>) = 3 [pid 12319] <... bpf resumed>) = 4 [pid 12318] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12320] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12318] <... exit_group resumed>) = ? [pid 5071] close(3./strace-static-x86_64: Process 12321 attached [pid 12320] <... bpf resumed>) = 4 [pid 12319] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... close resumed>) = 0 [pid 12321] set_robust_list(0x5555686ec660, 24 [pid 12320] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12318] +++ exited with 0 +++ [pid 5071] rmdir("./1480" [pid 12321] <... set_robust_list resumed>) = 0 [pid 12319] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12321 [pid 12320] <... bpf resumed>) = 5 [pid 12321] chdir("./1446" [pid 5071] mkdir("./1481", 0777 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12318, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12320] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12319] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] umount2("./1466", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12321] <... chdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] openat(AT_FDCWD, "./1466", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 12321] <... prctl resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12322 attached [pid 12321] setpgid(0, 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12322 [pid 12322] set_robust_list(0x5555686ec660, 24 [pid 12321] <... setpgid resumed>) = 0 [pid 5069] umount2("./1466/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12322] <... set_robust_list resumed>) = 0 [pid 12321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12322] chdir("./1481" [pid 12321] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12322] <... chdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1466/binderfs", [pid 12322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12322] setpgid(0, 0 [pid 5069] unlink("./1466/binderfs" [pid 12322] <... setpgid resumed>) = 0 [pid 12321] write(3, "1000", 4 [pid 5069] <... unlink resumed>) = 0 [pid 12322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12321] <... write resumed>) = 4 [pid 12320] <... bpf resumed>) = 6 [pid 12319] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 12322] <... openat resumed>) = 3 [pid 12321] close(3 [pid 12320] exit_group(0 [pid 12321] <... close resumed>) = 0 [pid 12320] <... exit_group resumed>) = ? [pid 12321] symlink("/dev/binderfs", "./binderfs" [pid 12322] write(3, "1000", 4 [pid 12321] <... symlink resumed>) = 0 [pid 12319] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12322] <... write resumed>) = 4 [pid 12321] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12320] +++ exited with 0 +++ [pid 12319] <... exit_group resumed>) = ? [pid 5069] close(3 [pid 12322] close(3 [pid 12321] <... bpf resumed>) = 3 [pid 12322] <... close resumed>) = 0 [pid 12321] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12322] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... close resumed>) = 0 [pid 12321] <... bpf resumed>) = 4 [pid 12321] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 12321] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12322] <... symlink resumed>) = 0 [pid 5069] rmdir("./1466" [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12320, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12321] exit_group(0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12321] <... exit_group resumed>) = ? [pid 12322] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12322] <... bpf resumed>) = 3 [pid 12322] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] mkdir("./1467", 0777 [pid 5067] umount2("./1427", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12322] <... bpf resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./1427", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... mkdir resumed>) = 0 [pid 12322] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... openat resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12322] <... bpf resumed>) = 5 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1427/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12322] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12319] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1427/binderfs", [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12319, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12323 attached [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12323 [pid 12323] set_robust_list(0x5555686ec660, 24 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12323] <... set_robust_list resumed>) = 0 [pid 12321] +++ exited with 0 +++ [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12323] chdir("./1467" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12321, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] unlink("./1427/binderfs" [pid 12323] <... chdir resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... unlink resumed>) = 0 [pid 12323] <... prctl resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] umount2("./1402", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12323] setpgid(0, 0) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] close(3 [pid 5068] umount2("./1446", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./1402", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12323] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5067] rmdir("./1427" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 12323] write(3, "1000", 4) = 4 [pid 12323] close(3) = 0 [pid 5068] openat(AT_FDCWD, "./1446", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12323] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12322] <... bpf resumed>) = 6 [pid 5068] <... openat resumed>) = 3 [pid 5067] mkdir("./1428", 0777 [pid 5066] getdents64(3, [pid 12323] <... bpf resumed>) = 3 [pid 12322] exit_group(0 [pid 5068] newfstatat(3, "", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... mkdir resumed>) = 0 [pid 12323] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12322] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1402/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12323] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(AT_FDCWD, "./1402/binderfs", [pid 5068] umount2("./1446/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./1402/binderfs"./strace-static-x86_64: Process 12324 attached [pid 12323] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12322] +++ exited with 0 +++ [pid 5068] newfstatat(AT_FDCWD, "./1446/binderfs", [pid 12324] set_robust_list(0x5555686ec660, 24) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12322, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12324 [pid 5066] <... unlink resumed>) = 0 [pid 12323] <... bpf resumed>) = 5 [pid 5068] unlink("./1446/binderfs" [pid 5066] getdents64(3, [pid 12324] chdir("./1428" [pid 12323] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... unlink resumed>) = 0 [pid 12324] <... chdir resumed>) = 0 [pid 5071] umount2("./1481", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 12324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12324] <... prctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 12324] setpgid(0, 0 [pid 5071] openat(AT_FDCWD, "./1481", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12324] <... setpgid resumed>) = 0 [pid 12324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12323] <... bpf resumed>) = 6 [pid 5068] close(3 [pid 5066] <... close resumed>) = 0 [pid 12324] <... openat resumed>) = 3 [pid 12323] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5066] rmdir("./1402" [pid 12323] <... exit_group resumed>) = ? [pid 12324] write(3, "1000", 4) = 4 [pid 12323] +++ exited with 0 +++ [pid 5071] newfstatat(3, "", [pid 5068] rmdir("./1446" [pid 5066] <... rmdir resumed>) = 0 [pid 12324] close(3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12323, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12324] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12324] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5068] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1403", 0777 [pid 5068] mkdir("./1447", 0777 [pid 12324] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... mkdir resumed>) = 0 [pid 12324] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1481/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 12324] <... bpf resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12324] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(AT_FDCWD, "./1481/binderfs", [pid 5069] umount2("./1467", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12325 attached [pid 12324] <... bpf resumed>) = 5 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12326 attached [pid 12325] set_robust_list(0x5555686ec660, 24 [pid 5069] openat(AT_FDCWD, "./1467", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12326] set_robust_list(0x5555686ec660, 24 [pid 12325] <... set_robust_list resumed>) = 0 [pid 12324] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12325 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12326 [pid 12326] <... set_robust_list resumed>) = 0 [pid 12325] chdir("./1447" [pid 5071] unlink("./1481/binderfs" [pid 12326] chdir("./1403" [pid 12325] <... chdir resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12324] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 12326] <... chdir resumed>) = 0 [pid 12325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] getdents64(3, [pid 12326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12325] <... prctl resumed>) = 0 [pid 12324] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12326] <... prctl resumed>) = 0 [pid 12325] setpgid(0, 0 [pid 12326] setpgid(0, 0 [pid 12325] <... setpgid resumed>) = 0 [pid 5069] umount2("./1467/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12326] <... setpgid resumed>) = 0 [pid 12325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12324] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12325] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1467/binderfs", [pid 12326] <... openat resumed>) = 3 [pid 12326] write(3, "1000", 4 [pid 12325] write(3, "1000", 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12326] <... write resumed>) = 4 [pid 12325] <... write resumed>) = 4 [pid 12326] close(3 [pid 12325] close(3 [pid 5069] unlink("./1467/binderfs" [pid 12326] <... close resumed>) = 0 [pid 12325] <... close resumed>) = 0 [pid 12324] +++ exited with 0 +++ [pid 5071] rmdir("./1481" [pid 5069] <... unlink resumed>) = 0 [pid 12326] symlink("/dev/binderfs", "./binderfs" [pid 12325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] getdents64(3, [pid 12326] <... symlink resumed>) = 0 [pid 12325] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12324, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12326] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1482", 0777 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12325] <... bpf resumed>) = 3 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12326] <... bpf resumed>) = 3 [pid 12325] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] close(3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12326] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12325] <... bpf resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 12325] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] rmdir("./1467" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12326] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12325] <... bpf resumed>) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] umount2("./1428", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1468", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12327 attached [pid 12326] <... bpf resumed>) = 5 [pid 12325] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12327 [pid 5067] openat(AT_FDCWD, "./1428", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1428/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12327] set_robust_list(0x5555686ec660, 24 [pid 12326] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12325] <... bpf resumed>) = 6 [pid 5069] <... mkdir resumed>) = 0 [pid 12327] <... set_robust_list resumed>) = 0 [pid 12326] <... bpf resumed>) = 6 [pid 12325] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12325] <... exit_group resumed>) = ? [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] newfstatat(AT_FDCWD, "./1428/binderfs", [pid 12327] chdir("./1482" [pid 12326] exit_group(0 [pid 12327] <... chdir resumed>) = 0 [pid 12326] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12328 attached [pid 12327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12328] set_robust_list(0x5555686ec660, 24) = 0 [pid 5067] unlink("./1428/binderfs" [pid 12327] <... prctl resumed>) = 0 [pid 12328] chdir("./1468" [pid 12327] setpgid(0, 0 [pid 12328] <... chdir resumed>) = 0 [pid 12327] <... setpgid resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12328 [pid 5067] getdents64(3, [pid 12328] <... prctl resumed>) = 0 [pid 12328] setpgid(0, 0 [pid 12327] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12328] <... setpgid resumed>) = 0 [pid 5067] close(3 [pid 12327] write(3, "1000", 4 [pid 12328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12327] <... write resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 12327] close(3 [pid 5067] rmdir("./1428" [pid 12327] <... close resumed>) = 0 [pid 12328] <... openat resumed>) = 3 [pid 12327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12328] write(3, "1000", 4) = 4 [pid 5067] mkdir("./1429", 0777 [pid 12328] close(3) = 0 [pid 12327] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... mkdir resumed>) = 0 [pid 12328] symlink("/dev/binderfs", "./binderfs" [pid 12327] <... bpf resumed>) = 3 [pid 12325] +++ exited with 0 +++ [pid 12326] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12325, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12326, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12328] <... symlink resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12327] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12328] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... restart_syscall resumed>) = 0 [pid 12328] <... bpf resumed>) = 3 [pid 12327] <... bpf resumed>) = 4 [pid 12328] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12327] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12329 attached [pid 12329] set_robust_list(0x5555686ec660, 24) = 0 [pid 5068] umount2("./1447", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1403", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12329] chdir("./1429" [pid 12328] <... bpf resumed>) = 4 [pid 12327] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12328] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12327] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12329 [pid 12329] <... chdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1447", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1403", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12328] <... bpf resumed>) = 5 [pid 12327] <... bpf resumed>) = 6 [pid 5068] <... openat resumed>) = 3 [pid 12329] <... prctl resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12329] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12329] <... setpgid resumed>) = 0 [pid 12327] exit_group(0 [pid 5068] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 12329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12328] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12327] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12329] <... openat resumed>) = 3 [pid 12328] <... bpf resumed>) = 6 [pid 5068] umount2("./1447/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12329] write(3, "1000", 4 [pid 12328] exit_group(0 [pid 5068] newfstatat(AT_FDCWD, "./1447/binderfs", [pid 5066] newfstatat(3, "", [pid 12329] <... write resumed>) = 4 [pid 12328] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12329] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12329] <... close resumed>) = 0 [pid 5068] unlink("./1447/binderfs" [pid 12329] symlink("/dev/binderfs", "./binderfs" [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... unlink resumed>) = 0 [pid 5066] umount2("./1403/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12329] <... symlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1403/binderfs", [pid 12329] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] close(3 [pid 5066] unlink("./1403/binderfs" [pid 12329] <... bpf resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5068] rmdir("./1447" [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1403" [pid 12329] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12328] +++ exited with 0 +++ [pid 12327] +++ exited with 0 +++ [pid 5068] <... rmdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12327, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12328, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] mkdir("./1448", 0777 [pid 5066] <... rmdir resumed>) = 0 [pid 12329] <... bpf resumed>) = 4 [pid 12329] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1404", 0777 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12329] <... bpf resumed>) = 5 [pid 5071] umount2("./1482", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12329] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1468", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12330 attached [pid 5071] openat(AT_FDCWD, "./1482", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12331 attached [pid 12330] set_robust_list(0x5555686ec660, 24 [pid 5071] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1468", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12330 [pid 12330] <... set_robust_list resumed>) = 0 [pid 12331] set_robust_list(0x5555686ec660, 24 [pid 12330] chdir("./1448" [pid 5071] newfstatat(3, "", [pid 5069] <... openat resumed>) = 3 [pid 12331] <... set_robust_list resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12331 [pid 12331] chdir("./1404" [pid 12330] <... chdir resumed>) = 0 [pid 12329] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 12330] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] getdents64(3, [pid 12330] setpgid(0, 0 [pid 12329] exit_group(0 [pid 12330] <... setpgid resumed>) = 0 [pid 12329] <... exit_group resumed>) = ? [pid 5071] umount2("./1482/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12331] <... chdir resumed>) = 0 [pid 12330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] newfstatat(AT_FDCWD, "./1482/binderfs", [pid 12330] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12330] write(3, "1000", 4 [pid 12329] +++ exited with 0 +++ [pid 5071] unlink("./1482/binderfs" [pid 5069] umount2("./1468/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12331] <... prctl resumed>) = 0 [pid 12330] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12330] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12329, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12331] setpgid(0, 0 [pid 12330] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1468/binderfs", [pid 12331] <... setpgid resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] umount2("./1429", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12330] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12330] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 5069] unlink("./1468/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12330] <... bpf resumed>) = 3 [pid 12330] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./1429", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... unlink resumed>) = 0 [pid 12331] <... openat resumed>) = 3 [pid 12330] <... bpf resumed>) = 4 [pid 5071] close(3 [pid 5069] getdents64(3, [pid 5067] <... openat resumed>) = 3 [pid 12330] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12331] write(3, "1000", 4 [pid 5067] newfstatat(3, "", [pid 12330] <... bpf resumed>) = 5 [pid 5069] close(3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12331] <... write resumed>) = 4 [pid 12330] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] rmdir("./1482" [pid 5069] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 12331] close(3 [pid 12330] <... bpf resumed>) = 6 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] rmdir("./1468" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12331] <... close resumed>) = 0 [pid 12331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12330] exit_group(0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] umount2("./1429/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] mkdir("./1483", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12331] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12330] <... exit_group resumed>) = ? [pid 5069] mkdir("./1469", 0777 [pid 5067] newfstatat(AT_FDCWD, "./1429/binderfs", [pid 12331] <... bpf resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] unlink("./1429/binderfs") = 0 [pid 12331] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12330] +++ exited with 0 +++ [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12332 attached [pid 12331] <... bpf resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12330, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12332] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12332 [pid 12332] <... set_robust_list resumed>) = 0 [pid 12331] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12333 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12333 [pid 12333] set_robust_list(0x5555686ec660, 24 [pid 12332] chdir("./1483" [pid 5068] umount2("./1448", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 12333] <... set_robust_list resumed>) = 0 [pid 12332] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 12332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12333] chdir("./1469" [pid 12332] <... prctl resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1448", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] rmdir("./1429" [pid 12333] <... chdir resumed>) = 0 [pid 12332] setpgid(0, 0) = 0 [pid 12333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12331] <... bpf resumed>) = 5 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 12333] <... prctl resumed>) = 0 [pid 12332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12331] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] newfstatat(3, "", [pid 12333] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mkdir("./1430", 0777 [pid 12333] <... setpgid resumed>) = 0 [pid 12332] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 12332] write(3, "1000", 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12332] <... write resumed>) = 4 [pid 12332] close(3 [pid 5068] umount2("./1448/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12332] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12332] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12333] <... openat resumed>) = 3 [pid 12332] <... symlink resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1448/binderfs", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12333] write(3, "1000", 4) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12333] close(3 [pid 12332] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1448/binderfs" [pid 12333] <... close resumed>) = 0 [pid 12332] <... bpf resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12334 attached [pid 12333] symlink("/dev/binderfs", "./binderfs" [pid 12332] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12333] <... symlink resumed>) = 0 [pid 12334] set_robust_list(0x5555686ec660, 24 [pid 12333] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12332] <... bpf resumed>) = 4 [pid 12331] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12334 [pid 12334] <... set_robust_list resumed>) = 0 [pid 12333] <... bpf resumed>) = 3 [pid 12332] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12334] chdir("./1430" [pid 12333] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12331] exit_group(0 [pid 12332] <... bpf resumed>) = 5 [pid 5068] close(3 [pid 12334] <... chdir resumed>) = 0 [pid 12333] <... bpf resumed>) = 4 [pid 12332] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12331] <... exit_group resumed>) = ? [pid 5068] <... close resumed>) = 0 [pid 12334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12333] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12332] <... bpf resumed>) = 6 [pid 5068] rmdir("./1448" [pid 12334] <... prctl resumed>) = 0 [pid 12334] setpgid(0, 0 [pid 12333] <... bpf resumed>) = 5 [pid 12332] exit_group(0 [pid 12334] <... setpgid resumed>) = 0 [pid 12334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12333] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... rmdir resumed>) = 0 [pid 12334] <... openat resumed>) = 3 [pid 12332] <... exit_group resumed>) = ? [pid 5068] mkdir("./1449", 0777 [pid 12334] write(3, "1000", 4) = 4 [pid 12334] close(3) = 0 [pid 12334] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... mkdir resumed>) = 0 [pid 12334] <... symlink resumed>) = 0 [pid 12334] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12334] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 ./strace-static-x86_64: Process 12335 attached [pid 12334] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12333] <... bpf resumed>) = 6 [pid 12331] +++ exited with 0 +++ [pid 12335] set_robust_list(0x5555686ec660, 24 [pid 12333] exit_group(0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12335 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12331, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12334] <... bpf resumed>) = 5 [pid 12335] <... set_robust_list resumed>) = 0 [pid 12334] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12333] <... exit_group resumed>) = ? [pid 12335] chdir("./1449") = 0 [pid 5066] umount2("./1404", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1404", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12335] <... prctl resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12335] setpgid(0, 0 [pid 5066] newfstatat(3, "", [pid 12335] <... setpgid resumed>) = 0 [pid 12334] <... bpf resumed>) = 6 [pid 12332] +++ exited with 0 +++ [pid 12335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12334] exit_group(0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12332, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12335] <... openat resumed>) = 3 [pid 12334] <... exit_group resumed>) = ? [pid 5066] getdents64(3, [pid 12335] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12335] <... write resumed>) = 4 [pid 5071] umount2("./1483", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12335] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1404/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12335] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1483", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12335] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12335] <... symlink resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5066] newfstatat(AT_FDCWD, "./1404/binderfs", [pid 12333] +++ exited with 0 +++ [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12334] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12335] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5066] unlink("./1404/binderfs" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12333, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12335] <... bpf resumed>) = 3 [pid 5071] umount2("./1483/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1469", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12334, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... unlink resumed>) = 0 [pid 12335] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1430", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12335] <... bpf resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./1483/binderfs", [pid 5069] openat(AT_FDCWD, "./1469", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12335] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./1430", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1404" [pid 12335] <... bpf resumed>) = 5 [pid 5071] unlink("./1483/binderfs" [pid 5069] newfstatat(3, "", [pid 5067] newfstatat(3, "", [pid 5066] <... rmdir resumed>) = 0 [pid 12335] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... unlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1405", 0777 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] getdents64(3, [pid 5067] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1469/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 5067] umount2("./1430/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1469/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1430/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] rmdir("./1483"./strace-static-x86_64: Process 12336 attached [pid 5069] unlink("./1469/binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12336 [pid 12336] set_robust_list(0x5555686ec660, 24 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1484", 0777 [pid 5069] <... unlink resumed>) = 0 [pid 12336] <... set_robust_list resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] unlink("./1430/binderfs" [pid 12336] chdir("./1405" [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] close(3 [pid 12336] <... chdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12336] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12336] <... prctl resumed>) = 0 [pid 5067] close(3 [pid 12336] setpgid(0, 0) = 0 [pid 5067] <... close resumed>) = 0 [pid 12336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] rmdir("./1430") = 0 [pid 12336] <... openat resumed>) = 3 [pid 12335] <... bpf resumed>) = 6 [pid 5069] <... close resumed>) = 0 ./strace-static-x86_64: Process 12337 attached [pid 12336] write(3, "1000", 4 [pid 12335] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12337 [pid 5069] rmdir("./1469" [pid 5067] mkdir("./1431", 0777 [pid 12337] set_robust_list(0x5555686ec660, 24 [pid 12336] <... write resumed>) = 4 [pid 12335] <... exit_group resumed>) = ? [pid 12336] close(3) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12336] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12337] <... set_robust_list resumed>) = 0 [pid 12336] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12335] +++ exited with 0 +++ [pid 5069] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12338 attached [pid 12337] chdir("./1484" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12335, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12336] <... bpf resumed>) = 3 [pid 12336] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12338] set_robust_list(0x5555686ec660, 24 [pid 12337] <... chdir resumed>) = 0 [pid 12336] <... bpf resumed>) = 4 [pid 5069] mkdir("./1470", 0777 [pid 12338] <... set_robust_list resumed>) = 0 [pid 12337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12336] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] umount2("./1449", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12338 [pid 12338] chdir("./1431" [pid 12337] <... prctl resumed>) = 0 [pid 12336] <... bpf resumed>) = 5 [pid 12336] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12338] <... chdir resumed>) = 0 [pid 12337] setpgid(0, 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12338] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12337] <... setpgid resumed>) = 0 [pid 12336] <... bpf resumed>) = 6 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] openat(AT_FDCWD, "./1449", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12338] <... prctl resumed>) = 0 [pid 12336] exit_group(0 [pid 12337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12338] setpgid(0, 0 [pid 12336] <... exit_group resumed>) = ? [pid 12338] <... setpgid resumed>) = 0 [pid 12337] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12339 attached [pid 12338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12339] set_robust_list(0x5555686ec660, 24) = 0 [pid 12339] chdir("./1470" [pid 12337] write(3, "1000", 4 [pid 12339] <... chdir resumed>) = 0 [pid 12339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12338] <... openat resumed>) = 3 [pid 12337] <... write resumed>) = 4 [pid 5068] newfstatat(3, "", [pid 12339] <... prctl resumed>) = 0 [pid 12337] close(3 [pid 12336] +++ exited with 0 +++ [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12339 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12339] setpgid(0, 0 [pid 12338] write(3, "1000", 4 [pid 12337] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 12339] <... setpgid resumed>) = 0 [pid 12337] symlink("/dev/binderfs", "./binderfs" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12336, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12337] <... symlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1405", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12339] <... openat resumed>) = 3 [pid 12338] <... write resumed>) = 4 [pid 5068] umount2("./1449/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12339] write(3, "1000", 4 [pid 12338] close(3 [pid 12337] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1405", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12339] <... write resumed>) = 4 [pid 12338] <... close resumed>) = 0 [pid 12337] <... bpf resumed>) = 3 [pid 5068] newfstatat(AT_FDCWD, "./1449/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 12339] close(3 [pid 12338] symlink("/dev/binderfs", "./binderfs" [pid 12337] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] newfstatat(3, "", [pid 12339] <... close resumed>) = 0 [pid 12338] <... symlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12339] symlink("/dev/binderfs", "./binderfs" [pid 5066] getdents64(3, [pid 12339] <... symlink resumed>) = 0 [pid 12338] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1449/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12339] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12337] <... bpf resumed>) = 4 [pid 5066] umount2("./1405/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12339] <... bpf resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12339] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(AT_FDCWD, "./1405/binderfs", [pid 12339] <... bpf resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12339] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12338] <... bpf resumed>) = 3 [pid 12337] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] getdents64(3, [pid 5066] unlink("./1405/binderfs" [pid 12339] <... bpf resumed>) = 5 [pid 12338] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... unlink resumed>) = 0 [pid 12337] <... bpf resumed>) = 5 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12339] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] close(3 [pid 5066] getdents64(3, [pid 12339] <... bpf resumed>) = 6 [pid 12338] <... bpf resumed>) = 4 [pid 12337] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12339] exit_group(0 [pid 12338] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12337] <... bpf resumed>) = 6 [pid 5066] close(3 [pid 12339] <... exit_group resumed>) = ? [pid 12337] exit_group(0 [pid 5068] rmdir("./1449" [pid 5066] <... close resumed>) = 0 [pid 12338] <... bpf resumed>) = 5 [pid 5066] rmdir("./1405" [pid 12337] <... exit_group resumed>) = ? [pid 12338] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1450", 0777 [pid 12339] +++ exited with 0 +++ [pid 12337] +++ exited with 0 +++ [pid 5066] mkdir("./1406", 0777 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12339, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12337, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] umount2("./1484", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1470", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1484", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./1470", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12340 attached ./strace-static-x86_64: Process 12341 attached [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12340] set_robust_list(0x5555686ec660, 24 [pid 12341] set_robust_list(0x5555686ec660, 24 [pid 12340] <... set_robust_list resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 12341] <... set_robust_list resumed>) = 0 [pid 12340] chdir("./1450" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12340 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12341 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12341] chdir("./1406" [pid 12340] <... chdir resumed>) = 0 [pid 5071] umount2("./1484/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1470/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12338] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1484/binderfs", [pid 12341] <... chdir resumed>) = 0 [pid 12340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12338] exit_group(0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12340] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1470/binderfs", [pid 12341] <... prctl resumed>) = 0 [pid 12340] setpgid(0, 0 [pid 12338] <... exit_group resumed>) = ? [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12341] setpgid(0, 0 [pid 12340] <... setpgid resumed>) = 0 [pid 12341] <... setpgid resumed>) = 0 [pid 12340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] unlink("./1484/binderfs" [pid 5069] unlink("./1470/binderfs" [pid 12341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12340] <... openat resumed>) = 3 [pid 12338] +++ exited with 0 +++ [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12341] <... openat resumed>) = 3 [pid 12340] write(3, "1000", 4 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12338, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] close(3) = 0 [pid 5071] rmdir("./1484" [pid 12341] write(3, "1000", 4 [pid 12340] <... write resumed>) = 4 [pid 5069] getdents64(3, [pid 12341] <... write resumed>) = 4 [pid 12340] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12341] close(3 [pid 12340] <... close resumed>) = 0 [pid 12341] <... close resumed>) = 0 [pid 12340] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./1485", 0777 [pid 5069] close(3 [pid 5067] umount2("./1431", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12341] symlink("/dev/binderfs", "./binderfs" [pid 12340] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1470" [pid 5067] openat(AT_FDCWD, "./1431", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12341] <... symlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12340] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12341] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(3, "", [pid 12341] <... bpf resumed>) = 3 [pid 12340] <... bpf resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] mkdir("./1471", 0777 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12341] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12340] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12342 attached [pid 12341] <... bpf resumed>) = 4 [pid 12342] set_robust_list(0x5555686ec660, 24 [pid 12340] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12342 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12341] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12342] <... set_robust_list resumed>) = 0 [pid 12340] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] umount2("./1431/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12341] <... bpf resumed>) = 5 [pid 12342] chdir("./1485" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12342] <... chdir resumed>) = 0 [pid 12341] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12340] <... bpf resumed>) = 5 [pid 5067] newfstatat(AT_FDCWD, "./1431/binderfs", ./strace-static-x86_64: Process 12343 attached [pid 12342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12343] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12343 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12342] <... prctl resumed>) = 0 [pid 12341] <... bpf resumed>) = 6 [pid 12340] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] unlink("./1431/binderfs" [pid 12342] setpgid(0, 0 [pid 12343] <... set_robust_list resumed>) = 0 [pid 12340] <... bpf resumed>) = 6 [pid 12343] chdir("./1471" [pid 12342] <... setpgid resumed>) = 0 [pid 12341] exit_group(0 [pid 5067] <... unlink resumed>) = 0 [pid 12340] exit_group(0 [pid 12343] <... chdir resumed>) = 0 [pid 12342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12340] <... exit_group resumed>) = ? [pid 5067] getdents64(3, [pid 12343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12341] <... exit_group resumed>) = ? [pid 12343] <... prctl resumed>) = 0 [pid 12343] setpgid(0, 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12343] <... setpgid resumed>) = 0 [pid 12343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12343] write(3, "1000", 4 [pid 5067] close(3 [pid 12342] <... openat resumed>) = 3 [pid 12341] +++ exited with 0 +++ [pid 12340] +++ exited with 0 +++ [pid 5067] <... close resumed>) = 0 [pid 12343] <... write resumed>) = 4 [pid 12342] write(3, "1000", 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12340, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] rmdir("./1431" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12341, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12343] close(3 [pid 12342] <... write resumed>) = 4 [pid 12343] <... close resumed>) = 0 [pid 12342] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 12343] symlink("/dev/binderfs", "./binderfs" [pid 12342] <... close resumed>) = 0 [pid 12342] symlink("/dev/binderfs", "./binderfs" [pid 5067] mkdir("./1432", 0777 [pid 12343] <... symlink resumed>) = 0 [pid 12342] <... symlink resumed>) = 0 [pid 5068] umount2("./1450", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1406", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1450", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1406", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12343] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12342] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 12343] <... bpf resumed>) = 3 [pid 12342] <... bpf resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 12342] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12343] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(3, "", [pid 12342] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12342] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12343] <... bpf resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1450/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1450/binderfs", ./strace-static-x86_64: Process 12344 attached [pid 12343] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12342] <... bpf resumed>) = 5 [pid 5066] getdents64(3, [pid 12342] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12344] set_robust_list(0x5555686ec660, 24 [pid 12342] <... bpf resumed>) = 6 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12342] exit_group(0 [pid 12344] <... set_robust_list resumed>) = 0 [pid 12343] <... bpf resumed>) = 5 [pid 5068] unlink("./1450/binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12344 [pid 5066] umount2("./1406/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12344] chdir("./1432" [pid 12342] <... exit_group resumed>) = ? [pid 12344] <... chdir resumed>) = 0 [pid 12343] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12343] <... bpf resumed>) = 6 [pid 12344] <... prctl resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1406/binderfs", [pid 12344] setpgid(0, 0 [pid 12343] exit_group(0 [pid 5068] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12344] <... setpgid resumed>) = 0 [pid 12343] <... exit_group resumed>) = ? [pid 12344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] unlink("./1406/binderfs" [pid 12344] <... openat resumed>) = 3 [pid 5068] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 12344] write(3, "1000", 4 [pid 5068] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12344] <... write resumed>) = 4 [pid 5068] rmdir("./1450" [pid 12344] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12344] <... close resumed>) = 0 [pid 5066] close(3 [pid 12344] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12344] <... symlink resumed>) = 0 [pid 5066] rmdir("./1406" [pid 5068] mkdir("./1451", 0777 [pid 12344] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12343] +++ exited with 0 +++ [pid 12342] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 12344] <... bpf resumed>) = 3 [pid 12344] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 12344] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] mkdir("./1407", 0777 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12343, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12342, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12344] <... bpf resumed>) = 5 [pid 5071] umount2("./1485", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12344] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] openat(AT_FDCWD, "./1485", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 3 [pid 12344] <... bpf resumed>) = 6 ./strace-static-x86_64: Process 12345 attached [pid 12344] exit_group(0 [pid 5071] newfstatat(3, "", [pid 12345] set_robust_list(0x5555686ec660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12345] <... set_robust_list resumed>) = 0 [pid 5069] umount2("./1471", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12346 attached [pid 12344] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] openat(AT_FDCWD, "./1471", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12346] set_robust_list(0x5555686ec660, 24 [pid 12345] chdir("./1407" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12346 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12345 [pid 12346] <... set_robust_list resumed>) = 0 [pid 12346] chdir("./1451" [pid 12345] <... chdir resumed>) = 0 [pid 12344] +++ exited with 0 +++ [pid 5071] umount2("./1485/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... openat resumed>) = 3 [pid 12346] <... chdir resumed>) = 0 [pid 12345] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(3, "", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12344, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12345] <... prctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1485/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12345] setpgid(0, 0 [pid 12346] <... prctl resumed>) = 0 [pid 12346] setpgid(0, 0 [pid 12345] <... setpgid resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] umount2("./1432", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12346] <... setpgid resumed>) = 0 [pid 12346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] unlink("./1485/binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] openat(AT_FDCWD, "./1432", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12346] write(3, "1000", 4 [pid 12345] <... openat resumed>) = 3 [pid 12346] <... write resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5069] umount2("./1471/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12346] close(3 [pid 12345] write(3, "1000", 4 [pid 12346] <... close resumed>) = 0 [pid 12345] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", [pid 12346] symlink("/dev/binderfs", "./binderfs" [pid 12345] close(3 [pid 5071] getdents64(3, [pid 5069] newfstatat(AT_FDCWD, "./1471/binderfs", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12346] <... symlink resumed>) = 0 [pid 12345] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12345] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] getdents64(3, [pid 12346] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12345] <... symlink resumed>) = 0 [pid 5071] close(3 [pid 12346] <... bpf resumed>) = 3 [pid 5069] unlink("./1471/binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12346] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12345] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] umount2("./1432/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12346] <... bpf resumed>) = 4 [pid 12345] <... bpf resumed>) = 3 [pid 5071] rmdir("./1485" [pid 12346] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12345] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1432/binderfs", [pid 12346] <... bpf resumed>) = 5 [pid 5069] close(3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] unlink("./1432/binderfs" [pid 12346] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12345] <... bpf resumed>) = 4 [pid 5071] mkdir("./1486", 0777 [pid 5069] rmdir("./1471" [pid 5067] <... unlink resumed>) = 0 [pid 12346] <... bpf resumed>) = 6 [pid 12345] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12346] exit_group(0 [pid 12345] <... bpf resumed>) = 5 [pid 5069] mkdir("./1472", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12347 attached [pid 12346] <... exit_group resumed>) = ? [pid 5067] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12347 [pid 5067] <... close resumed>) = 0 [pid 12347] set_robust_list(0x5555686ec660, 24 [pid 12345] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12347] <... set_robust_list resumed>) = 0 [pid 12347] chdir("./1486" [pid 12345] <... bpf resumed>) = 6 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] rmdir("./1432" [pid 12347] <... chdir resumed>) = 0 [pid 12347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12345] exit_group(0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 12347] <... prctl resumed>) = 0 [pid 12345] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12348 attached [pid 12347] setpgid(0, 0 [pid 5067] mkdir("./1433", 0777 [pid 12348] set_robust_list(0x5555686ec660, 24) = 0 [pid 12347] <... setpgid resumed>) = 0 [pid 12347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... mkdir resumed>) = 0 [pid 12348] chdir("./1472" [pid 12347] <... openat resumed>) = 3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12348 [pid 12347] write(3, "1000", 4) = 4 [pid 12348] <... chdir resumed>) = 0 [pid 12348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12347] close(3) = 0 [pid 12347] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12347] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12348] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 12349 attached [pid 12348] setpgid(0, 0 [pid 12347] <... bpf resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12349 [pid 12349] set_robust_list(0x5555686ec660, 24 [pid 12348] <... setpgid resumed>) = 0 [pid 12347] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12349] <... set_robust_list resumed>) = 0 [pid 12348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12347] <... bpf resumed>) = 4 [pid 12349] chdir("./1433") = 0 [pid 12347] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12348] <... openat resumed>) = 3 [pid 12347] <... bpf resumed>) = 5 [pid 12349] <... prctl resumed>) = 0 [pid 12349] setpgid(0, 0) = 0 [pid 12348] write(3, "1000", 4 [pid 12347] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12346] +++ exited with 0 +++ [pid 12345] +++ exited with 0 +++ [pid 12349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12348] <... write resumed>) = 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12345, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12348] close(3 [pid 12349] <... openat resumed>) = 3 [pid 12348] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12346, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 12348] symlink("/dev/binderfs", "./binderfs" [pid 12349] write(3, "1000", 4 [pid 5068] umount2("./1451", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12347] <... bpf resumed>) = 6 [pid 5066] umount2("./1407", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12348] <... symlink resumed>) = 0 [pid 12349] <... write resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12349] close(3 [pid 12347] exit_group(0 [pid 5068] openat(AT_FDCWD, "./1451", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1407", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12349] <... close resumed>) = 0 [pid 12348] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12347] <... exit_group resumed>) = ? [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 12349] symlink("/dev/binderfs", "./binderfs" [pid 12348] <... bpf resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5066] newfstatat(3, "", [pid 12349] <... symlink resumed>) = 0 [pid 12348] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12347] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12347, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12349] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12348] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 12349] <... bpf resumed>) = 3 [pid 5066] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12349] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] umount2("./1407/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12348] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1486", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1451/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12349] <... bpf resumed>) = 4 [pid 5066] newfstatat(AT_FDCWD, "./1407/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12348] <... bpf resumed>) = 5 [pid 5066] unlink("./1407/binderfs" [pid 12349] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12348] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1451/binderfs", [pid 5071] openat(AT_FDCWD, "./1486", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5068] unlink("./1451/binderfs" [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 12348] <... bpf resumed>) = 6 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1407" [pid 12349] <... bpf resumed>) = 5 [pid 12348] exit_group(0 [pid 5071] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12348] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5071] getdents64(3, [pid 5068] rmdir("./1451" [pid 12349] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12348] +++ exited with 0 +++ [pid 5066] mkdir("./1408", 0777 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1486/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12348, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12349] <... bpf resumed>) = 6 [pid 5071] newfstatat(AT_FDCWD, "./1486/binderfs", [pid 5069] umount2("./1472", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./1452", 0777 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12349] exit_group(0 [pid 5071] unlink("./1486/binderfs" [pid 5069] openat(AT_FDCWD, "./1472", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... mkdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12350 attached [pid 12349] <... exit_group resumed>) = ? [pid 5069] newfstatat(3, "", [pid 5071] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12350] set_robust_list(0x5555686ec660, 24 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12350 [pid 5071] close(3) = 0 ./strace-static-x86_64: Process 12351 attached [pid 12350] <... set_robust_list resumed>) = 0 [pid 12349] +++ exited with 0 +++ [pid 5071] rmdir("./1486" [pid 5069] getdents64(3, [pid 12351] set_robust_list(0x5555686ec660, 24 [pid 12350] chdir("./1408" [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12351 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12349, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12351] <... set_robust_list resumed>) = 0 [pid 12350] <... chdir resumed>) = 0 [pid 5069] umount2("./1472/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] mkdir("./1487", 0777 [pid 12350] <... prctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1472/binderfs", [pid 5067] umount2("./1433", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12350] setpgid(0, 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12350] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12351] chdir("./1452" [pid 12350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] unlink("./1472/binderfs" [pid 5067] openat(AT_FDCWD, "./1433", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12352 attached [pid 12351] <... chdir resumed>) = 0 [pid 12350] <... openat resumed>) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12352] set_robust_list(0x5555686ec660, 24 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12352] <... set_robust_list resumed>) = 0 [pid 12351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12350] write(3, "1000", 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12352 [pid 5069] getdents64(3, [pid 5067] getdents64(3, [pid 12351] <... prctl resumed>) = 0 [pid 12352] chdir("./1487" [pid 12350] <... write resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12352] <... chdir resumed>) = 0 [pid 12351] setpgid(0, 0 [pid 12350] close(3 [pid 5069] close(3 [pid 12352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12351] <... setpgid resumed>) = 0 [pid 12350] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] umount2("./1433/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12352] <... prctl resumed>) = 0 [pid 12351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12350] symlink("/dev/binderfs", "./binderfs" [pid 5069] rmdir("./1472" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12352] setpgid(0, 0 [pid 12351] <... openat resumed>) = 3 [pid 12350] <... symlink resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1433/binderfs", [pid 12352] <... setpgid resumed>) = 0 [pid 12351] write(3, "1000", 4) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12351] close(3 [pid 12350] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] unlink("./1433/binderfs" [pid 12351] <... close resumed>) = 0 [pid 12352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12350] <... bpf resumed>) = 3 [pid 5069] mkdir("./1473", 0777 [pid 12351] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 12350] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12352] <... openat resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 12351] <... symlink resumed>) = 0 [pid 12350] <... bpf resumed>) = 4 [pid 5067] getdents64(3, [pid 12352] write(3, "1000", 4 [pid 12351] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12350] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12352] <... write resumed>) = 4 [pid 12351] <... bpf resumed>) = 3 [pid 5067] close(3 [pid 12352] close(3 [pid 12351] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 12353 attached [pid 12352] <... close resumed>) = 0 [pid 12351] <... bpf resumed>) = 4 [pid 12350] <... bpf resumed>) = 5 [pid 5067] rmdir("./1433" [pid 12353] set_robust_list(0x5555686ec660, 24 [pid 12352] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12353 [pid 12352] <... symlink resumed>) = 0 [pid 12351] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12353] <... set_robust_list resumed>) = 0 [pid 12352] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12350] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... rmdir resumed>) = 0 [pid 12353] chdir("./1473" [pid 12352] <... bpf resumed>) = 3 [pid 12351] <... bpf resumed>) = 5 [pid 12352] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12351] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12350] <... bpf resumed>) = 6 [pid 12353] <... chdir resumed>) = 0 [pid 12352] <... bpf resumed>) = 4 [pid 12351] <... bpf resumed>) = 6 [pid 5067] mkdir("./1434", 0777 [pid 12353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12352] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12351] exit_group(0 [pid 12353] <... prctl resumed>) = 0 [pid 12352] <... bpf resumed>) = 5 [pid 12350] exit_group(0 [pid 5067] <... mkdir resumed>) = 0 [pid 12353] setpgid(0, 0 [pid 12351] <... exit_group resumed>) = ? [pid 12353] <... setpgid resumed>) = 0 [pid 12351] +++ exited with 0 +++ [pid 12350] <... exit_group resumed>) = ? [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12351, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12352] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12352] exit_group(0./strace-static-x86_64: Process 12354 attached [pid 12353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12354] set_robust_list(0x5555686ec660, 24 [pid 12353] <... openat resumed>) = 3 [pid 12352] <... exit_group resumed>) = ? [pid 12354] <... set_robust_list resumed>) = 0 [pid 12353] write(3, "1000", 4 [pid 5068] umount2("./1452", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12354 [pid 12354] chdir("./1434" [pid 12353] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1452", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12354] <... chdir resumed>) = 0 [pid 12354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12354] setpgid(0, 0) = 0 [pid 12353] close(3 [pid 12352] +++ exited with 0 +++ [pid 12350] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 12354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12353] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12352, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12354] <... openat resumed>) = 3 [pid 12353] symlink("/dev/binderfs", "./binderfs" [pid 5068] newfstatat(3, "", [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12350, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12354] write(3, "1000", 4 [pid 12353] <... symlink resumed>) = 0 [pid 12354] <... write resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12354] close(3 [pid 12353] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12354] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5071] umount2("./1487", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12354] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12353] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1408", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12354] <... symlink resumed>) = 0 [pid 5068] umount2("./1452/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12353] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] openat(AT_FDCWD, "./1487", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12354] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1408", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12353] <... bpf resumed>) = 4 [pid 12354] <... bpf resumed>) = 3 [pid 12353] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(3, "", [pid 5068] newfstatat(AT_FDCWD, "./1452/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 12354] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] newfstatat(3, "", [pid 12354] <... bpf resumed>) = 4 [pid 12353] <... bpf resumed>) = 5 [pid 5071] getdents64(3, [pid 12353] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] unlink("./1452/binderfs" [pid 12354] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./1487/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1487/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1487/binderfs" [pid 12354] <... bpf resumed>) = 5 [pid 5071] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] getdents64(3, [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1487") = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] close(3) = 0 [pid 5066] umount2("./1408/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./1452" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12353] <... bpf resumed>) = 6 [pid 5071] mkdir("./1488", 0777 [pid 5066] newfstatat(AT_FDCWD, "./1408/binderfs", [pid 12354] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12353] exit_group(0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12353] <... exit_group resumed>) = ? [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] mkdir("./1453", 0777 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12354] <... bpf resumed>) = 6 [pid 5068] <... mkdir resumed>) = 0 [pid 12354] exit_group(0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] unlink("./1408/binderfs"./strace-static-x86_64: Process 12355 attached [pid 12354] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12355 [pid 5066] <... unlink resumed>) = 0 [pid 12355] set_robust_list(0x5555686ec660, 24) = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1408" [pid 12355] chdir("./1488") = 0 ./strace-static-x86_64: Process 12356 attached [pid 12355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12356] set_robust_list(0x5555686ec660, 24 [pid 12355] <... prctl resumed>) = 0 [pid 12355] setpgid(0, 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12356] <... set_robust_list resumed>) = 0 [pid 12355] <... setpgid resumed>) = 0 [pid 12356] chdir("./1453" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12356 [pid 5066] mkdir("./1409", 0777 [pid 12356] <... chdir resumed>) = 0 [pid 12355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12356] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12355] <... openat resumed>) = 3 [pid 12356] <... prctl resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12356] setpgid(0, 0 [pid 12355] write(3, "1000", 4 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12356] <... setpgid resumed>) = 0 [pid 12355] <... write resumed>) = 4 [pid 12355] close(3 [pid 12356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12355] <... close resumed>) = 0 [pid 12356] <... openat resumed>) = 3 [pid 12355] symlink("/dev/binderfs", "./binderfs" [pid 12356] write(3, "1000", 4) = 4 [pid 12355] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12357 attached [pid 12356] close(3 [pid 12355] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12357 [pid 12357] set_robust_list(0x5555686ec660, 24 [pid 12356] <... close resumed>) = 0 [pid 12353] +++ exited with 0 +++ [pid 12357] <... set_robust_list resumed>) = 0 [pid 12357] chdir("./1409" [pid 12356] symlink("/dev/binderfs", "./binderfs" [pid 12355] <... bpf resumed>) = 3 [pid 12354] +++ exited with 0 +++ [pid 12357] <... chdir resumed>) = 0 [pid 12356] <... symlink resumed>) = 0 [pid 12355] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12353, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12356] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12355] <... bpf resumed>) = 4 [pid 5069] umount2("./1473", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12354, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12357] <... prctl resumed>) = 0 [pid 12356] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12357] setpgid(0, 0 [pid 12356] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12355] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12357] <... setpgid resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1473", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12356] <... bpf resumed>) = 4 [pid 12355] <... bpf resumed>) = 5 [pid 5069] <... openat resumed>) = 3 [pid 12356] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12355] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12357] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 12357] write(3, "1000", 4 [pid 12356] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12356] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12357] <... write resumed>) = 4 [pid 12355] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 5067] umount2("./1434", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12357] close(3 [pid 12356] <... bpf resumed>) = 6 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12357] <... close resumed>) = 0 [pid 12355] exit_group(0 [pid 5067] openat(AT_FDCWD, "./1434", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12357] symlink("/dev/binderfs", "./binderfs" [pid 12356] exit_group(0 [pid 12355] <... exit_group resumed>) = ? [pid 5069] umount2("./1473/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12357] <... symlink resumed>) = 0 [pid 12356] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12357] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(AT_FDCWD, "./1473/binderfs", [pid 5067] newfstatat(3, "", [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] unlink("./1473/binderfs" [pid 12357] <... bpf resumed>) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1434/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12357] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1434/binderfs", [pid 5069] close(3) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12357] <... bpf resumed>) = 4 [pid 5069] rmdir("./1473" [pid 5067] unlink("./1434/binderfs" [pid 12357] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12356] +++ exited with 0 +++ [pid 12355] +++ exited with 0 +++ [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12357] <... bpf resumed>) = 5 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12355, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] mkdir("./1474", 0777 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12356, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, [pid 12357] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] umount2("./1453", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1488", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./1434" [pid 5068] openat(AT_FDCWD, "./1453", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", ./strace-static-x86_64: Process 12358 attached [pid 12357] <... bpf resumed>) = 6 [pid 5071] openat(AT_FDCWD, "./1488", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12358 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mkdir("./1435", 0777 [pid 12358] set_robust_list(0x5555686ec660, 24) = 0 [pid 12358] chdir("./1474" [pid 12357] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 12358] <... chdir resumed>) = 0 [pid 12358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12358] setpgid(0, 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12358] <... setpgid resumed>) = 0 [pid 5068] getdents64(3, [pid 12358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12357] <... exit_group resumed>) = ? [pid 5071] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12358] write(3, "1000", 4) = 4 [pid 5068] umount2("./1453/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12358] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12358] <... close resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1453/binderfs", [pid 12358] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 12358] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12359 attached [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] unlink("./1453/binderfs" [pid 12359] set_robust_list(0x5555686ec660, 24 [pid 12358] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1488/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12359 [pid 12359] <... set_robust_list resumed>) = 0 [pid 12357] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12359] chdir("./1435" [pid 12358] <... bpf resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./1488/binderfs", [pid 5068] getdents64(3, [pid 12359] <... chdir resumed>) = 0 [pid 12358] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] unlink("./1488/binderfs" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12357, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12359] <... prctl resumed>) = 0 [pid 12358] <... bpf resumed>) = 4 [pid 5068] close(3 [pid 5066] umount2("./1409", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1409", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12359] setpgid(0, 0 [pid 12358] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] rmdir("./1453" [pid 5066] newfstatat(3, "", [pid 12359] <... setpgid resumed>) = 0 [pid 12359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12358] <... bpf resumed>) = 5 [pid 5071] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12358] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12359] <... openat resumed>) = 3 [pid 5071] rmdir("./1488" [pid 5068] mkdir("./1454", 0777 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12359] write(3, "1000", 4 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] umount2("./1409/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12359] <... write resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12359] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12359] <... close resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1409/binderfs", [pid 12359] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./1489", 0777 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12359] <... symlink resumed>) = 0 [pid 12358] <... bpf resumed>) = 6 [pid 5071] <... mkdir resumed>) = 0 [pid 5066] unlink("./1409/binderfs"./strace-static-x86_64: Process 12360 attached [pid 12360] set_robust_list(0x5555686ec660, 24 [pid 12359] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12358] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12360 [pid 12360] <... set_robust_list resumed>) = 0 [pid 12359] <... bpf resumed>) = 3 [pid 12358] <... exit_group resumed>) = ? [pid 5066] <... unlink resumed>) = 0 [pid 12360] chdir("./1454" [pid 12359] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, [pid 12360] <... chdir resumed>) = 0 [pid 12359] <... bpf resumed>) = 4 ./strace-static-x86_64: Process 12361 attached [pid 12360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12359] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12361] set_robust_list(0x5555686ec660, 24 [pid 12360] <... prctl resumed>) = 0 [pid 12358] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12361 [pid 12361] <... set_robust_list resumed>) = 0 [pid 12361] chdir("./1489" [pid 12360] setpgid(0, 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12358, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] close(3 [pid 12361] <... chdir resumed>) = 0 [pid 12360] <... setpgid resumed>) = 0 [pid 12359] <... bpf resumed>) = 5 [pid 5069] umount2("./1474", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 12361] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12359] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./1409" [pid 12361] <... prctl resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1474", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12361] setpgid(0, 0 [pid 5069] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 12361] <... setpgid resumed>) = 0 [pid 12360] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 12361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] mkdir("./1410", 0777 [pid 12360] write(3, "1000", 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12361] <... openat resumed>) = 3 [pid 12360] <... write resumed>) = 4 [pid 5069] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 12361] write(3, "1000", 4 [pid 12360] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1474/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12361] <... write resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1474/binderfs", [pid 12361] close(3 [pid 12360] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12361] <... close resumed>) = 0 [pid 12360] symlink("/dev/binderfs", "./binderfs" [pid 5069] unlink("./1474/binderfs" [pid 12361] symlink("/dev/binderfs", "./binderfs" [pid 12360] <... symlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 12359] <... bpf resumed>) = 6 [pid 12359] exit_group(0 [pid 5069] <... close resumed>) = 0 ./strace-static-x86_64: Process 12362 attached [pid 12361] <... symlink resumed>) = 0 [pid 12360] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12359] <... exit_group resumed>) = ? [pid 5069] rmdir("./1474" [pid 12362] set_robust_list(0x5555686ec660, 24 [pid 12361] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12360] <... bpf resumed>) = 3 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12362 [pid 12362] <... set_robust_list resumed>) = 0 [pid 12361] <... bpf resumed>) = 3 [pid 12360] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12359] +++ exited with 0 +++ [pid 5069] <... rmdir resumed>) = 0 [pid 12362] chdir("./1410" [pid 12360] <... bpf resumed>) = 4 [pid 12362] <... chdir resumed>) = 0 [pid 12361] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12360] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] mkdir("./1475", 0777 [pid 12362] <... prctl resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12359, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12362] setpgid(0, 0) = 0 [pid 12362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12361] <... bpf resumed>) = 4 [pid 12360] <... bpf resumed>) = 5 [pid 12362] <... openat resumed>) = 3 [pid 12361] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12360] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12362] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 12363 attached [pid 12363] set_robust_list(0x5555686ec660, 24 [pid 12362] close(3 [pid 12361] <... bpf resumed>) = 5 [pid 12362] <... close resumed>) = 0 [pid 5067] umount2("./1435", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12362] symlink("/dev/binderfs", "./binderfs" [pid 12363] <... set_robust_list resumed>) = 0 [pid 12362] <... symlink resumed>) = 0 [pid 12361] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12363 [pid 5067] openat(AT_FDCWD, "./1435", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12363] chdir("./1475" [pid 12362] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12363] <... chdir resumed>) = 0 [pid 12362] <... bpf resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 12363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12362] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(3, "", [pid 12363] <... prctl resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12363] setpgid(0, 0 [pid 12362] <... bpf resumed>) = 4 [pid 12361] <... bpf resumed>) = 6 [pid 12360] <... bpf resumed>) = 6 [pid 5067] getdents64(3, [pid 12363] <... setpgid resumed>) = 0 [pid 12362] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12361] exit_group(0 [pid 12363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12362] <... bpf resumed>) = 5 [pid 12361] <... exit_group resumed>) = ? [pid 12360] exit_group(0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12363] <... openat resumed>) = 3 [pid 12362] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12360] <... exit_group resumed>) = ? [pid 5067] umount2("./1435/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12363] write(3, "1000", 4 [pid 12362] <... bpf resumed>) = 6 [pid 12361] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12363] <... write resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12361, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12363] close(3 [pid 5067] newfstatat(AT_FDCWD, "./1435/binderfs", [pid 12362] exit_group(0) = ? [pid 12363] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] umount2("./1489", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1435/binderfs" [pid 12363] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 12363] <... bpf resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1489", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12363] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12360] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 12363] <... bpf resumed>) = 4 [pid 12362] +++ exited with 0 +++ [pid 5071] newfstatat(3, "", [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12360, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12362, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12363] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] close(3 [pid 5071] getdents64(3, [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12363] <... bpf resumed>) = 5 [pid 5067] rmdir("./1435" [pid 12363] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1489/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12363] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5066] umount2("./1410", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1454", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./1489/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./1436", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12363] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] openat(AT_FDCWD, "./1454", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1410", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12363] <... exit_group resumed>) = ? [pid 5071] unlink("./1489/binderfs" [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 5068] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(3, [pid 12363] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12363, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] close(3./strace-static-x86_64: Process 12364 attached ) = 0 [pid 5068] umount2("./1454/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1410/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12364] set_robust_list(0x5555686ec660, 24 [pid 5071] rmdir("./1489" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12364 [pid 12364] <... set_robust_list resumed>) = 0 [pid 5069] umount2("./1475", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1454/binderfs", [pid 12364] chdir("./1436" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1410/binderfs", [pid 5071] mkdir("./1490", 0777 [pid 5069] openat(AT_FDCWD, "./1475", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1454/binderfs" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5066] unlink("./1410/binderfs" [pid 12364] <... chdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] getdents64(3, [pid 12364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12364] <... prctl resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] close(3 [pid 12364] setpgid(0, 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... close resumed>) = 0 [pid 12364] <... setpgid resumed>) = 0 [pid 5069] umount2("./1475/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./1454" [pid 5066] getdents64(3, [pid 12364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1475/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] close(3 [pid 12364] write(3, "1000", 4 [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 12365 attached [pid 12364] <... write resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12365 [pid 5069] unlink("./1475/binderfs" [pid 5068] mkdir("./1455", 0777 [pid 5066] rmdir("./1410" [pid 12365] set_robust_list(0x5555686ec660, 24 [pid 12364] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 12365] <... set_robust_list resumed>) = 0 [pid 12364] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 12365] chdir("./1490" [pid 12364] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... mkdir resumed>) = 0 [pid 12365] <... chdir resumed>) = 0 [pid 12365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12364] <... symlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] mkdir("./1411", 0777 [pid 12365] setpgid(0, 0 [pid 12364] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] close(3 [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12366 attached [pid 12365] <... setpgid resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1475" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12366 [pid 12364] <... bpf resumed>) = 3 [pid 12366] set_robust_list(0x5555686ec660, 24 [pid 12365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12364] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12366] <... set_robust_list resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12366] chdir("./1455" [pid 12365] <... openat resumed>) = 3 [pid 12364] <... bpf resumed>) = 4 [pid 5069] mkdir("./1476", 0777 [pid 12364] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12366] <... chdir resumed>) = 0 [pid 12365] write(3, "1000", 4 [pid 5069] <... mkdir resumed>) = 0 [pid 12366] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12365] <... write resumed>) = 4 [pid 12364] <... bpf resumed>) = 5 [pid 12366] <... prctl resumed>) = 0 [pid 12365] close(3 [pid 12366] setpgid(0, 0./strace-static-x86_64: Process 12367 attached [pid 12364] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12367] set_robust_list(0x5555686ec660, 24) = 0 [pid 12366] <... setpgid resumed>) = 0 [pid 12365] <... close resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12367] chdir("./1411" [pid 12366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12365] symlink("/dev/binderfs", "./binderfs" [pid 12364] <... bpf resumed>) = 6 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12367 [pid 12367] <... chdir resumed>) = 0 [pid 12367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12364] exit_group(0./strace-static-x86_64: Process 12368 attached [pid 12367] <... prctl resumed>) = 0 [pid 12365] <... symlink resumed>) = 0 [pid 12368] set_robust_list(0x5555686ec660, 24 [pid 12367] setpgid(0, 0 [pid 12366] <... openat resumed>) = 3 [pid 12365] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12364] <... exit_group resumed>) = ? [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12368 [pid 12368] <... set_robust_list resumed>) = 0 [pid 12367] <... setpgid resumed>) = 0 [pid 12366] write(3, "1000", 4 [pid 12365] <... bpf resumed>) = 3 [pid 12368] chdir("./1476" [pid 12365] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12368] <... chdir resumed>) = 0 [pid 12365] <... bpf resumed>) = 4 [pid 12364] +++ exited with 0 +++ [pid 12368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12366] <... write resumed>) = 4 [pid 12368] <... prctl resumed>) = 0 [pid 12367] <... openat resumed>) = 3 [pid 12366] close(3 [pid 12365] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12368] setpgid(0, 0 [pid 12367] write(3, "1000", 4 [pid 12366] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12364, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12368] <... setpgid resumed>) = 0 [pid 12367] <... write resumed>) = 4 [pid 12365] <... bpf resumed>) = 5 [pid 5067] umount2("./1436", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12367] close(3) = 0 [pid 12366] symlink("/dev/binderfs", "./binderfs" [pid 12367] symlink("/dev/binderfs", "./binderfs" [pid 12366] <... symlink resumed>) = 0 [pid 12365] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12367] <... symlink resumed>) = 0 [pid 12366] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12366] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12368] <... openat resumed>) = 3 [pid 12367] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12365] <... bpf resumed>) = 6 [pid 5067] openat(AT_FDCWD, "./1436", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12368] write(3, "1000", 4) = 4 [pid 12368] close(3) = 0 [pid 12368] symlink("/dev/binderfs", "./binderfs" [pid 12367] <... bpf resumed>) = 3 [pid 12366] <... bpf resumed>) = 4 [pid 12365] exit_group(0 [pid 12366] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12365] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 12367] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12366] <... bpf resumed>) = 5 [pid 12368] <... symlink resumed>) = 0 [pid 12368] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12368] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12365] +++ exited with 0 +++ [pid 12368] <... bpf resumed>) = 4 [pid 12367] <... bpf resumed>) = 4 [pid 12366] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] newfstatat(3, "", [pid 12368] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12367] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12365, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12368] <... bpf resumed>) = 5 [pid 12367] <... bpf resumed>) = 5 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12367] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5067] getdents64(3, [pid 12368] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1436/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1490", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1436/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1490", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5067] unlink("./1436/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 12367] <... bpf resumed>) = 6 [pid 12366] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12368] <... bpf resumed>) = 6 [pid 12367] exit_group(0 [pid 12366] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] close(3 [pid 12368] exit_group(0) = ? [pid 12367] <... exit_group resumed>) = ? [pid 12366] <... exit_group resumed>) = ? [pid 5071] umount2("./1490/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 12368] +++ exited with 0 +++ [pid 12367] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1490/binderfs", [pid 5067] rmdir("./1436" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12367, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12368, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12366] +++ exited with 0 +++ [pid 5071] unlink("./1490/binderfs" [pid 5069] umount2("./1476", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1437", 0777 [pid 5071] <... unlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12366, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... restart_syscall resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] openat(AT_FDCWD, "./1476", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] umount2("./1411", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(3, "", [pid 5068] umount2("./1455", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3) = 0 [pid 5071] rmdir("./1490") = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] mkdir("./1491", 0777./strace-static-x86_64: Process 12369 attached [pid 5069] getdents64(3, [pid 5068] openat(AT_FDCWD, "./1455", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1411", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12369 [pid 12369] set_robust_list(0x5555686ec660, 24 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... openat resumed>) = 3 [pid 12369] <... set_robust_list resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(3, "", [pid 12369] chdir("./1437" [pid 5069] umount2("./1476/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12370 attached [pid 12370] set_robust_list(0x5555686ec660, 24 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12370] <... set_robust_list resumed>) = 0 [pid 12369] <... chdir resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12370 [pid 5069] newfstatat(AT_FDCWD, "./1476/binderfs", [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12369] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] unlink("./1476/binderfs" [pid 5068] umount2("./1455/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1411/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12370] chdir("./1491" [pid 12369] <... prctl resumed>) = 0 [pid 12369] setpgid(0, 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12370] <... chdir resumed>) = 0 [pid 12369] <... setpgid resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1411/binderfs", [pid 5068] newfstatat(AT_FDCWD, "./1455/binderfs", [pid 12369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12369] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1455/binderfs" [pid 5066] unlink("./1411/binderfs" [pid 12370] setpgid(0, 0 [pid 12369] write(3, "1000", 4 [pid 5069] getdents64(3, [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12370] <... setpgid resumed>) = 0 [pid 12369] <... write resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5066] getdents64(3, [pid 5069] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5069] rmdir("./1476" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12369] close(3 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] close(3 [pid 12370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12369] <... close resumed>) = 0 [pid 12369] symlink("/dev/binderfs", "./binderfs" [pid 5069] mkdir("./1477", 0777 [pid 5068] <... close resumed>) = 0 [pid 5066] close(3 [pid 12369] <... symlink resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] rmdir("./1455" [pid 5066] <... close resumed>) = 0 [pid 12370] <... openat resumed>) = 3 [pid 12369] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... rmdir resumed>) = 0 [pid 5066] rmdir("./1411" [pid 12370] write(3, "1000", 4 [pid 5066] <... rmdir resumed>) = 0 [pid 12370] <... write resumed>) = 4 [pid 12369] <... bpf resumed>) = 3 [pid 5068] mkdir("./1456", 0777) = 0 [pid 5066] mkdir("./1412", 0777 [pid 12370] close(3) = 0 [pid 12369] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12371 attached [pid 12370] symlink("/dev/binderfs", "./binderfs" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12369] <... bpf resumed>) = 4 [pid 12371] set_robust_list(0x5555686ec660, 24 [pid 12370] <... symlink resumed>) = 0 [pid 12369] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12371 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12372 attached [pid 12371] <... set_robust_list resumed>) = 0 [pid 12370] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12372] set_robust_list(0x5555686ec660, 24 [pid 12371] chdir("./1477" [pid 12369] <... bpf resumed>) = 5 [pid 12372] <... set_robust_list resumed>) = 0 [pid 12371] <... chdir resumed>) = 0 [pid 12370] <... bpf resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12372 [pid 12372] chdir("./1456" [pid 12371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12370] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12372] <... chdir resumed>) = 0 [pid 12371] <... prctl resumed>) = 0 [pid 12370] <... bpf resumed>) = 4 [pid 12369] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12372] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12371] setpgid(0, 0 [pid 12370] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12369] <... bpf resumed>) = 6 ./strace-static-x86_64: Process 12373 attached [pid 12372] <... prctl resumed>) = 0 [pid 12371] <... setpgid resumed>) = 0 [pid 12369] exit_group(0 [pid 12373] set_robust_list(0x5555686ec660, 24) = 0 [pid 12369] <... exit_group resumed>) = ? [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12373 [pid 12373] chdir("./1412" [pid 12372] setpgid(0, 0 [pid 12371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12370] <... bpf resumed>) = 5 [pid 12372] <... setpgid resumed>) = 0 [pid 12371] <... openat resumed>) = 3 [pid 12373] <... chdir resumed>) = 0 [pid 12372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12371] write(3, "1000", 4 [pid 12370] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12369] +++ exited with 0 +++ [pid 12373] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12372] <... openat resumed>) = 3 [pid 12371] <... write resumed>) = 4 [pid 12373] <... prctl resumed>) = 0 [pid 12371] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12369, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12373] setpgid(0, 0 [pid 12372] write(3, "1000", 4 [pid 12371] <... close resumed>) = 0 [pid 12370] <... bpf resumed>) = 6 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12373] <... setpgid resumed>) = 0 [pid 12372] <... write resumed>) = 4 [pid 12371] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... restart_syscall resumed>) = 0 [pid 12373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12372] close(3 [pid 12371] <... symlink resumed>) = 0 [pid 12370] exit_group(0 [pid 12372] <... close resumed>) = 0 [pid 12373] <... openat resumed>) = 3 [pid 12372] symlink("/dev/binderfs", "./binderfs" [pid 12371] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12370] <... exit_group resumed>) = ? [pid 12373] write(3, "1000", 4 [pid 12372] <... symlink resumed>) = 0 [pid 12371] <... bpf resumed>) = 3 [pid 5067] umount2("./1437", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12373] <... write resumed>) = 4 [pid 12372] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12371] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12373] close(3 [pid 12372] <... bpf resumed>) = 3 [pid 12371] <... bpf resumed>) = 4 [pid 12370] +++ exited with 0 +++ [pid 5067] openat(AT_FDCWD, "./1437", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12373] <... close resumed>) = 0 [pid 12372] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12373] symlink("/dev/binderfs", "./binderfs" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12370, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12373] <... symlink resumed>) = 0 [pid 12372] <... bpf resumed>) = 4 [pid 12371] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... openat resumed>) = 3 [pid 12373] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12372] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] newfstatat(3, "", [pid 12371] <... bpf resumed>) = 5 [pid 5071] <... restart_syscall resumed>) = 0 [pid 12373] <... bpf resumed>) = 3 [pid 12373] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12372] <... bpf resumed>) = 5 [pid 12371] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12373] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12372] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1437/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1437/binderfs", [pid 12373] <... bpf resumed>) = 5 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./1491", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./1437/binderfs" [pid 12373] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] openat(AT_FDCWD, "./1491", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] <... unlink resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 12372] <... bpf resumed>) = 6 [pid 12371] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12373] <... bpf resumed>) = 6 [pid 12371] exit_group(0 [pid 5071] getdents64(3, [pid 12373] exit_group(0 [pid 12372] exit_group(0 [pid 5067] getdents64(3, [pid 12373] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12372] <... exit_group resumed>) = ? [pid 12371] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12373] +++ exited with 0 +++ [pid 12372] +++ exited with 0 +++ [pid 5071] umount2("./1491/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12373, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] newfstatat(AT_FDCWD, "./1491/binderfs", [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12372, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1412", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] rmdir("./1437" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./1491/binderfs" [pid 12371] +++ exited with 0 +++ [pid 5067] <... rmdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1412", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12371, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 5067] mkdir("./1438", 0777 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] umount2("./1456", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5066] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] umount2("./1477", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1456", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 ./strace-static-x86_64: Process 12374 attached [pid 5071] rmdir("./1491" [pid 5069] openat(AT_FDCWD, "./1477", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... openat resumed>) = 3 [pid 5066] umount2("./1412/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12374] set_robust_list(0x5555686ec660, 24 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1412/binderfs", [pid 12374] <... set_robust_list resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12374] chdir("./1438" [pid 5071] mkdir("./1492", 0777 [pid 5069] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12374 [pid 5066] unlink("./1412/binderfs" [pid 12374] <... chdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 12374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... mkdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... unlink resumed>) = 0 [pid 12374] <... prctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1456/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12374] setpgid(0, 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3./strace-static-x86_64: Process 12375 attached [pid 12374] <... setpgid resumed>) = 0 [pid 5069] umount2("./1477/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1456/binderfs", [pid 5066] rmdir("./1412" [pid 12375] set_robust_list(0x5555686ec660, 24 [pid 12374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12375] <... set_robust_list resumed>) = 0 [pid 12374] <... openat resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12375 [pid 5069] newfstatat(AT_FDCWD, "./1477/binderfs", [pid 5066] <... rmdir resumed>) = 0 [pid 12375] chdir("./1492" [pid 12374] write(3, "1000", 4 [pid 5068] unlink("./1456/binderfs" [pid 12375] <... chdir resumed>) = 0 [pid 12374] <... write resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12374] close(3 [pid 5069] unlink("./1477/binderfs" [pid 12375] <... prctl resumed>) = 0 [pid 12375] setpgid(0, 0 [pid 12374] <... close resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] mkdir("./1413", 0777 [pid 12375] <... setpgid resumed>) = 0 [pid 12374] symlink("/dev/binderfs", "./binderfs" [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 12375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12375] <... openat resumed>) = 3 [pid 12374] <... symlink resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] close(3./strace-static-x86_64: Process 12376 attached [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12376 [pid 12376] set_robust_list(0x5555686ec660, 24 [pid 12375] write(3, "1000", 4 [pid 12374] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] rmdir("./1477" [pid 5068] <... close resumed>) = 0 [pid 12376] <... set_robust_list resumed>) = 0 [pid 12375] <... write resumed>) = 4 [pid 12376] chdir("./1413" [pid 12375] close(3 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] rmdir("./1456" [pid 12374] <... bpf resumed>) = 3 [pid 12376] <... chdir resumed>) = 0 [pid 12375] <... close resumed>) = 0 [pid 12374] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] mkdir("./1478", 0777 [pid 5068] <... rmdir resumed>) = 0 [pid 12376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12375] symlink("/dev/binderfs", "./binderfs" [pid 5068] mkdir("./1457", 0777 [pid 12374] <... bpf resumed>) = 4 [pid 12376] <... prctl resumed>) = 0 [pid 12375] <... symlink resumed>) = 0 [pid 12374] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... mkdir resumed>) = 0 [pid 12376] setpgid(0, 0 [pid 12375] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12376] <... setpgid resumed>) = 0 [pid 12374] <... bpf resumed>) = 5 [pid 12375] <... bpf resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12375] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12374] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12378 attached ./strace-static-x86_64: Process 12377 attached [pid 12375] <... bpf resumed>) = 4 [pid 12374] <... bpf resumed>) = 6 [pid 12377] set_robust_list(0x5555686ec660, 24) = 0 [pid 12375] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12378] set_robust_list(0x5555686ec660, 24 [pid 12377] chdir("./1457" [pid 12376] <... openat resumed>) = 3 [pid 12374] exit_group(0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12378 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12377 [pid 12378] <... set_robust_list resumed>) = 0 [pid 12377] <... chdir resumed>) = 0 [pid 12376] write(3, "1000", 4 [pid 12375] <... bpf resumed>) = 5 [pid 12374] <... exit_group resumed>) = ? [pid 12377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12378] chdir("./1478" [pid 12377] <... prctl resumed>) = 0 [pid 12376] <... write resumed>) = 4 [pid 12375] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12378] <... chdir resumed>) = 0 [pid 12377] setpgid(0, 0 [pid 12376] close(3 [pid 12375] <... bpf resumed>) = 6 [pid 12378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12377] <... setpgid resumed>) = 0 [pid 12376] <... close resumed>) = 0 [pid 12378] <... prctl resumed>) = 0 [pid 12376] symlink("/dev/binderfs", "./binderfs" [pid 12375] exit_group(0 [pid 12378] setpgid(0, 0 [pid 12377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12378] <... setpgid resumed>) = 0 [pid 12376] <... symlink resumed>) = 0 [pid 12375] <... exit_group resumed>) = ? [pid 12378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12377] <... openat resumed>) = 3 [pid 12378] <... openat resumed>) = 3 [pid 12378] write(3, "1000", 4) = 4 [pid 12378] close(3 [pid 12376] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12378] <... close resumed>) = 0 [pid 12377] write(3, "1000", 4 [pid 12378] symlink("/dev/binderfs", "./binderfs" [pid 12377] <... write resumed>) = 4 [pid 12376] <... bpf resumed>) = 3 [pid 12378] <... symlink resumed>) = 0 [pid 12377] close(3 [pid 12376] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12377] <... close resumed>) = 0 [pid 12378] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12377] symlink("/dev/binderfs", "./binderfs" [pid 12376] <... bpf resumed>) = 4 [pid 12378] <... bpf resumed>) = 3 [pid 12377] <... symlink resumed>) = 0 [pid 12376] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12375] +++ exited with 0 +++ [pid 12374] +++ exited with 0 +++ [pid 12378] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12376] <... bpf resumed>) = 5 [pid 12377] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12375, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12378] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12376] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12374, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] umount2("./1438", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1438", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1438/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1438/binderfs", [pid 12378] <... bpf resumed>) = 5 [pid 12377] <... bpf resumed>) = 3 [pid 12376] <... bpf resumed>) = 6 [pid 12378] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12377] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12376] exit_group(0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12378] <... bpf resumed>) = 6 [pid 12376] <... exit_group resumed>) = ? [pid 12378] exit_group(0 [pid 12377] <... bpf resumed>) = 4 [pid 5067] unlink("./1438/binderfs" [pid 12378] <... exit_group resumed>) = ? [pid 12377] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1492", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1492", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12377] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] close(3 [pid 12377] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12378] +++ exited with 0 +++ [pid 12376] +++ exited with 0 +++ [pid 5071] umount2("./1492/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1438" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12378, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5067] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1492/binderfs", [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12376, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] mkdir("./1439", 0777 [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./1413", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./1492/binderfs" [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1478", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./1413", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1478", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(3, "", [pid 5069] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] newfstatat(3, "", [pid 5066] getdents64(3, [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12379 attached [pid 5071] close(3 [pid 5069] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12379 [pid 12379] set_robust_list(0x5555686ec660, 24 [pid 5071] <... close resumed>) = 0 [pid 5066] umount2("./1413/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12379] <... set_robust_list resumed>) = 0 [pid 12379] chdir("./1439" [pid 5071] rmdir("./1492" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12379] <... chdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] umount2("./1478/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1413/binderfs", [pid 12379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] mkdir("./1493", 0777 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12379] <... prctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1478/binderfs", [pid 5066] unlink("./1413/binderfs" [pid 12379] setpgid(0, 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12379] <... setpgid resumed>) = 0 [pid 5069] unlink("./1478/binderfs" [pid 5066] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12380 attached [pid 12379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] getdents64(3, [pid 5066] getdents64(3, [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12380 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12380] set_robust_list(0x5555686ec660, 24 [pid 12379] <... openat resumed>) = 3 [pid 12380] <... set_robust_list resumed>) = 0 [pid 12379] write(3, "1000", 4 [pid 5069] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12380] chdir("./1493" [pid 12379] <... write resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5066] close(3) = 0 [pid 12379] close(3) = 0 [pid 12379] symlink("/dev/binderfs", "./binderfs" [pid 5069] rmdir("./1478" [pid 5066] rmdir("./1413" [pid 12380] <... chdir resumed>) = 0 [pid 12379] <... symlink resumed>) = 0 [pid 12380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12379] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12380] <... prctl resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12380] setpgid(0, 0 [pid 12379] <... bpf resumed>) = 3 [pid 12379] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12380] <... setpgid resumed>) = 0 [pid 5069] mkdir("./1479", 0777 [pid 5066] <... rmdir resumed>) = 0 [pid 12380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12379] <... bpf resumed>) = 4 [pid 12379] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... mkdir resumed>) = 0 [pid 12380] <... openat resumed>) = 3 [pid 5066] mkdir("./1414", 0777 [pid 12380] write(3, "1000", 4 [pid 12379] <... bpf resumed>) = 5 [pid 5066] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12380] <... write resumed>) = 4 [pid 12380] close(3 [pid 12379] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12377] <... bpf resumed>) = 6 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12380] <... close resumed>) = 0 [pid 12379] <... bpf resumed>) = 6 [pid 12377] exit_group(0./strace-static-x86_64: Process 12381 attached [pid 12380] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12382 attached [pid 12377] <... exit_group resumed>) = ? [pid 12381] set_robust_list(0x5555686ec660, 24 [pid 12380] <... symlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12382 [pid 12381] <... set_robust_list resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12381 [pid 12381] chdir("./1479" [pid 12382] set_robust_list(0x5555686ec660, 24 [pid 12380] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12379] exit_group(0 [pid 12382] <... set_robust_list resumed>) = 0 [pid 12380] <... bpf resumed>) = 3 [pid 12381] <... chdir resumed>) = 0 [pid 12382] chdir("./1414" [pid 12381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12380] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12379] <... exit_group resumed>) = ? [pid 12382] <... chdir resumed>) = 0 [pid 12381] <... prctl resumed>) = 0 [pid 12381] setpgid(0, 0) = 0 [pid 12381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12381] write(3, "1000", 4 [pid 12382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12380] <... bpf resumed>) = 4 [pid 12382] <... prctl resumed>) = 0 [pid 12379] +++ exited with 0 +++ [pid 12377] +++ exited with 0 +++ [pid 12381] <... write resumed>) = 4 [pid 12381] close(3 [pid 12382] setpgid(0, 0 [pid 12381] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12379, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12382] <... setpgid resumed>) = 0 [pid 12381] symlink("/dev/binderfs", "./binderfs" [pid 12380] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12381] <... symlink resumed>) = 0 [pid 12381] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12380] <... bpf resumed>) = 5 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12377, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12382] <... openat resumed>) = 3 [pid 12381] <... bpf resumed>) = 3 [pid 12382] write(3, "1000", 4 [pid 12381] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1457", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12382] <... write resumed>) = 4 [pid 12381] <... bpf resumed>) = 4 [pid 12380] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12382] close(3 [pid 12381] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] openat(AT_FDCWD, "./1457", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12382] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12382] symlink("/dev/binderfs", "./binderfs" [pid 12381] <... bpf resumed>) = 5 [pid 12382] <... symlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12382] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12381] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1439", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12382] <... bpf resumed>) = 3 [pid 12382] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12382] <... bpf resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] openat(AT_FDCWD, "./1439", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12382] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] umount2("./1457/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12382] <... bpf resumed>) = 5 [pid 5067] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12382] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] newfstatat(AT_FDCWD, "./1457/binderfs", [pid 5067] newfstatat(3, "", [pid 12382] <... bpf resumed>) = 6 [pid 12381] <... bpf resumed>) = 6 [pid 12380] <... bpf resumed>) = 6 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12382] exit_group(0) = ? [pid 12381] exit_group(0 [pid 5068] unlink("./1457/binderfs" [pid 5067] getdents64(3, [pid 12380] exit_group(0 [pid 12382] +++ exited with 0 +++ [pid 12381] <... exit_group resumed>) = ? [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12381] +++ exited with 0 +++ [pid 12380] <... exit_group resumed>) = ? [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12381, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12382, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 12380] +++ exited with 0 +++ [pid 5067] umount2("./1439/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12380, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] rmdir("./1457" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1414", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1479", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1414", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./1479", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1439/binderfs", [pid 5066] newfstatat(3, "", [pid 5069] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./1493", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5068] mkdir("./1458", 0777 [pid 5067] unlink("./1439/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] openat(AT_FDCWD, "./1493", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1414/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5069] umount2("./1479/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(AT_FDCWD, "./1479/binderfs", [pid 5066] newfstatat(AT_FDCWD, "./1414/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] unlink("./1479/binderfs" [pid 5066] unlink("./1414/binderfs" [pid 5071] umount2("./1493/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1493/binderfs", ./strace-static-x86_64: Process 12383 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 12383] set_robust_list(0x5555686ec660, 24 [pid 5071] unlink("./1493/binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12383] <... set_robust_list resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] close(3 [pid 5067] <... close resumed>) = 0 [pid 5066] close(3 [pid 12383] chdir("./1458" [pid 5069] <... close resumed>) = 0 [pid 5067] rmdir("./1439" [pid 5066] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12383 [pid 12383] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] rmdir("./1479" [pid 5066] rmdir("./1414" [pid 12383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12383] <... prctl resumed>) = 0 [pid 5071] close(3 [pid 5067] mkdir("./1440", 0777 [pid 12383] setpgid(0, 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12383] <... setpgid resumed>) = 0 [pid 12383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... close resumed>) = 0 [pid 5069] mkdir("./1480", 0777 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... rmdir resumed>) = 0 [pid 12383] <... openat resumed>) = 3 [pid 5071] rmdir("./1493" [pid 12383] write(3, "1000", 4 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1415", 0777 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12383] <... write resumed>) = 4 [pid 12383] close(3 [pid 5071] mkdir("./1494", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 12383] <... close resumed>) = 0 [pid 12383] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12384 attached [pid 12383] <... symlink resumed>) = 0 [pid 12383] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12386 attached ./strace-static-x86_64: Process 12385 attached [pid 12384] set_robust_list(0x5555686ec660, 24 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12384 [pid 12386] set_robust_list(0x5555686ec660, 24 [pid 12385] set_robust_list(0x5555686ec660, 24 [pid 12384] <... set_robust_list resumed>) = 0 [pid 12383] <... bpf resumed>) = 3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12385 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12386 [pid 12384] chdir("./1440"./strace-static-x86_64: Process 12387 attached [pid 12386] <... set_robust_list resumed>) = 0 [pid 12385] <... set_robust_list resumed>) = 0 [pid 12383] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12387 [pid 12387] set_robust_list(0x5555686ec660, 24 [pid 12385] chdir("./1480" [pid 12383] <... bpf resumed>) = 4 [pid 12387] <... set_robust_list resumed>) = 0 [pid 12383] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12387] chdir("./1494" [pid 12386] chdir("./1415" [pid 12385] <... chdir resumed>) = 0 [pid 12384] <... chdir resumed>) = 0 [pid 12387] <... chdir resumed>) = 0 [pid 12385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12383] <... bpf resumed>) = 5 [pid 12386] <... chdir resumed>) = 0 [pid 12386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12385] <... prctl resumed>) = 0 [pid 12384] <... prctl resumed>) = 0 [pid 12387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12385] setpgid(0, 0 [pid 12383] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12387] <... prctl resumed>) = 0 [pid 12385] <... setpgid resumed>) = 0 [pid 12384] setpgid(0, 0 [pid 12383] <... bpf resumed>) = 6 [pid 12387] setpgid(0, 0 [pid 12386] <... prctl resumed>) = 0 [pid 12384] <... setpgid resumed>) = 0 [pid 12387] <... setpgid resumed>) = 0 [pid 12383] exit_group(0 [pid 12384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12386] setpgid(0, 0 [pid 12385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12383] <... exit_group resumed>) = ? [pid 12387] <... openat resumed>) = 3 [pid 12386] <... setpgid resumed>) = 0 [pid 12385] <... openat resumed>) = 3 [pid 12384] <... openat resumed>) = 3 [pid 12387] write(3, "1000", 4 [pid 12386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12383] +++ exited with 0 +++ [pid 12385] write(3, "1000", 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12383, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12385] <... write resumed>) = 4 [pid 12387] <... write resumed>) = 4 [pid 12384] write(3, "1000", 4 [pid 12387] close(3 [pid 12385] close(3 [pid 12387] <... close resumed>) = 0 [pid 12387] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12386] <... openat resumed>) = 3 [pid 12385] <... close resumed>) = 0 [pid 12384] <... write resumed>) = 4 [pid 12387] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12386] write(3, "1000", 4 [pid 12385] symlink("/dev/binderfs", "./binderfs" [pid 12384] close(3) = 0 [pid 12387] <... bpf resumed>) = 3 [pid 12386] <... write resumed>) = 4 [pid 12384] symlink("/dev/binderfs", "./binderfs" [pid 12387] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12386] close(3 [pid 12385] <... symlink resumed>) = 0 [pid 12387] <... bpf resumed>) = 4 [pid 12386] <... close resumed>) = 0 [pid 12384] <... symlink resumed>) = 0 [pid 12386] symlink("/dev/binderfs", "./binderfs" [pid 12387] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12386] <... symlink resumed>) = 0 [pid 12385] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12384] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1458", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12387] <... bpf resumed>) = 5 [pid 12386] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12385] <... bpf resumed>) = 3 [pid 12384] <... bpf resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12387] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12386] <... bpf resumed>) = 3 [pid 12385] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12384] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] openat(AT_FDCWD, "./1458", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12386] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12385] <... bpf resumed>) = 4 [pid 12386] <... bpf resumed>) = 4 [pid 12384] <... bpf resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 12386] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12387] <... bpf resumed>) = 6 [pid 12385] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12384] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] newfstatat(3, "", [pid 12387] exit_group(0 [pid 12386] <... bpf resumed>) = 5 [pid 12385] <... bpf resumed>) = 5 [pid 12384] <... bpf resumed>) = 5 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12387] <... exit_group resumed>) = ? [pid 12386] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12385] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12386] <... bpf resumed>) = 6 [pid 12385] <... bpf resumed>) = 6 [pid 12384] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] getdents64(3, [pid 12385] exit_group(0 [pid 12386] exit_group(0 [pid 12384] <... bpf resumed>) = 6 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12387] +++ exited with 0 +++ [pid 12386] <... exit_group resumed>) = ? [pid 12385] <... exit_group resumed>) = ? [pid 12384] exit_group(0 [pid 5068] umount2("./1458/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12387, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12386] +++ exited with 0 +++ [pid 12384] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12386, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] newfstatat(AT_FDCWD, "./1458/binderfs", [pid 5071] umount2("./1494", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] openat(AT_FDCWD, "./1494", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] unlink("./1458/binderfs" [pid 12385] +++ exited with 0 +++ [pid 12384] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12385, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] umount2("./1415", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 5068] <... unlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12384, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1415", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1458" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... openat resumed>) = 3 [pid 5071] umount2("./1494/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1440", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 5068] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./1459", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./1494/binderfs", [pid 5069] umount2("./1480", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1440", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] unlink("./1494/binderfs" [pid 5069] openat(AT_FDCWD, "./1480", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5066] umount2("./1415/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12388 attached [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12388] set_robust_list(0x5555686ec660, 24 [pid 5071] getdents64(3, [pid 5069] newfstatat(3, "", [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12388 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12388] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1440/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1415/binderfs", [pid 12388] chdir("./1459" [pid 5071] close(3 [pid 5069] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1494" [pid 5069] umount2("./1480/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./1415/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12388] <... chdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1480/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1440/binderfs", [pid 12388] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12388] <... prctl resumed>) = 0 [pid 5067] unlink("./1440/binderfs" [pid 12388] setpgid(0, 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12388] <... setpgid resumed>) = 0 [pid 5071] mkdir("./1495", 0777 [pid 5069] unlink("./1480/binderfs" [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 12388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 12388] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1440" [pid 12388] write(3, "1000", 4 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5066] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1441", 0777 [pid 5066] <... close resumed>) = 0 [pid 12388] <... write resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12388] close(3 [pid 5069] close(3 [pid 12388] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] rmdir("./1415" [pid 12388] symlink("/dev/binderfs", "./binderfs" [pid 5069] rmdir("./1480" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12389 attached [pid 12388] <... symlink resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12389] set_robust_list(0x5555686ec660, 24) = 0 [pid 5069] mkdir("./1481", 0777 [pid 5066] mkdir("./1416", 0777./strace-static-x86_64: Process 12390 attached [pid 12389] chdir("./1495" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12389 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12390] set_robust_list(0x5555686ec660, 24 [pid 12388] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12390 [pid 12390] <... set_robust_list resumed>) = 0 [pid 12389] <... chdir resumed>) = 0 [pid 12388] <... bpf resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12390] chdir("./1441" [pid 12389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12388] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12390] <... chdir resumed>) = 0 [pid 12389] <... prctl resumed>) = 0 [pid 12388] <... bpf resumed>) = 4 ./strace-static-x86_64: Process 12391 attached ./strace-static-x86_64: Process 12392 attached [pid 12389] setpgid(0, 0 [pid 12390] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12388] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12391 [pid 12392] set_robust_list(0x5555686ec660, 24 [pid 12391] set_robust_list(0x5555686ec660, 24 [pid 12390] <... prctl resumed>) = 0 [pid 12389] <... setpgid resumed>) = 0 [pid 12392] <... set_robust_list resumed>) = 0 [pid 12391] <... set_robust_list resumed>) = 0 [pid 12390] setpgid(0, 0 [pid 12389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12388] <... bpf resumed>) = 5 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12392 [pid 12392] chdir("./1481" [pid 12390] <... setpgid resumed>) = 0 [pid 12390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12388] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12392] <... chdir resumed>) = 0 [pid 12389] <... openat resumed>) = 3 [pid 12388] <... bpf resumed>) = 6 [pid 12392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12391] chdir("./1416" [pid 12390] <... openat resumed>) = 3 [pid 12389] write(3, "1000", 4 [pid 12392] <... prctl resumed>) = 0 [pid 12391] <... chdir resumed>) = 0 [pid 12390] write(3, "1000", 4 [pid 12389] <... write resumed>) = 4 [pid 12388] exit_group(0 [pid 12392] setpgid(0, 0 [pid 12391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12390] <... write resumed>) = 4 [pid 12389] close(3 [pid 12388] <... exit_group resumed>) = ? [pid 12392] <... setpgid resumed>) = 0 [pid 12391] <... prctl resumed>) = 0 [pid 12390] close(3 [pid 12389] <... close resumed>) = 0 [pid 12392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12391] setpgid(0, 0 [pid 12390] <... close resumed>) = 0 [pid 12389] symlink("/dev/binderfs", "./binderfs" [pid 12391] <... setpgid resumed>) = 0 [pid 12390] symlink("/dev/binderfs", "./binderfs" [pid 12389] <... symlink resumed>) = 0 [pid 12392] <... openat resumed>) = 3 [pid 12391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12390] <... symlink resumed>) = 0 [pid 12388] +++ exited with 0 +++ [pid 12389] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12392] write(3, "1000", 4 [pid 12391] <... openat resumed>) = 3 [pid 12389] <... bpf resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12388, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12390] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12392] <... write resumed>) = 4 [pid 12391] write(3, "1000", 4 [pid 12389] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12392] close(3 [pid 12391] <... write resumed>) = 4 [pid 12390] <... bpf resumed>) = 3 [pid 12392] <... close resumed>) = 0 [pid 12391] close(3 [pid 12392] symlink("/dev/binderfs", "./binderfs" [pid 12391] <... close resumed>) = 0 [pid 12390] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12389] <... bpf resumed>) = 4 [pid 5068] umount2("./1459", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12392] <... symlink resumed>) = 0 [pid 12391] symlink("/dev/binderfs", "./binderfs" [pid 12390] <... bpf resumed>) = 4 [pid 12389] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12392] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12391] <... symlink resumed>) = 0 [pid 12390] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] openat(AT_FDCWD, "./1459", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12389] <... bpf resumed>) = 5 [pid 12392] <... bpf resumed>) = 3 [pid 12392] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12391] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 12392] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12391] <... bpf resumed>) = 3 [pid 12390] <... bpf resumed>) = 5 [pid 12389] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] newfstatat(3, "", [pid 12392] <... bpf resumed>) = 5 [pid 12391] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12390] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] getdents64(3, [pid 12392] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12391] <... bpf resumed>) = 4 [pid 5068] umount2("./1459/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1459/binderfs", [pid 12392] <... bpf resumed>) = 6 [pid 12391] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12390] <... bpf resumed>) = 6 [pid 12389] <... bpf resumed>) = 6 [pid 12392] exit_group(0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12392] <... exit_group resumed>) = ? [pid 12390] exit_group(0 [pid 12389] exit_group(0 [pid 5068] unlink("./1459/binderfs" [pid 12392] +++ exited with 0 +++ [pid 12391] <... bpf resumed>) = 5 [pid 12390] <... exit_group resumed>) = ? [pid 12389] <... exit_group resumed>) = ? [pid 5068] <... unlink resumed>) = 0 [pid 12391] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12391] exit_group(0) = ? [pid 12391] +++ exited with 0 +++ [pid 12390] +++ exited with 0 +++ [pid 12389] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12392, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12390, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12391, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12389, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] close(3 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... close resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./1416", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./1459") = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./1460", 0777 [pid 5071] umount2("./1495", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1481", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./1416", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./1495", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1481", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1441", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12393 attached [pid 5071] umount2("./1495/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(3, "", [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12393 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 12393] set_robust_list(0x5555686ec660, 24 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1441", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12393] <... set_robust_list resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1495/binderfs", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12393] chdir("./1460" [pid 5071] unlink("./1495/binderfs" [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./1416/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12393] <... chdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12393] <... prctl resumed>) = 0 [pid 5069] getdents64(3, [pid 5066] newfstatat(AT_FDCWD, "./1416/binderfs", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12393] setpgid(0, 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5066] unlink("./1416/binderfs" [pid 5071] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... close resumed>) = 0 [pid 12393] <... setpgid resumed>) = 0 [pid 5071] rmdir("./1495" [pid 5069] umount2("./1481/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... unlink resumed>) = 0 [pid 12393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1496", 0777 [pid 12393] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1441/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5069] newfstatat(AT_FDCWD, "./1481/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12393] write(3, "1000", 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1441/binderfs", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12393] <... write resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] unlink("./1481/binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] close(3 [pid 12393] close(3 [pid 5067] unlink("./1441/binderfs" [pid 5066] <... close resumed>) = 0 [pid 12393] <... close resumed>) = 0 [pid 12393] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 5066] rmdir("./1416" [pid 12393] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... unlink resumed>) = 0 [pid 12393] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12394 attached [pid 12394] set_robust_list(0x5555686ec660, 24 [pid 12393] <... bpf resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12394 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 12393] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 5067] close(3 [pid 5066] mkdir("./1417", 0777 [pid 12394] <... set_robust_list resumed>) = 0 [pid 12393] <... bpf resumed>) = 4 [pid 5069] rmdir("./1481" [pid 5067] <... close resumed>) = 0 [pid 12394] chdir("./1496" [pid 5066] <... mkdir resumed>) = 0 [pid 12394] <... chdir resumed>) = 0 [pid 12394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12393] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12394] setpgid(0, 0 [pid 5067] rmdir("./1441" [pid 12394] <... setpgid resumed>) = 0 [pid 12393] <... bpf resumed>) = 5 ./strace-static-x86_64: Process 12395 attached [pid 5069] mkdir("./1482", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 12395] set_robust_list(0x5555686ec660, 24 [pid 5069] <... mkdir resumed>) = 0 [pid 12394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] mkdir("./1442", 0777 [pid 12395] <... set_robust_list resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12395 [pid 12395] chdir("./1417" [pid 12394] <... openat resumed>) = 3 [pid 12393] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... mkdir resumed>) = 0 [pid 12395] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 12396 attached [pid 12395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12394] write(3, "1000", 4 [pid 12396] set_robust_list(0x5555686ec660, 24 [pid 12395] <... prctl resumed>) = 0 [pid 12394] <... write resumed>) = 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12396 [pid 12393] <... bpf resumed>) = 6 [pid 12396] <... set_robust_list resumed>) = 0 [pid 12395] setpgid(0, 0 [pid 12394] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12396] chdir("./1482" [pid 12393] exit_group(0 [pid 12396] <... chdir resumed>) = 0 [pid 12395] <... setpgid resumed>) = 0 [pid 12394] <... close resumed>) = 0 [pid 12396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12394] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12397 attached [pid 12396] <... prctl resumed>) = 0 [pid 12393] <... exit_group resumed>) = ? [pid 12397] set_robust_list(0x5555686ec660, 24 [pid 12396] setpgid(0, 0 [pid 12395] <... openat resumed>) = 3 [pid 12394] <... symlink resumed>) = 0 [pid 12397] <... set_robust_list resumed>) = 0 [pid 12396] <... setpgid resumed>) = 0 [pid 12397] chdir("./1442" [pid 12396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12395] write(3, "1000", 4 [pid 12394] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12393] +++ exited with 0 +++ [pid 12397] <... chdir resumed>) = 0 [pid 12395] <... write resumed>) = 4 [pid 12394] <... bpf resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12393, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12397 [pid 12397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12395] close(3 [pid 12394] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12397] <... prctl resumed>) = 0 [pid 12396] <... openat resumed>) = 3 [pid 12395] <... close resumed>) = 0 [pid 12397] setpgid(0, 0 [pid 12396] write(3, "1000", 4 [pid 12395] symlink("/dev/binderfs", "./binderfs" [pid 12394] <... bpf resumed>) = 4 [pid 12397] <... setpgid resumed>) = 0 [pid 12395] <... symlink resumed>) = 0 [pid 12396] <... write resumed>) = 4 [pid 12395] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12394] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12396] close(3) = 0 [pid 12397] <... openat resumed>) = 3 [pid 12396] symlink("/dev/binderfs", "./binderfs" [pid 12395] <... bpf resumed>) = 3 [pid 12394] <... bpf resumed>) = 5 [pid 5068] umount2("./1460", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12395] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12397] write(3, "1000", 4 [pid 12396] <... symlink resumed>) = 0 [pid 12397] <... write resumed>) = 4 [pid 12397] close(3) = 0 [pid 12397] symlink("/dev/binderfs", "./binderfs" [pid 12395] <... bpf resumed>) = 4 [pid 12394] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12396] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12395] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] openat(AT_FDCWD, "./1460", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12397] <... symlink resumed>) = 0 [pid 12396] <... bpf resumed>) = 3 [pid 12395] <... bpf resumed>) = 5 [pid 12394] <... bpf resumed>) = 6 [pid 5068] <... openat resumed>) = 3 [pid 12397] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12396] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12397] <... bpf resumed>) = 3 [pid 12395] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12394] exit_group(0 [pid 5068] newfstatat(3, "", [pid 12397] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12396] <... bpf resumed>) = 4 [pid 12395] <... bpf resumed>) = 6 [pid 12394] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12397] <... bpf resumed>) = 4 [pid 12396] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12395] exit_group(0 [pid 12397] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12395] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 12397] <... bpf resumed>) = 5 [pid 12396] <... bpf resumed>) = 5 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1460/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1460/binderfs", [pid 12397] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12396] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1460/binderfs") = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1460") = 0 [pid 5068] mkdir("./1461", 0777) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12395] +++ exited with 0 +++ [pid 12394] +++ exited with 0 +++ ./strace-static-x86_64: Process 12398 attached [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12394, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12395, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12398] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12398 [pid 12398] <... set_robust_list resumed>) = 0 [pid 12398] chdir("./1461") = 0 [pid 5066] umount2("./1417", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1417", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12398] setpgid(0, 0 [pid 5071] umount2("./1496", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12397] <... bpf resumed>) = 6 [pid 12398] <... setpgid resumed>) = 0 [pid 12396] <... bpf resumed>) = 6 [pid 5066] newfstatat(3, "", [pid 12398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12397] exit_group(0 [pid 12396] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "./1496", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12398] <... openat resumed>) = 3 [pid 12397] <... exit_group resumed>) = ? [pid 12396] <... exit_group resumed>) = ? [pid 5071] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 12398] write(3, "1000", 4 [pid 5071] newfstatat(3, "", [pid 12398] <... write resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12398] close(3 [pid 5071] umount2("./1496/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12398] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12398] symlink("/dev/binderfs", "./binderfs" [pid 12397] +++ exited with 0 +++ [pid 12396] +++ exited with 0 +++ [pid 5066] umount2("./1417/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./1496/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1496/binderfs" [pid 12398] <... symlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12396, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 12398] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12397, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] newfstatat(AT_FDCWD, "./1417/binderfs", [pid 12398] <... bpf resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5067] umount2("./1442", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12398] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1496" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./1417/binderfs" [pid 12398] <... bpf resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./1442", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12398] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1497", 0777 [pid 5069] umount2("./1482", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(3, "", [pid 5066] <... unlink resumed>) = 0 [pid 12398] <... bpf resumed>) = 5 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12398] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1482", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12398] <... bpf resumed>) = 6 [pid 5069] newfstatat(3, "", [pid 5067] umount2("./1442/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12398] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5067] newfstatat(AT_FDCWD, "./1442/binderfs", [pid 12398] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12399 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12399 [pid 5066] close(3 [pid 12399] set_robust_list(0x5555686ec660, 24) = 0 [pid 5066] <... close resumed>) = 0 [pid 12399] chdir("./1497" [pid 12398] +++ exited with 0 +++ [pid 5069] umount2("./1482/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1442/binderfs" [pid 5066] rmdir("./1417" [pid 12399] <... chdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 12399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12398, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12399] <... prctl resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... rmdir resumed>) = 0 [pid 12399] setpgid(0, 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] mkdir("./1418", 0777 [pid 5069] newfstatat(AT_FDCWD, "./1482/binderfs", [pid 5067] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] unlink("./1482/binderfs" [pid 5067] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12399] <... setpgid resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] umount2("./1461", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1442" [pid 5066] <... mkdir resumed>) = 0 [pid 12399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] close(3) = 0 [pid 5069] rmdir("./1482"./strace-static-x86_64: Process 12400 attached [pid 12399] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./1461", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] mkdir("./1443", 0777 [pid 12400] set_robust_list(0x5555686ec660, 24 [pid 12399] write(3, "1000", 4 [pid 5069] <... rmdir resumed>) = 0 [pid 12400] <... set_robust_list resumed>) = 0 [pid 12399] <... write resumed>) = 4 [pid 5069] mkdir("./1483", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12400 [pid 12400] chdir("./1418" [pid 12399] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1461/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12401 attached [pid 12399] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1461/binderfs", [pid 12401] set_robust_list(0x5555686ec660, 24 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12401] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 12402 attached [pid 12401] chdir("./1483" [pid 12400] <... chdir resumed>) = 0 [pid 12399] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12401 [pid 5068] unlink("./1461/binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12402 [pid 12402] set_robust_list(0x5555686ec660, 24 [pid 12400] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12402] <... set_robust_list resumed>) = 0 [pid 12400] <... prctl resumed>) = 0 [pid 12402] chdir("./1443" [pid 12401] <... chdir resumed>) = 0 [pid 12400] setpgid(0, 0 [pid 12399] <... symlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12402] <... chdir resumed>) = 0 [pid 12401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12400] <... setpgid resumed>) = 0 [pid 12399] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12401] <... prctl resumed>) = 0 [pid 12400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] getdents64(3, [pid 12402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12401] setpgid(0, 0 [pid 12399] <... bpf resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12402] <... prctl resumed>) = 0 [pid 12401] <... setpgid resumed>) = 0 [pid 12400] <... openat resumed>) = 3 [pid 12399] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12402] setpgid(0, 0 [pid 12400] write(3, "1000", 4 [pid 5068] close(3 [pid 12399] <... bpf resumed>) = 4 [pid 12401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12400] <... write resumed>) = 4 [pid 12402] <... setpgid resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12399] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12400] close(3 [pid 5068] rmdir("./1461" [pid 12402] <... openat resumed>) = 3 [pid 12401] <... openat resumed>) = 3 [pid 12400] <... close resumed>) = 0 [pid 12399] <... bpf resumed>) = 5 [pid 5068] <... rmdir resumed>) = 0 [pid 12400] symlink("/dev/binderfs", "./binderfs" [pid 12399] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] mkdir("./1462", 0777 [pid 12402] write(3, "1000", 4 [pid 12401] write(3, "1000", 4 [pid 12400] <... symlink resumed>) = 0 [pid 12402] <... write resumed>) = 4 [pid 12401] <... write resumed>) = 4 [pid 12402] close(3 [pid 12401] close(3 [pid 12399] <... bpf resumed>) = 6 [pid 12402] <... close resumed>) = 0 [pid 12401] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12402] symlink("/dev/binderfs", "./binderfs" [pid 12401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12400] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12399] exit_group(0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12402] <... symlink resumed>) = 0 [pid 12401] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12400] <... bpf resumed>) = 3 [pid 12399] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12403 attached [pid 12402] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12401] <... bpf resumed>) = 3 [pid 12400] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12403] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12403 [pid 12403] <... set_robust_list resumed>) = 0 [pid 12399] +++ exited with 0 +++ [pid 12402] <... bpf resumed>) = 3 [pid 12403] chdir("./1462" [pid 12401] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12400] <... bpf resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12399, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12403] <... chdir resumed>) = 0 [pid 12402] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12401] <... bpf resumed>) = 4 [pid 12400] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12401] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12403] <... prctl resumed>) = 0 [pid 12402] <... bpf resumed>) = 4 [pid 12403] setpgid(0, 0) = 0 [pid 12402] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12401] <... bpf resumed>) = 5 [pid 12400] <... bpf resumed>) = 5 [pid 12402] <... bpf resumed>) = 5 [pid 12401] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12400] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12403] <... openat resumed>) = 3 [pid 12402] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12400] <... bpf resumed>) = 6 [pid 12403] write(3, "1000", 4 [pid 12402] <... bpf resumed>) = 6 [pid 12401] <... bpf resumed>) = 6 [pid 5071] umount2("./1497", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12403] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12403] close(3 [pid 5071] openat(AT_FDCWD, "./1497", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12403] <... close resumed>) = 0 [pid 12401] exit_group(0 [pid 12403] symlink("/dev/binderfs", "./binderfs" [pid 12402] exit_group(0 [pid 12400] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 12401] <... exit_group resumed>) = ? [pid 5071] newfstatat(3, "", [pid 12403] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12402] <... exit_group resumed>) = ? [pid 12400] <... exit_group resumed>) = ? [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1497/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12403] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12401] +++ exited with 0 +++ [pid 12403] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12403] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1497/binderfs", [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12401, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12403] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12403] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12402] +++ exited with 0 +++ [pid 12400] +++ exited with 0 +++ [pid 5071] unlink("./1497/binderfs") = 0 [pid 5069] umount2("./1483", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12402, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12400, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12403] <... bpf resumed>) = 5 [pid 5071] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] openat(AT_FDCWD, "./1483", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] close(3 [pid 5069] <... openat resumed>) = 3 [pid 12403] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... close resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5067] umount2("./1443", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] rmdir("./1497" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5067] openat(AT_FDCWD, "./1443", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./1418", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] mkdir("./1498", 0777 [pid 5067] newfstatat(3, "", [pid 5069] umount2("./1483/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./1418", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] newfstatat(AT_FDCWD, "./1483/binderfs", [pid 5067] umount2("./1443/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1483/binderfs"./strace-static-x86_64: Process 12404 attached [pid 12403] <... bpf resumed>) = 6 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 12404] set_robust_list(0x5555686ec660, 24 [pid 12403] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12404 [pid 5069] <... unlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1443/binderfs", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12404] <... set_robust_list resumed>) = 0 [pid 12403] <... exit_group resumed>) = ? [pid 5069] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(3, [pid 12404] chdir("./1498" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./1443/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12404] <... chdir resumed>) = 0 [pid 12403] +++ exited with 0 +++ [pid 5069] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5066] umount2("./1418/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... close resumed>) = 0 [pid 12404] <... prctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] rmdir("./1483" [pid 12404] setpgid(0, 0 [pid 5066] newfstatat(AT_FDCWD, "./1418/binderfs", [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12403, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] umount2("./1462", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1462", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", [pid 5067] getdents64(3, [pid 12404] <... setpgid resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] getdents64(3, [pid 12404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] unlink("./1418/binderfs" [pid 5067] close(3 [pid 5068] umount2("./1462/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1462/binderfs", [pid 12404] <... openat resumed>) = 3 [pid 5069] mkdir("./1484", 0777 [pid 5067] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12404] write(3, "1000", 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] rmdir("./1443" [pid 5066] getdents64(3, [pid 12404] <... write resumed>) = 4 [pid 5069] <... mkdir resumed>) = 0 [pid 12404] close(3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] unlink("./1462/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12404] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1444", 0777 [pid 5068] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12405 attached [pid 12404] symlink("/dev/binderfs", "./binderfs" [pid 5068] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 12405] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12405 [pid 12405] <... set_robust_list resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] rmdir("./1418" [pid 12404] <... symlink resumed>) = 0 [pid 12405] chdir("./1484" [pid 5068] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 12404] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12406 attached [pid 12405] <... chdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] mkdir("./1419", 0777 [pid 12406] set_robust_list(0x5555686ec660, 24 [pid 12405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12404] <... bpf resumed>) = 3 [pid 5068] rmdir("./1462" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12406 [pid 12406] <... set_robust_list resumed>) = 0 [pid 12405] <... prctl resumed>) = 0 [pid 12404] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... mkdir resumed>) = 0 [pid 12405] setpgid(0, 0 [pid 12406] chdir("./1444" [pid 12405] <... setpgid resumed>) = 0 [pid 12404] <... bpf resumed>) = 4 [pid 12404] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12406] <... chdir resumed>) = 0 [pid 12405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12404] <... bpf resumed>) = 5 [pid 5068] <... rmdir resumed>) = 0 [pid 12404] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12405] <... openat resumed>) = 3 [pid 12404] <... bpf resumed>) = 6 [pid 12404] exit_group(0./strace-static-x86_64: Process 12407 attached [pid 12406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12405] write(3, "1000", 4 [pid 5068] mkdir("./1463", 0777 [pid 12406] <... prctl resumed>) = 0 [pid 12404] <... exit_group resumed>) = ? [pid 12407] set_robust_list(0x5555686ec660, 24 [pid 12406] setpgid(0, 0 [pid 12405] <... write resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 12406] <... setpgid resumed>) = 0 [pid 12407] <... set_robust_list resumed>) = 0 [pid 12406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12405] close(3 [pid 12404] +++ exited with 0 +++ [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12407 [pid 12407] chdir("./1419" [pid 12406] <... openat resumed>) = 3 [pid 12405] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12404, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12408 attached [pid 12407] <... chdir resumed>) = 0 [pid 12406] write(3, "1000", 4 [pid 12405] symlink("/dev/binderfs", "./binderfs" [pid 12408] set_robust_list(0x5555686ec660, 24 [pid 12407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12406] <... write resumed>) = 4 [pid 12405] <... symlink resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12408 [pid 12408] <... set_robust_list resumed>) = 0 [pid 12407] <... prctl resumed>) = 0 [pid 12406] close(3 [pid 12407] setpgid(0, 0 [pid 12405] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12406] <... close resumed>) = 0 [pid 5071] umount2("./1498", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12408] chdir("./1463" [pid 12406] symlink("/dev/binderfs", "./binderfs" [pid 12407] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12408] <... chdir resumed>) = 0 [pid 12407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12406] <... symlink resumed>) = 0 [pid 12405] <... bpf resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1498", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12406] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12405] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 12407] <... openat resumed>) = 3 [pid 12408] <... prctl resumed>) = 0 [pid 12406] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12408] setpgid(0, 0 [pid 12407] write(3, "1000", 4 [pid 12406] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12405] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12408] <... setpgid resumed>) = 0 [pid 12407] <... write resumed>) = 4 [pid 5071] getdents64(3, [pid 12407] close(3 [pid 12406] <... bpf resumed>) = 4 [pid 12405] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12407] <... close resumed>) = 0 [pid 12406] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12408] <... openat resumed>) = 3 [pid 12407] symlink("/dev/binderfs", "./binderfs" [pid 12405] <... bpf resumed>) = 5 [pid 5071] umount2("./1498/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1498/binderfs", [pid 12408] write(3, "1000", 4 [pid 12406] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1498/binderfs" [pid 12408] <... write resumed>) = 4 [pid 12407] <... symlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 12406] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 12408] close(3 [pid 12407] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12405] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12408] <... close resumed>) = 0 [pid 12407] <... bpf resumed>) = 3 [pid 12406] <... bpf resumed>) = 6 [pid 12405] <... bpf resumed>) = 6 [pid 5071] close(3 [pid 12408] symlink("/dev/binderfs", "./binderfs" [pid 12407] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12406] exit_group(0 [pid 5071] <... close resumed>) = 0 [pid 12405] exit_group(0 [pid 12408] <... symlink resumed>) = 0 [pid 12406] <... exit_group resumed>) = ? [pid 12407] <... bpf resumed>) = 4 [pid 12405] <... exit_group resumed>) = ? [pid 5071] rmdir("./1498") = 0 [pid 12407] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12408] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12407] <... bpf resumed>) = 5 [pid 5071] mkdir("./1499", 0777 [pid 12408] <... bpf resumed>) = 3 [pid 12408] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12407] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 12408] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12409 attached [pid 12408] <... bpf resumed>) = 5 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12409 [pid 12409] set_robust_list(0x5555686ec660, 24 [pid 12408] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12409] <... set_robust_list resumed>) = 0 [pid 12409] chdir("./1499") = 0 [pid 12409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12406] +++ exited with 0 +++ [pid 12405] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12405, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12409] setpgid(0, 0 [pid 12407] <... bpf resumed>) = 6 [pid 12408] <... bpf resumed>) = 6 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12406, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12409] <... setpgid resumed>) = 0 [pid 12407] exit_group(0 [pid 12409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12408] exit_group(0 [pid 12407] <... exit_group resumed>) = ? [pid 12408] <... exit_group resumed>) = ? [pid 12408] +++ exited with 0 +++ [pid 5067] umount2("./1444", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1484", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12409] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12408, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12409] write(3, "1000", 4 [pid 5067] openat(AT_FDCWD, "./1444", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12409] <... write resumed>) = 4 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5069] openat(AT_FDCWD, "./1484", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 12409] close(3 [pid 5069] <... openat resumed>) = 3 [pid 12409] <... close resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 12409] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12409] <... symlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1484/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12409] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 12407] +++ exited with 0 +++ [pid 5068] umount2("./1463", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./1484/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12407, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12409] <... bpf resumed>) = 3 [pid 5069] unlink("./1484/binderfs" [pid 5068] openat(AT_FDCWD, "./1463", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1444/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12409] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... restart_syscall resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5066] umount2("./1419", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(AT_FDCWD, "./1444/binderfs", [pid 12409] <... bpf resumed>) = 4 [pid 5068] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] openat(AT_FDCWD, "./1419", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12409] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] unlink("./1444/binderfs" [pid 5066] <... openat resumed>) = 3 [pid 12409] <... bpf resumed>) = 5 [pid 5069] rmdir("./1484" [pid 5068] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12409] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] umount2("./1463/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12409] <... bpf resumed>) = 6 [pid 5069] mkdir("./1485", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 5066] getdents64(3, [pid 5069] <... mkdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1463/binderfs", [pid 5067] <... close resumed>) = 0 [pid 12409] exit_group(0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12409] <... exit_group resumed>) = ? [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] rmdir("./1444" [pid 5066] umount2("./1419/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12409] +++ exited with 0 +++ [pid 5068] unlink("./1463/binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12409, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12410 attached [pid 12410] set_robust_list(0x5555686ec660, 24) = 0 [pid 12410] chdir("./1485" [pid 5067] mkdir("./1445", 0777 [pid 5068] <... unlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1419/binderfs", [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12410 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12410] <... chdir resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5066] unlink("./1419/binderfs" [pid 12410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12410] setpgid(0, 0 [pid 5068] close(3 [pid 5066] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12411 attached [pid 12410] <... setpgid resumed>) = 0 [pid 5071] umount2("./1499", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 12411] set_robust_list(0x5555686ec660, 24 [pid 12410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5071] openat(AT_FDCWD, "./1499", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12411] <... set_robust_list resumed>) = 0 [pid 12410] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5068] rmdir("./1463" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12411 [pid 5066] close(3 [pid 12411] chdir("./1445" [pid 5071] newfstatat(3, "", [pid 12411] <... chdir resumed>) = 0 [pid 12410] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12410] <... write resumed>) = 4 [pid 5071] getdents64(3, [pid 5066] rmdir("./1419" [pid 12411] <... prctl resumed>) = 0 [pid 12410] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] mkdir("./1464", 0777 [pid 12410] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12411] setpgid(0, 0 [pid 12410] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./1499/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1420", 0777 [pid 12411] <... setpgid resumed>) = 0 [pid 12410] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1499/binderfs", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12410] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12412 attached [pid 12411] <... openat resumed>) = 3 [pid 12412] set_robust_list(0x5555686ec660, 24 [pid 12411] write(3, "1000", 4 [pid 12410] <... bpf resumed>) = 3 [pid 5071] unlink("./1499/binderfs" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12412 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12412] <... set_robust_list resumed>) = 0 [pid 12411] <... write resumed>) = 4 ./strace-static-x86_64: Process 12413 attached [pid 12412] chdir("./1464" [pid 12411] close(3 [pid 12410] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 12413] set_robust_list(0x5555686ec660, 24 [pid 12412] <... chdir resumed>) = 0 [pid 12411] <... close resumed>) = 0 [pid 12411] symlink("/dev/binderfs", "./binderfs" [pid 12410] <... bpf resumed>) = 4 [pid 12413] <... set_robust_list resumed>) = 0 [pid 12412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 12412] <... prctl resumed>) = 0 [pid 12413] chdir("./1420" [pid 12412] setpgid(0, 0 [pid 12411] <... symlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12413 [pid 12413] <... chdir resumed>) = 0 [pid 12412] <... setpgid resumed>) = 0 [pid 12411] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12410] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] close(3 [pid 12413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12411] <... bpf resumed>) = 3 [pid 12413] <... prctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12413] setpgid(0, 0 [pid 5071] rmdir("./1499" [pid 12411] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12410] <... bpf resumed>) = 5 [pid 12412] <... openat resumed>) = 3 [pid 12413] <... setpgid resumed>) = 0 [pid 12413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 12411] <... bpf resumed>) = 4 [pid 12412] write(3, "1000", 4) = 4 [pid 12411] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12410] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] mkdir("./1500", 0777 [pid 12413] <... openat resumed>) = 3 [pid 12412] close(3) = 0 [pid 12412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12413] write(3, "1000", 4 [pid 12410] <... bpf resumed>) = 6 [pid 12413] <... write resumed>) = 4 [pid 12411] <... bpf resumed>) = 5 [pid 12410] exit_group(0 [pid 12413] close(3 [pid 12411] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 12411] <... bpf resumed>) = 6 [pid 12413] <... close resumed>) = 0 [pid 12412] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12410] <... exit_group resumed>) = ? [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12413] symlink("/dev/binderfs", "./binderfs" [pid 12411] exit_group(0) = ? [pid 12413] <... symlink resumed>) = 0 [pid 12411] +++ exited with 0 +++ [pid 12412] <... bpf resumed>) = 3 ./strace-static-x86_64: Process 12414 attached [pid 12413] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12412] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12411, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12414] set_robust_list(0x5555686ec660, 24 [pid 12413] <... bpf resumed>) = 3 [pid 12410] +++ exited with 0 +++ [pid 12412] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12414 [pid 12414] <... set_robust_list resumed>) = 0 [pid 12413] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12412] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12414] chdir("./1500" [pid 12413] <... bpf resumed>) = 4 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12410, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12414] <... chdir resumed>) = 0 [pid 12413] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] umount2("./1445", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12414] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1485", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12414] <... prctl resumed>) = 0 [pid 12413] <... bpf resumed>) = 5 [pid 12412] <... bpf resumed>) = 5 [pid 5067] openat(AT_FDCWD, "./1445", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12414] setpgid(0, 0) = 0 [pid 12413] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12412] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 12412] <... bpf resumed>) = 6 [pid 5069] openat(AT_FDCWD, "./1485", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12413] <... bpf resumed>) = 6 [pid 12412] exit_group(0 [pid 5069] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12414] <... openat resumed>) = 3 [pid 12413] exit_group(0 [pid 12412] <... exit_group resumed>) = ? [pid 5069] newfstatat(3, "", [pid 12413] <... exit_group resumed>) = ? [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12414] write(3, "1000", 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1485/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 12414] <... write resumed>) = 4 [pid 12414] close(3) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12414] symlink("/dev/binderfs", "./binderfs" [pid 5069] newfstatat(AT_FDCWD, "./1485/binderfs", [pid 5067] umount2("./1445/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12414] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12414] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(AT_FDCWD, "./1445/binderfs", [pid 12414] <... bpf resumed>) = 3 [pid 5069] unlink("./1485/binderfs" [pid 12414] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12414] <... bpf resumed>) = 4 [pid 5069] <... unlink resumed>) = 0 [pid 5067] unlink("./1445/binderfs" [pid 5069] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 12414] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 12414] <... bpf resumed>) = 5 [pid 5069] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12414] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... close resumed>) = 0 [pid 5067] close(3 [pid 5069] rmdir("./1485" [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1445" [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1446", 0777 [pid 12413] +++ exited with 0 +++ [pid 12412] +++ exited with 0 +++ [pid 5069] mkdir("./1486", 0777 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12412, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... mkdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12413, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1464", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] openat(AT_FDCWD, "./1464", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./1420", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12416 attached ./strace-static-x86_64: Process 12415 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12415 [pid 5068] <... openat resumed>) = 3 [pid 12416] set_robust_list(0x5555686ec660, 24 [pid 12414] <... bpf resumed>) = 6 [pid 5068] newfstatat(3, "", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12416 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12416] <... set_robust_list resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12416] chdir("./1446" [pid 5068] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1420", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12416] <... chdir resumed>) = 0 [pid 12415] set_robust_list(0x5555686ec660, 24 [pid 12414] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... openat resumed>) = 3 [pid 12415] <... set_robust_list resumed>) = 0 [pid 12414] <... exit_group resumed>) = ? [pid 12416] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] umount2("./1464/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 12416] <... prctl resumed>) = 0 [pid 12415] chdir("./1486" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12416] setpgid(0, 0 [pid 5068] newfstatat(AT_FDCWD, "./1464/binderfs", [pid 5066] getdents64(3, [pid 12416] <... setpgid resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] unlink("./1464/binderfs" [pid 5066] umount2("./1420/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12414] +++ exited with 0 +++ [pid 12415] <... chdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12415] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12414, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12416] write(3, "1000", 4 [pid 12415] <... prctl resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] newfstatat(AT_FDCWD, "./1420/binderfs", [pid 12416] <... write resumed>) = 4 [pid 5071] umount2("./1500", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12416] close(3 [pid 12415] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12415] <... setpgid resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1500", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12416] <... close resumed>) = 0 [pid 5068] close(3 [pid 5066] unlink("./1420/binderfs" [pid 12416] symlink("/dev/binderfs", "./binderfs" [pid 12415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12416] <... symlink resumed>) = 0 [pid 5068] rmdir("./1464" [pid 5071] newfstatat(3, "", [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12415] <... openat resumed>) = 3 [pid 12416] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12415] write(3, "1000", 4 [pid 5068] mkdir("./1465", 0777 [pid 5071] getdents64(3, [pid 12416] <... bpf resumed>) = 3 [pid 12415] <... write resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12415] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12416] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1500/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3./strace-static-x86_64: Process 12417 attached [pid 12416] <... bpf resumed>) = 4 [pid 12415] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 12417] set_robust_list(0x5555686ec660, 24 [pid 12416] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(AT_FDCWD, "./1500/binderfs", [pid 5066] rmdir("./1420" [pid 12417] <... set_robust_list resumed>) = 0 [pid 12416] <... bpf resumed>) = 5 [pid 12415] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12417 [pid 5066] <... rmdir resumed>) = 0 [pid 12417] chdir("./1465" [pid 12415] <... symlink resumed>) = 0 [pid 5071] unlink("./1500/binderfs" [pid 12417] <... chdir resumed>) = 0 [pid 12416] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... unlink resumed>) = 0 [pid 5066] mkdir("./1421", 0777 [pid 12417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12416] <... bpf resumed>) = 6 [pid 12415] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 12417] <... prctl resumed>) = 0 [pid 12416] exit_group(0 [pid 12415] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12417] setpgid(0, 0 [pid 12416] <... exit_group resumed>) = ? [pid 12415] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12417] <... setpgid resumed>) = 0 [pid 5071] close(3 [pid 12415] <... bpf resumed>) = 4 [pid 12415] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12418 attached [pid 12417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... close resumed>) = 0 [pid 12418] set_robust_list(0x5555686ec660, 24 [pid 12416] +++ exited with 0 +++ [pid 12415] <... bpf resumed>) = 5 [pid 5071] rmdir("./1500" [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12418 [pid 12418] <... set_robust_list resumed>) = 0 [pid 12417] <... openat resumed>) = 3 [pid 12418] chdir("./1421" [pid 12415] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12416, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12418] <... chdir resumed>) = 0 [pid 12417] write(3, "1000", 4 [pid 5071] mkdir("./1501", 0777 [pid 12418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12415] <... bpf resumed>) = 6 [pid 12418] <... prctl resumed>) = 0 [pid 12417] <... write resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 12418] setpgid(0, 0 [pid 12417] close(3 [pid 12415] exit_group(0 [pid 5067] umount2("./1446", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12418] <... setpgid resumed>) = 0 [pid 12417] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12417] symlink("/dev/binderfs", "./binderfs" [pid 12415] <... exit_group resumed>) = ? [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12418] <... openat resumed>) = 3 [pid 12417] <... symlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1446", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12418] write(3, "1000", 4) = 4 [pid 12418] close(3) = 0 [pid 12417] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12419 attached [pid 5067] <... openat resumed>) = 3 [pid 12419] set_robust_list(0x5555686ec660, 24 [pid 12418] symlink("/dev/binderfs", "./binderfs" [pid 12417] <... bpf resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12419 [pid 5067] newfstatat(3, "", [pid 12419] <... set_robust_list resumed>) = 0 [pid 12418] <... symlink resumed>) = 0 [pid 12417] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12415] +++ exited with 0 +++ [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12419] chdir("./1501" [pid 12418] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12417] <... bpf resumed>) = 4 [pid 5067] getdents64(3, [pid 12419] <... chdir resumed>) = 0 [pid 12418] <... bpf resumed>) = 3 [pid 12417] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12415, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12419] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12418] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12417] <... bpf resumed>) = 5 [pid 12419] <... prctl resumed>) = 0 [pid 12418] <... bpf resumed>) = 4 [pid 12417] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] umount2("./1446/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12419] setpgid(0, 0 [pid 12418] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12419] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12417] <... bpf resumed>) = 6 [pid 5067] newfstatat(AT_FDCWD, "./1446/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12419] <... openat resumed>) = 3 [pid 12418] <... bpf resumed>) = 5 [pid 12417] exit_group(0 [pid 5069] umount2("./1486", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1446/binderfs" [pid 12419] write(3, "1000", 4 [pid 12418] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12417] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1486", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 12419] <... write resumed>) = 4 [pid 12418] <... bpf resumed>) = 6 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12419] close(3) = 0 [pid 12418] exit_group(0 [pid 5069] newfstatat(3, "", [pid 5067] close(3 [pid 12419] symlink("/dev/binderfs", "./binderfs" [pid 12418] <... exit_group resumed>) = ? [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... close resumed>) = 0 [pid 12419] <... symlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] rmdir("./1446" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12419] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12418] +++ exited with 0 +++ [pid 12417] +++ exited with 0 +++ [pid 5067] <... rmdir resumed>) = 0 [pid 5069] umount2("./1486/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12419] <... bpf resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12418, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12419] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(AT_FDCWD, "./1486/binderfs", [pid 5067] mkdir("./1447", 0777 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12417, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] umount2("./1465", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1465", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 12419] <... bpf resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1421", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12419] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] unlink("./1486/binderfs" [pid 5068] umount2("./1465/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12419] <... bpf resumed>) = 5 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12419] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] newfstatat(AT_FDCWD, "./1465/binderfs", [pid 5066] openat(AT_FDCWD, "./1421", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12420 attached [pid 12419] <... bpf resumed>) = 6 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] unlink("./1465/binderfs" [pid 5066] newfstatat(3, "", [pid 12420] set_robust_list(0x5555686ec660, 24 [pid 12419] exit_group(0 [pid 5069] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12420 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12420] <... set_robust_list resumed>) = 0 [pid 12419] <... exit_group resumed>) = ? [pid 5069] <... close resumed>) = 0 [pid 12420] chdir("./1447" [pid 5069] rmdir("./1486" [pid 5068] getdents64(3, [pid 5066] getdents64(3, [pid 12420] <... chdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12420] setpgid(0, 0 [pid 12419] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12420] <... setpgid resumed>) = 0 [pid 5069] mkdir("./1487", 0777 [pid 5068] close(3 [pid 5066] umount2("./1421/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12419, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12420] <... openat resumed>) = 3 [pid 5071] umount2("./1501", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] rmdir("./1465" [pid 5066] newfstatat(AT_FDCWD, "./1421/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12420] write(3, "1000", 4) = 4 [pid 12420] close(3) = 0 [pid 12420] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 12421 attached [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12421] set_robust_list(0x5555686ec660, 24 [pid 12420] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12421] <... set_robust_list resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1501", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12421 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] unlink("./1421/binderfs" [pid 5071] <... openat resumed>) = 3 [pid 12421] chdir("./1487" [pid 12420] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5068] mkdir("./1466", 0777 [pid 5066] <... unlink resumed>) = 0 [pid 12421] <... chdir resumed>) = 0 [pid 12420] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12420] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 5068] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12421] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12420] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12421] setpgid(0, 0 [pid 5071] umount2("./1501/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12421] <... setpgid resumed>) = 0 [pid 12420] <... bpf resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 12421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12420] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(AT_FDCWD, "./1501/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 12422 attached [pid 12421] <... openat resumed>) = 3 [pid 5071] unlink("./1501/binderfs" [pid 5066] rmdir("./1421" [pid 12422] set_robust_list(0x5555686ec660, 24 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12422 [pid 12420] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 12422] <... set_robust_list resumed>) = 0 [pid 12421] write(3, "1000", 4 [pid 5066] <... rmdir resumed>) = 0 [pid 12422] chdir("./1466" [pid 12421] <... write resumed>) = 4 [pid 12420] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12422] <... chdir resumed>) = 0 [pid 12421] close(3 [pid 12420] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 5066] mkdir("./1422", 0777 [pid 12422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12421] <... close resumed>) = 0 [pid 12422] <... prctl resumed>) = 0 [pid 12422] setpgid(0, 0 [pid 12421] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... close resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12422] <... setpgid resumed>) = 0 [pid 12421] <... symlink resumed>) = 0 [pid 5071] rmdir("./1501" [pid 12421] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12420] +++ exited with 0 +++ [pid 5071] <... rmdir resumed>) = 0 [pid 12422] <... openat resumed>) = 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12420, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12422] write(3, "1000", 4) = 4 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12422] close(3 [pid 5071] mkdir("./1502", 0777./strace-static-x86_64: Process 12423 attached [pid 12422] <... close resumed>) = 0 [pid 12421] <... bpf resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12423 [pid 12422] symlink("/dev/binderfs", "./binderfs" [pid 12421] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12423] set_robust_list(0x5555686ec660, 24 [pid 12422] <... symlink resumed>) = 0 [pid 12421] <... bpf resumed>) = 4 [pid 5067] umount2("./1447", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12423] <... set_robust_list resumed>) = 0 [pid 12422] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12423] chdir("./1422" [pid 12421] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] openat(AT_FDCWD, "./1447", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12424 attached [pid 12422] <... bpf resumed>) = 3 [pid 12424] set_robust_list(0x5555686ec660, 24 [pid 12423] <... chdir resumed>) = 0 [pid 12422] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... openat resumed>) = 3 [pid 12424] <... set_robust_list resumed>) = 0 [pid 12423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12422] <... bpf resumed>) = 4 [pid 12421] <... bpf resumed>) = 5 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12424 [pid 5067] newfstatat(3, "", [pid 12424] chdir("./1502" [pid 12423] <... prctl resumed>) = 0 [pid 12422] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12421] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12424] <... chdir resumed>) = 0 [pid 12423] setpgid(0, 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12422] <... bpf resumed>) = 5 [pid 12424] setpgid(0, 0 [pid 12423] <... setpgid resumed>) = 0 [pid 12421] <... bpf resumed>) = 6 [pid 12424] <... setpgid resumed>) = 0 [pid 12422] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] getdents64(3, [pid 12423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12421] exit_group(0 [pid 12424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12421] <... exit_group resumed>) = ? [pid 12424] <... openat resumed>) = 3 [pid 12423] <... openat resumed>) = 3 [pid 12422] <... bpf resumed>) = 6 [pid 5067] umount2("./1447/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12424] write(3, "1000", 4) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12424] close(3 [pid 12423] write(3, "1000", 4 [pid 12424] <... close resumed>) = 0 [pid 12423] <... write resumed>) = 4 [pid 12422] exit_group(0 [pid 5067] newfstatat(AT_FDCWD, "./1447/binderfs", [pid 12424] symlink("/dev/binderfs", "./binderfs" [pid 12423] close(3 [pid 12422] <... exit_group resumed>) = ? [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12424] <... symlink resumed>) = 0 [pid 12423] <... close resumed>) = 0 [pid 5067] unlink("./1447/binderfs" [pid 12423] symlink("/dev/binderfs", "./binderfs" [pid 12424] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12423] <... symlink resumed>) = 0 [pid 12424] <... bpf resumed>) = 3 [pid 12423] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... unlink resumed>) = 0 [pid 12424] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12423] <... bpf resumed>) = 3 [pid 5067] getdents64(3, [pid 12423] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12424] <... bpf resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12424] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12423] <... bpf resumed>) = 4 [pid 5067] close(3 [pid 12423] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1447" [pid 12424] <... bpf resumed>) = 5 [pid 12423] <... bpf resumed>) = 5 [pid 12423] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... rmdir resumed>) = 0 [pid 12424] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] mkdir("./1448", 0777 [pid 12421] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12421, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12422] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12422, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... restart_syscall resumed>) = 0 [pid 5069] umount2("./1487", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1487", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12425 attached ) = 3 [pid 5068] umount2("./1466", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12425 [pid 12425] set_robust_list(0x5555686ec660, 24 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./1466", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12425] <... set_robust_list resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] newfstatat(3, "", [pid 12425] chdir("./1448" [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1466/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12425] <... chdir resumed>) = 0 [pid 5069] umount2("./1487/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] newfstatat(AT_FDCWD, "./1466/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1466/binderfs" [pid 12425] <... prctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1487/binderfs", [pid 12425] setpgid(0, 0 [pid 5068] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1466" [pid 12425] <... setpgid resumed>) = 0 [pid 5069] unlink("./1487/binderfs" [pid 12425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... rmdir resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] mkdir("./1467", 0777 [pid 12425] <... openat resumed>) = 3 [pid 5069] getdents64(3, [pid 12425] write(3, "1000", 4 [pid 5068] <... mkdir resumed>) = 0 [pid 12425] <... write resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12425] close(3 [pid 5069] close(3 [pid 12425] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... close resumed>) = 0 ./strace-static-x86_64: Process 12426 attached [pid 12425] symlink("/dev/binderfs", "./binderfs" [pid 12424] <... bpf resumed>) = 6 [pid 12423] <... bpf resumed>) = 6 [pid 5069] rmdir("./1487" [pid 12425] <... symlink resumed>) = 0 [pid 12423] exit_group(0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12426 [pid 12426] set_robust_list(0x5555686ec660, 24 [pid 12424] exit_group(0 [pid 12423] <... exit_group resumed>) = ? [pid 12426] <... set_robust_list resumed>) = 0 [pid 12425] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12424] <... exit_group resumed>) = ? [pid 5069] <... rmdir resumed>) = 0 [pid 12426] chdir("./1467" [pid 12425] <... bpf resumed>) = 3 [pid 12425] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12426] <... chdir resumed>) = 0 [pid 5069] mkdir("./1488", 0777 [pid 12426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12425] <... bpf resumed>) = 4 [pid 12426] <... prctl resumed>) = 0 [pid 12426] setpgid(0, 0 [pid 12425] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12426] <... setpgid resumed>) = 0 [pid 12426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12425] <... bpf resumed>) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12425] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12426] <... openat resumed>) = 3 [pid 12426] write(3, "1000", 4./strace-static-x86_64: Process 12427 attached ) = 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12427 [pid 12427] set_robust_list(0x5555686ec660, 24 [pid 12426] close(3 [pid 12427] <... set_robust_list resumed>) = 0 [pid 12427] chdir("./1488" [pid 12426] <... close resumed>) = 0 [pid 12427] <... chdir resumed>) = 0 [pid 12426] symlink("/dev/binderfs", "./binderfs" [pid 12427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12426] <... symlink resumed>) = 0 [pid 12427] setpgid(0, 0 [pid 12426] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12427] <... setpgid resumed>) = 0 [pid 12427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12426] <... bpf resumed>) = 3 [pid 12426] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12427] <... openat resumed>) = 3 [pid 12427] write(3, "1000", 4) = 4 [pid 12426] <... bpf resumed>) = 4 [pid 12427] close(3) = 0 [pid 12427] symlink("/dev/binderfs", "./binderfs" [pid 12426] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12424] +++ exited with 0 +++ [pid 12423] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12423, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12424, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12426] <... bpf resumed>) = 5 [pid 5071] <... restart_syscall resumed>) = 0 [pid 12427] <... symlink resumed>) = 0 [pid 12426] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12425] <... bpf resumed>) = 6 [pid 5066] umount2("./1422", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12427] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12425] exit_group(0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12427] <... bpf resumed>) = 3 [pid 12426] <... bpf resumed>) = 6 [pid 12425] <... exit_group resumed>) = ? [pid 5066] openat(AT_FDCWD, "./1422", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12427] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12426] exit_group(0 [pid 5066] <... openat resumed>) = 3 [pid 12427] <... bpf resumed>) = 4 [pid 5071] umount2("./1502", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 12426] <... exit_group resumed>) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12427] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] openat(AT_FDCWD, "./1502", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 12427] <... bpf resumed>) = 5 [pid 12426] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12425] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12426, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1422/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12425, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] newfstatat(3, "", [pid 5067] umount2("./1448", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12427] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] openat(AT_FDCWD, "./1448", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(AT_FDCWD, "./1422/binderfs", [pid 5071] getdents64(3, [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] unlink("./1422/binderfs" [pid 5071] umount2("./1502/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1467", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... unlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1502/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1448/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1448/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] openat(AT_FDCWD, "./1467", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 5071] unlink("./1502/binderfs" [pid 5068] <... openat resumed>) = 3 [pid 5067] unlink("./1448/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5067] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... close resumed>) = 0 [pid 5071] close(3 [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5066] rmdir("./1422" [pid 5071] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5071] rmdir("./1502" [pid 5068] umount2("./1467/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 5066] mkdir("./1423", 0777 [pid 5068] newfstatat(AT_FDCWD, "./1467/binderfs", [pid 5067] rmdir("./1448" [pid 5066] <... mkdir resumed>) = 0 [pid 12427] <... bpf resumed>) = 6 [pid 5071] mkdir("./1503", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5068] unlink("./1467/binderfs" [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12427] exit_group(0 [pid 5067] mkdir("./1449", 0777 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12427] <... exit_group resumed>) = ? [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12428 attached [pid 12427] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 12428] set_robust_list(0x5555686ec660, 24 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12427, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12429 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12429 [pid 12429] set_robust_list(0x5555686ec660, 24 [pid 12428] <... set_robust_list resumed>) = 0 [pid 5068] rmdir("./1467" [pid 12429] <... set_robust_list resumed>) = 0 [pid 12428] chdir("./1423" [pid 5069] umount2("./1488", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12429] chdir("./1503" [pid 5069] openat(AT_FDCWD, "./1488", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12430 attached [pid 12429] <... chdir resumed>) = 0 [pid 12428] <... chdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] mkdir("./1468", 0777 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12430 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12428 [pid 12428] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] newfstatat(3, "", [pid 12430] set_robust_list(0x5555686ec660, 24 [pid 12429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12428] <... prctl resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12428] setpgid(0, 0) = 0 [pid 5069] getdents64(3, [pid 5068] <... mkdir resumed>) = 0 [pid 12430] <... set_robust_list resumed>) = 0 [pid 12429] <... prctl resumed>) = 0 [pid 12428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12429] setpgid(0, 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1488/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12430] chdir("./1449" [pid 12429] <... setpgid resumed>) = 0 [pid 12428] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12430] <... chdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12428] <... write resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1488/binderfs", [pid 12428] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12428] <... close resumed>) = 0 [pid 12428] symlink("/dev/binderfs", "./binderfs" [pid 5069] unlink("./1488/binderfs"./strace-static-x86_64: Process 12431 attached [pid 12430] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12428] <... symlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12430] <... prctl resumed>) = 0 [pid 12429] <... openat resumed>) = 3 [pid 12431] set_robust_list(0x5555686ec660, 24) = 0 [pid 12430] setpgid(0, 0 [pid 12429] write(3, "1000", 4 [pid 12431] chdir("./1468" [pid 12430] <... setpgid resumed>) = 0 [pid 12428] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12429] <... write resumed>) = 4 [pid 5069] getdents64(3, [pid 12430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12429] close(3) = 0 [pid 12429] symlink("/dev/binderfs", "./binderfs" [pid 12431] <... chdir resumed>) = 0 [pid 12428] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12429] <... symlink resumed>) = 0 [pid 12431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12428] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] close(3 [pid 12431] <... prctl resumed>) = 0 [pid 12430] <... openat resumed>) = 3 [pid 12429] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12428] <... bpf resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12431 [pid 12431] setpgid(0, 0 [pid 12430] write(3, "1000", 4 [pid 12428] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] rmdir("./1488" [pid 12429] <... bpf resumed>) = 3 [pid 12431] <... setpgid resumed>) = 0 [pid 12430] <... write resumed>) = 4 [pid 12431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12430] close(3 [pid 12429] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12428] <... bpf resumed>) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 12430] <... close resumed>) = 0 [pid 12430] symlink("/dev/binderfs", "./binderfs" [pid 12428] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12431] <... openat resumed>) = 3 [pid 12430] <... symlink resumed>) = 0 [pid 12429] <... bpf resumed>) = 4 [pid 12428] <... bpf resumed>) = 6 [pid 5069] mkdir("./1489", 0777 [pid 12431] write(3, "1000", 4 [pid 12428] exit_group(0 [pid 12430] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12429] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12431] <... write resumed>) = 4 [pid 12428] <... exit_group resumed>) = ? [pid 5069] <... mkdir resumed>) = 0 [pid 12431] close(3 [pid 12430] <... bpf resumed>) = 3 [pid 12429] <... bpf resumed>) = 5 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12431] <... close resumed>) = 0 [pid 12431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12430] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12429] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12432 attached [pid 12431] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12430] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12429] <... bpf resumed>) = 6 [pid 12432] set_robust_list(0x5555686ec660, 24 [pid 12431] <... bpf resumed>) = 3 [pid 12430] <... bpf resumed>) = 5 [pid 12429] exit_group(0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12432 [pid 12432] <... set_robust_list resumed>) = 0 [pid 12431] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12429] <... exit_group resumed>) = ? [pid 12432] chdir("./1489" [pid 12431] <... bpf resumed>) = 4 [pid 12432] <... chdir resumed>) = 0 [pid 12431] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12430] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12431] <... bpf resumed>) = 5 [pid 12432] setpgid(0, 0) = 0 [pid 12432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12431] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12432] write(3, "1000", 4) = 4 [pid 12432] close(3) = 0 [pid 12430] <... bpf resumed>) = 6 [pid 12428] +++ exited with 0 +++ [pid 12432] symlink("/dev/binderfs", "./binderfs" [pid 12430] exit_group(0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12428, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12432] <... symlink resumed>) = 0 [pid 12430] <... exit_group resumed>) = ? [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12432] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] umount2("./1423", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12432] <... bpf resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12432] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] openat(AT_FDCWD, "./1423", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12432] <... bpf resumed>) = 4 [pid 5066] <... openat resumed>) = 3 [pid 12432] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] newfstatat(3, "", [pid 12431] <... bpf resumed>) = 6 [pid 12429] +++ exited with 0 +++ [pid 12432] <... bpf resumed>) = 5 [pid 12432] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12431] exit_group(0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12431] <... exit_group resumed>) = ? [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12429, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5066] getdents64(3, [pid 5071] <... restart_syscall resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1503", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1423/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1503", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 5066] newfstatat(AT_FDCWD, "./1423/binderfs", [pid 5071] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5066] unlink("./1423/binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1503/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1503/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1503/binderfs" [pid 12432] <... bpf resumed>) = 6 [pid 12430] +++ exited with 0 +++ [pid 5066] getdents64(3, [pid 12432] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 12432] <... exit_group resumed>) = ? [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12430, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5071] close(3) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1423" [pid 5071] rmdir("./1503" [pid 5067] umount2("./1449", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1424", 0777 [pid 5067] openat(AT_FDCWD, "./1449", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] mkdir("./1504", 0777) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12434 attached ./strace-static-x86_64: Process 12433 attached [pid 12434] set_robust_list(0x5555686ec660, 24 [pid 12431] +++ exited with 0 +++ [pid 5067] umount2("./1449/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12434] <... set_robust_list resumed>) = 0 [pid 12433] set_robust_list(0x5555686ec660, 24 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12433] <... set_robust_list resumed>) = 0 [pid 12432] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12434 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12431, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12434] chdir("./1504" [pid 12433] chdir("./1424" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12432, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] newfstatat(AT_FDCWD, "./1449/binderfs", [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12433 [pid 12434] <... chdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] unlink("./1449/binderfs" [pid 12434] <... prctl resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12434] setpgid(0, 0) = 0 [pid 5067] getdents64(3, [pid 12434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... restart_syscall resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12433] <... chdir resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 12433] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12434] <... openat resumed>) = 3 [pid 12433] <... prctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12434] write(3, "1000", 4 [pid 12433] setpgid(0, 0 [pid 5067] close(3 [pid 12434] <... write resumed>) = 4 [pid 12433] <... setpgid resumed>) = 0 [pid 5068] umount2("./1468", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 12434] close(3 [pid 5067] rmdir("./1449" [pid 12434] <... close resumed>) = 0 [pid 12433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1489", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 12434] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1468", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12434] <... symlink resumed>) = 0 [pid 12433] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1489", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... openat resumed>) = 3 [pid 12434] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5067] mkdir("./1450", 0777 [pid 12434] <... bpf resumed>) = 3 [pid 12433] write(3, "1000", 4 [pid 5069] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12434] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12433] <... write resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 12433] close(3 [pid 12434] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12433] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12433] symlink("/dev/binderfs", "./binderfs" [pid 5069] getdents64(3, [pid 5068] umount2("./1468/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12435 attached [pid 12434] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12433] <... symlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12434] <... bpf resumed>) = 5 [pid 5069] umount2("./1489/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./1468/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12434] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12435 [pid 12435] set_robust_list(0x5555686ec660, 24 [pid 12433] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] unlink("./1468/binderfs" [pid 12435] <... set_robust_list resumed>) = 0 [pid 12434] <... bpf resumed>) = 6 [pid 12433] <... bpf resumed>) = 3 [pid 5069] newfstatat(AT_FDCWD, "./1489/binderfs", [pid 12435] chdir("./1450" [pid 12434] exit_group(0 [pid 12433] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... unlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12435] <... chdir resumed>) = 0 [pid 12435] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12434] <... exit_group resumed>) = ? [pid 12433] <... bpf resumed>) = 4 [pid 12435] <... prctl resumed>) = 0 [pid 5069] unlink("./1489/binderfs" [pid 5068] getdents64(3, [pid 12435] setpgid(0, 0 [pid 12433] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12435] <... setpgid resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12434] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 5068] close(3 [pid 12435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12434, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... close resumed>) = 0 [pid 12435] <... openat resumed>) = 3 [pid 12433] <... bpf resumed>) = 5 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] rmdir("./1468" [pid 12435] write(3, "1000", 4 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] close(3 [pid 12435] <... write resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 12435] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 12435] <... close resumed>) = 0 [pid 12435] symlink("/dev/binderfs", "./binderfs" [pid 12433] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12435] <... symlink resumed>) = 0 [pid 5069] rmdir("./1489" [pid 5068] mkdir("./1469", 0777 [pid 12435] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12435] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5071] umount2("./1504", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1490", 0777 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12435] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12435] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5071] openat(AT_FDCWD, "./1504", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... mkdir resumed>) = 0 [pid 12435] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12436 attached [pid 5071] <... openat resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12436 [pid 12436] set_robust_list(0x5555686ec660, 24 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12436] <... set_robust_list resumed>) = 0 [pid 5071] getdents64(3, ./strace-static-x86_64: Process 12437 attached [pid 12436] chdir("./1469" [pid 12437] set_robust_list(0x5555686ec660, 24) = 0 [pid 12436] <... chdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12437 [pid 12437] chdir("./1490" [pid 12436] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12435] <... bpf resumed>) = 6 [pid 12433] <... bpf resumed>) = 6 [pid 5071] umount2("./1504/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12436] <... prctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12436] setpgid(0, 0 [pid 12435] exit_group(0 [pid 12433] exit_group(0 [pid 5071] newfstatat(AT_FDCWD, "./1504/binderfs", [pid 12437] <... chdir resumed>) = 0 [pid 12436] <... setpgid resumed>) = 0 [pid 12435] <... exit_group resumed>) = ? [pid 12433] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12437] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12437] <... prctl resumed>) = 0 [pid 12437] setpgid(0, 0 [pid 12435] +++ exited with 0 +++ [pid 12437] <... setpgid resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12435, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12436] <... openat resumed>) = 3 [pid 12433] +++ exited with 0 +++ [pid 5071] unlink("./1504/binderfs" [pid 12437] <... openat resumed>) = 3 [pid 12436] write(3, "1000", 4 [pid 5071] <... unlink resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12433, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12436] <... write resumed>) = 4 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12437] write(3, "1000", 4 [pid 12436] close(3 [pid 5071] getdents64(3, [pid 12436] <... close resumed>) = 0 [pid 12437] <... write resumed>) = 4 [pid 12437] close(3 [pid 12436] symlink("/dev/binderfs", "./binderfs" [pid 12437] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1424", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12436] <... symlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 5067] umount2("./1450", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1424", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12437] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1504" [pid 5067] openat(AT_FDCWD, "./1450", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12437] <... bpf resumed>) = 3 [pid 12436] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... openat resumed>) = 3 [pid 12437] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... openat resumed>) = 3 [pid 12437] <... bpf resumed>) = 4 [pid 12437] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12436] <... bpf resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] newfstatat(3, "", [pid 12437] <... bpf resumed>) = 5 [pid 12436] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] mkdir("./1505", 0777 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 12437] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12437] <... bpf resumed>) = 6 [pid 12436] <... bpf resumed>) = 4 [pid 12437] exit_group(0 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] umount2("./1450/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1424/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12437] <... exit_group resumed>) = ? [pid 12436] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] newfstatat(AT_FDCWD, "./1450/binderfs", [pid 5066] newfstatat(AT_FDCWD, "./1424/binderfs", [pid 12436] <... bpf resumed>) = 5 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1450/binderfs" [pid 5066] unlink("./1424/binderfs"./strace-static-x86_64: Process 12438 attached [pid 12437] +++ exited with 0 +++ [pid 12436] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12438] set_robust_list(0x5555686ec660, 24 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12438] <... set_robust_list resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12437, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, [pid 5069] umount2("./1490", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12438] chdir("./1505" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12438 [pid 5066] getdents64(3, [pid 5069] openat(AT_FDCWD, "./1490", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12438] <... chdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] close(3 [pid 12438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] newfstatat(3, "", [pid 5066] <... close resumed>) = 0 [pid 12438] <... prctl resumed>) = 0 [pid 12436] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] rmdir("./1450" [pid 5066] rmdir("./1424" [pid 12438] setpgid(0, 0 [pid 12436] exit_group(0) = ? [pid 5069] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12438] <... setpgid resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] mkdir("./1451", 0777 [pid 5069] umount2("./1490/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1490/binderfs", [pid 12436] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12436, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1490/binderfs" [pid 5068] <... restart_syscall resumed>) = 0 [pid 12438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] mkdir("./1425", 0777 [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] umount2("./1469", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12438] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] close(3) = 0 [pid 5068] openat(AT_FDCWD, "./1469", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12439 attached [pid 12438] write(3, "1000", 4 [pid 5069] rmdir("./1490" [pid 5068] <... openat resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 12439] set_robust_list(0x5555686ec660, 24 [pid 12438] <... write resumed>) = 4 [pid 5068] newfstatat(3, "", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12440 attached [pid 12439] <... set_robust_list resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12438] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12439 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12440 [pid 12440] set_robust_list(0x5555686ec660, 24 [pid 12439] chdir("./1451" [pid 12438] <... close resumed>) = 0 [pid 5069] mkdir("./1491", 0777 [pid 5068] getdents64(3, [pid 12440] <... set_robust_list resumed>) = 0 [pid 12439] <... chdir resumed>) = 0 [pid 12438] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12440] chdir("./1425" [pid 12439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12440] <... chdir resumed>) = 0 [pid 12439] setpgid(0, 0 [pid 12438] <... symlink resumed>) = 0 [pid 5068] umount2("./1469/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12440] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12439] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 12441 attached [pid 12440] <... prctl resumed>) = 0 [pid 12440] setpgid(0, 0 [pid 12439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] newfstatat(AT_FDCWD, "./1469/binderfs", [pid 12441] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12441 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12441] <... set_robust_list resumed>) = 0 [pid 12439] <... openat resumed>) = 3 [pid 12440] <... setpgid resumed>) = 0 [pid 12438] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1469/binderfs" [pid 12441] chdir("./1491" [pid 12440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12439] write(3, "1000", 4 [pid 12438] <... bpf resumed>) = 3 [pid 12441] <... chdir resumed>) = 0 [pid 12440] <... openat resumed>) = 3 [pid 12439] <... write resumed>) = 4 [pid 12438] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... unlink resumed>) = 0 [pid 12441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12440] write(3, "1000", 4 [pid 12439] close(3 [pid 5068] getdents64(3, [pid 12438] <... bpf resumed>) = 4 [pid 12441] <... prctl resumed>) = 0 [pid 12440] <... write resumed>) = 4 [pid 12439] <... close resumed>) = 0 [pid 12438] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12441] setpgid(0, 0 [pid 12440] close(3 [pid 12439] symlink("/dev/binderfs", "./binderfs" [pid 5068] close(3 [pid 12440] <... close resumed>) = 0 [pid 12438] <... bpf resumed>) = 5 [pid 5068] <... close resumed>) = 0 [pid 12438] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] rmdir("./1469" [pid 12441] <... setpgid resumed>) = 0 [pid 12440] symlink("/dev/binderfs", "./binderfs" [pid 12439] <... symlink resumed>) = 0 [pid 12438] <... bpf resumed>) = 6 [pid 12441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12438] exit_group(0 [pid 5068] <... rmdir resumed>) = 0 [pid 12440] <... symlink resumed>) = 0 [pid 12438] <... exit_group resumed>) = ? [pid 5068] mkdir("./1470", 0777 [pid 12441] <... openat resumed>) = 3 [pid 12440] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12439] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12441] write(3, "1000", 4 [pid 12440] <... bpf resumed>) = 3 [pid 12438] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 12441] <... write resumed>) = 4 [pid 12440] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12439] <... bpf resumed>) = 3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12438, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12441] close(3 [pid 12440] <... bpf resumed>) = 4 [pid 12439] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12441] <... close resumed>) = 0 [pid 12440] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12439] <... bpf resumed>) = 4 ./strace-static-x86_64: Process 12442 attached [pid 12441] symlink("/dev/binderfs", "./binderfs" [pid 12440] <... bpf resumed>) = 5 [pid 12439] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1505", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12440] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12442] set_robust_list(0x5555686ec660, 24 [pid 12441] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12442] <... set_robust_list resumed>) = 0 [pid 12442] chdir("./1470" [pid 5071] openat(AT_FDCWD, "./1505", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12442 [pid 12442] <... chdir resumed>) = 0 [pid 12441] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12439] <... bpf resumed>) = 5 [pid 5071] <... openat resumed>) = 3 [pid 12442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12441] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12442] <... prctl resumed>) = 0 [pid 12441] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12439] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12442] setpgid(0, 0 [pid 12441] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 12442] <... setpgid resumed>) = 0 [pid 12441] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12441] <... bpf resumed>) = 5 [pid 5071] umount2("./1505/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12441] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(AT_FDCWD, "./1505/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1505/binderfs" [pid 12442] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 12442] write(3, "1000", 4) = 4 [pid 12442] close(3 [pid 5071] getdents64(3, [pid 12442] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12442] symlink("/dev/binderfs", "./binderfs" [pid 5071] close(3) = 0 [pid 5071] rmdir("./1505" [pid 12442] <... symlink resumed>) = 0 [pid 12441] <... bpf resumed>) = 6 [pid 12440] <... bpf resumed>) = 6 [pid 12439] <... bpf resumed>) = 6 [pid 12442] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12441] exit_group(0 [pid 12440] exit_group(0 [pid 12439] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 12440] <... exit_group resumed>) = ? [pid 12442] <... bpf resumed>) = 3 [pid 12441] <... exit_group resumed>) = ? [pid 12439] <... exit_group resumed>) = ? [pid 5071] mkdir("./1506", 0777 [pid 12442] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12441] +++ exited with 0 +++ [pid 12440] +++ exited with 0 +++ [pid 12439] +++ exited with 0 +++ [pid 5071] <... mkdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12441, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12440, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12442] <... bpf resumed>) = 4 [pid 12442] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12439, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... restart_syscall resumed>) = 0 [pid 5067] umount2("./1451", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12442] <... bpf resumed>) = 5 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12442] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12443 attached [pid 5069] umount2("./1491", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./1451", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12443] set_robust_list(0x5555686ec660, 24 [pid 12442] <... bpf resumed>) = 6 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12443 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./1425", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12443] <... set_robust_list resumed>) = 0 [pid 12443] chdir("./1506" [pid 12442] exit_group(0 [pid 5069] openat(AT_FDCWD, "./1491", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12442] <... exit_group resumed>) = ? [pid 5069] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./1425", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12443] <... chdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... openat resumed>) = 3 [pid 12443] <... prctl resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12443] setpgid(0, 0 [pid 12442] +++ exited with 0 +++ [pid 5069] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12443] <... setpgid resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12442, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1451/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 12443] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(AT_FDCWD, "./1451/binderfs", [pid 12443] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12443] <... write resumed>) = 4 [pid 5066] umount2("./1425/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12443] close(3) = 0 [pid 5069] umount2("./1491/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12443] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1491/binderfs", [pid 5067] unlink("./1451/binderfs" [pid 5066] newfstatat(AT_FDCWD, "./1425/binderfs", [pid 12443] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12443] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] unlink("./1491/binderfs" [pid 5068] umount2("./1470", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5066] unlink("./1425/binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1470", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5069] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12443] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5068] newfstatat(3, "", [pid 5067] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 12443] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... close resumed>) = 0 [pid 12443] <... bpf resumed>) = 4 [pid 5069] rmdir("./1491" [pid 5068] getdents64(3, [pid 5067] rmdir("./1451" [pid 5066] getdents64(3, [pid 12443] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5068] umount2("./1470/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1452", 0777 [pid 5066] <... close resumed>) = 0 [pid 12443] <... bpf resumed>) = 5 [pid 5069] mkdir("./1492", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5066] rmdir("./1425" [pid 12443] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1470/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1470/binderfs" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... unlink resumed>) = 0 [pid 12443] <... bpf resumed>) = 6 [pid 5066] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12444 attached ./strace-static-x86_64: Process 12445 attached [pid 12444] set_robust_list(0x5555686ec660, 24 [pid 12443] exit_group(0 [pid 5068] getdents64(3, [pid 5066] mkdir("./1426", 0777 [pid 12444] <... set_robust_list resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 12443] <... exit_group resumed>) = ? [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12444 [pid 5068] rmdir("./1470" [pid 12445] set_robust_list(0x5555686ec660, 24 [pid 12444] chdir("./1492" [pid 12443] +++ exited with 0 +++ [pid 5066] <... mkdir resumed>) = 0 [pid 12445] <... set_robust_list resumed>) = 0 [pid 12444] <... chdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12443, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12445 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] mkdir("./1471", 0777 [pid 12445] chdir("./1452" [pid 12444] setpgid(0, 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5071] umount2("./1506", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12446 attached [pid 12445] <... chdir resumed>) = 0 [pid 12444] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1506", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12445] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 12447 attached [pid 12446] set_robust_list(0x5555686ec660, 24 [pid 12445] <... prctl resumed>) = 0 [pid 12444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... openat resumed>) = 3 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12446 [pid 12446] <... set_robust_list resumed>) = 0 [pid 12445] setpgid(0, 0 [pid 12447] set_robust_list(0x5555686ec660, 24 [pid 12446] chdir("./1426" [pid 12445] <... setpgid resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12447 [pid 12444] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12447] <... set_robust_list resumed>) = 0 [pid 12445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12447] chdir("./1471" [pid 12446] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 12446] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12444] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12447] <... chdir resumed>) = 0 [pid 12446] <... prctl resumed>) = 0 [pid 12445] <... openat resumed>) = 3 [pid 12444] <... write resumed>) = 4 [pid 12446] setpgid(0, 0 [pid 12447] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12446] <... setpgid resumed>) = 0 [pid 12444] close(3 [pid 12447] <... prctl resumed>) = 0 [pid 5071] umount2("./1506/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12447] setpgid(0, 0 [pid 5071] newfstatat(AT_FDCWD, "./1506/binderfs", [pid 12445] write(3, "1000", 4 [pid 12444] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1506/binderfs") = 0 [pid 5071] getdents64(3, [pid 12447] <... setpgid resumed>) = 0 [pid 12445] <... write resumed>) = 4 [pid 12444] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12446] <... openat resumed>) = 3 [pid 5071] close(3 [pid 12447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12446] write(3, "1000", 4 [pid 12445] close(3 [pid 12444] <... symlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12446] <... write resumed>) = 4 [pid 12447] <... openat resumed>) = 3 [pid 12446] close(3 [pid 12445] <... close resumed>) = 0 [pid 12444] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1506" [pid 12447] write(3, "1000", 4 [pid 12446] <... close resumed>) = 0 [pid 12445] symlink("/dev/binderfs", "./binderfs" [pid 12444] <... bpf resumed>) = 3 [pid 12447] <... write resumed>) = 4 [pid 12446] symlink("/dev/binderfs", "./binderfs" [pid 12445] <... symlink resumed>) = 0 [pid 12444] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 12447] close(3 [pid 12446] <... symlink resumed>) = 0 [pid 12445] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12444] <... bpf resumed>) = 4 [pid 12447] <... close resumed>) = 0 [pid 12445] <... bpf resumed>) = 3 [pid 5071] mkdir("./1507", 0777 [pid 12446] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12444] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12447] symlink("/dev/binderfs", "./binderfs" [pid 12445] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 12446] <... bpf resumed>) = 3 [pid 12446] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12444] <... bpf resumed>) = 5 [pid 12447] <... symlink resumed>) = 0 [pid 12447] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12446] <... bpf resumed>) = 4 [pid 12445] <... bpf resumed>) = 4 [pid 12444] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12447] <... bpf resumed>) = 3 [pid 12446] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12445] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12447] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12446] <... bpf resumed>) = 5 [pid 12444] <... bpf resumed>) = 6 [pid 12447] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12445] <... bpf resumed>) = 5 [pid 12446] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12444] exit_group(0./strace-static-x86_64: Process 12448 attached [pid 12447] <... bpf resumed>) = 5 [pid 12446] <... bpf resumed>) = 6 [pid 12445] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12444] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12448 [pid 12448] set_robust_list(0x5555686ec660, 24 [pid 12446] exit_group(0 [pid 12448] <... set_robust_list resumed>) = 0 [pid 12447] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12445] <... bpf resumed>) = 6 [pid 12448] chdir("./1507" [pid 12446] <... exit_group resumed>) = ? [pid 12445] exit_group(0 [pid 12448] <... chdir resumed>) = 0 [pid 12445] <... exit_group resumed>) = ? [pid 12447] <... bpf resumed>) = 6 [pid 12448] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12446] +++ exited with 0 +++ [pid 12445] +++ exited with 0 +++ [pid 12448] <... prctl resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12445, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12448] setpgid(0, 0) = 0 [pid 12448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12447] exit_group(0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12446, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12447] <... exit_group resumed>) = ? [pid 12448] <... openat resumed>) = 3 [pid 5066] umount2("./1426", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1452", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12448] write(3, "1000", 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12448] <... write resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./1452", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1426", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12448] close(3 [pid 5067] <... openat resumed>) = 3 [pid 12448] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5066] newfstatat(3, "", [pid 12448] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12448] <... symlink resumed>) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12448] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12447] +++ exited with 0 +++ [pid 5067] umount2("./1452/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12444] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12447, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12448] <... bpf resumed>) = 3 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1426/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12448] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12444, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1452/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./1492", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1426/binderfs", [pid 12448] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12448] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] openat(AT_FDCWD, "./1492", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./1471", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1452/binderfs" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 12448] <... bpf resumed>) = 5 [pid 5068] openat(AT_FDCWD, "./1471", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] unlink("./1426/binderfs" [pid 5069] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5068] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] close(3 [pid 5066] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] rmdir("./1452" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] newfstatat(3, "", [pid 12448] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... close resumed>) = 0 [pid 12448] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 5068] umount2("./1471/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1453", 0777 [pid 5066] rmdir("./1426" [pid 12448] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 12448] <... exit_group resumed>) = ? [pid 5069] umount2("./1492/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./1471/binderfs", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1427", 0777 [pid 12448] +++ exited with 0 +++ [pid 5069] newfstatat(AT_FDCWD, "./1492/binderfs", [pid 5068] unlink("./1471/binderfs" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12449 attached [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12448, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] unlink("./1492/binderfs" [pid 5068] getdents64(3, [pid 12449] set_robust_list(0x5555686ec660, 24 [pid 5071] umount2("./1507", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12450 attached [pid 12449] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5068] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 12449] chdir("./1453" [pid 5071] openat(AT_FDCWD, "./1507", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] close(3 [pid 5068] rmdir("./1471" [pid 12450] set_robust_list(0x5555686ec660, 24 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12449] <... chdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12449 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12450 [pid 12450] <... set_robust_list resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5069] rmdir("./1492" [pid 12450] chdir("./1427" [pid 12449] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1472", 0777 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12450] <... chdir resumed>) = 0 [pid 12449] <... prctl resumed>) = 0 [pid 5071] umount2("./1507/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1493", 0777 [pid 5068] <... mkdir resumed>) = 0 [pid 12449] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12450] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12449] <... setpgid resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1507/binderfs", [pid 5069] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12451 attached [pid 12450] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1507/binderfs" [pid 12449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12451] set_robust_list(0x5555686ec660, 24) = 0 [pid 12450] setpgid(0, 0 [pid 5071] <... unlink resumed>) = 0 [pid 5071] getdents64(3, [pid 12451] chdir("./1472" [pid 12450] <... setpgid resumed>) = 0 [pid 12449] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12451 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1507"./strace-static-x86_64: Process 12452 attached [pid 12451] <... chdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12452] set_robust_list(0x5555686ec660, 24) = 0 [pid 12452] chdir("./1493" [pid 5071] mkdir("./1508", 0777 [pid 12449] write(3, "1000", 4 [pid 12452] <... chdir resumed>) = 0 [pid 12451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12450] <... openat resumed>) = 3 [pid 12449] <... write resumed>) = 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12452 [pid 12451] <... prctl resumed>) = 0 [pid 12450] write(3, "1000", 4 [pid 12449] close(3 [pid 12451] setpgid(0, 0 [pid 12450] <... write resumed>) = 4 [pid 12451] <... setpgid resumed>) = 0 [pid 12450] close(3 [pid 12449] <... close resumed>) = 0 [pid 12452] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12450] <... close resumed>) = 0 [pid 12449] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... mkdir resumed>) = 0 [pid 12452] <... prctl resumed>) = 0 [pid 12451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12450] symlink("/dev/binderfs", "./binderfs" [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12452] setpgid(0, 0 [pid 12451] <... openat resumed>) = 3 [pid 12450] <... symlink resumed>) = 0 [pid 12449] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12453 attached [pid 12452] <... setpgid resumed>) = 0 [pid 12450] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12453] set_robust_list(0x5555686ec660, 24 [pid 12451] write(3, "1000", 4 [pid 12449] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12453] <... set_robust_list resumed>) = 0 [pid 12452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12451] <... write resumed>) = 4 [pid 12450] <... bpf resumed>) = 3 [pid 12449] <... bpf resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12453 [pid 12453] chdir("./1508" [pid 12452] <... openat resumed>) = 3 [pid 12451] close(3 [pid 12450] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12453] <... chdir resumed>) = 0 [pid 12451] <... close resumed>) = 0 [pid 12449] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12451] symlink("/dev/binderfs", "./binderfs" [pid 12453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12452] write(3, "1000", 4 [pid 12453] <... prctl resumed>) = 0 [pid 12452] <... write resumed>) = 4 [pid 12453] setpgid(0, 0 [pid 12452] close(3) = 0 [pid 12452] symlink("/dev/binderfs", "./binderfs" [pid 12450] <... bpf resumed>) = 4 [pid 12453] <... setpgid resumed>) = 0 [pid 12452] <... symlink resumed>) = 0 [pid 12451] <... symlink resumed>) = 0 [pid 12449] <... bpf resumed>) = 4 [pid 12453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12452] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12450] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12453] <... openat resumed>) = 3 [pid 12452] <... bpf resumed>) = 3 [pid 12451] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12449] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12451] <... bpf resumed>) = 3 [pid 12451] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12453] write(3, "1000", 4 [pid 12452] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12451] <... bpf resumed>) = 4 [pid 12449] <... bpf resumed>) = 5 [pid 12453] <... write resumed>) = 4 [pid 12452] <... bpf resumed>) = 4 [pid 12450] <... bpf resumed>) = 5 [pid 12452] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12453] close(3 [pid 12451] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12450] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12449] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12453] <... close resumed>) = 0 [pid 12452] <... bpf resumed>) = 5 [pid 12452] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12451] <... bpf resumed>) = 5 [pid 12450] <... bpf resumed>) = 6 [pid 12453] symlink("/dev/binderfs", "./binderfs" [pid 12449] <... bpf resumed>) = 6 [pid 12452] exit_group(0) = ? [pid 12453] <... symlink resumed>) = 0 [pid 12451] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12450] exit_group(0 [pid 12449] exit_group(0 [pid 12452] +++ exited with 0 +++ [pid 12451] <... bpf resumed>) = 6 [pid 12450] <... exit_group resumed>) = ? [pid 12449] <... exit_group resumed>) = ? [pid 12453] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12452, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12453] <... bpf resumed>) = 3 [pid 12451] exit_group(0 [pid 12453] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12453] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12449] +++ exited with 0 +++ [pid 12453] <... bpf resumed>) = 5 [pid 12453] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12451] <... exit_group resumed>) = ? [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12449, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] umount2("./1453", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12453] <... bpf resumed>) = 6 [pid 12450] +++ exited with 0 +++ [pid 5069] umount2("./1493", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./1453", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12450, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12453] exit_group(0) = ? [pid 5069] openat(AT_FDCWD, "./1493", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./1427", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(3, "", [pid 5067] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./1427", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5069] getdents64(3, [pid 5067] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1493/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12453] +++ exited with 0 +++ [pid 12451] +++ exited with 0 +++ [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(3, "", [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12451, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] umount2("./1453/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12453, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1493/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./1508", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] unlink("./1493/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1453/binderfs", [pid 5071] openat(AT_FDCWD, "./1508", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 5067] unlink("./1453/binderfs" [pid 5066] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5069] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1472", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5066] umount2("./1427/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5069] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... close resumed>) = 0 [pid 5071] umount2("./1508/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] rmdir("./1493" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1427/binderfs", [pid 5071] newfstatat(AT_FDCWD, "./1508/binderfs", [pid 5069] <... rmdir resumed>) = 0 [pid 5067] close(3) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] mkdir("./1494", 0777 [pid 5068] openat(AT_FDCWD, "./1472", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] rmdir("./1453" [pid 5066] unlink("./1427/binderfs" [pid 5071] unlink("./1508/binderfs" [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(3, "", [pid 5067] mkdir("./1454", 0777 [pid 5066] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3./strace-static-x86_64: Process 12454 attached ) = 0 [pid 5068] getdents64(3, [pid 5066] close(3 [pid 12454] set_robust_list(0x5555686ec660, 24 [pid 5071] rmdir("./1508" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12454 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12454] <... set_robust_list resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12454] chdir("./1494" [pid 5068] umount2("./1472/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1427" [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1509", 0777 [pid 5068] newfstatat(AT_FDCWD, "./1472/binderfs", ./strace-static-x86_64: Process 12455 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12455] set_robust_list(0x5555686ec660, 24 [pid 12454] <... chdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12454] <... prctl resumed>) = 0 [pid 12455] <... set_robust_list resumed>) = 0 [pid 12454] setpgid(0, 0 [pid 5068] unlink("./1472/binderfs" [pid 5066] mkdir("./1428", 0777./strace-static-x86_64: Process 12456 attached [pid 12455] chdir("./1454" [pid 12454] <... setpgid resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12455 [pid 5066] <... mkdir resumed>) = 0 [pid 12456] set_robust_list(0x5555686ec660, 24 [pid 12455] <... chdir resumed>) = 0 [pid 12454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12456 [pid 5068] <... unlink resumed>) = 0 [pid 12456] <... set_robust_list resumed>) = 0 [pid 12455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12454] <... openat resumed>) = 3 [pid 12456] chdir("./1509" [pid 12455] <... prctl resumed>) = 0 [pid 12454] write(3, "1000", 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12456] <... chdir resumed>) = 0 [pid 12455] setpgid(0, 0 [pid 12454] <... write resumed>) = 4 [pid 5068] close(3./strace-static-x86_64: Process 12457 attached [pid 12456] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12455] <... setpgid resumed>) = 0 [pid 12454] close(3 [pid 12457] set_robust_list(0x5555686ec660, 24 [pid 12456] <... prctl resumed>) = 0 [pid 12454] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12457 [pid 12457] <... set_robust_list resumed>) = 0 [pid 12456] setpgid(0, 0 [pid 12455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12454] symlink("/dev/binderfs", "./binderfs" [pid 5068] rmdir("./1472" [pid 12457] chdir("./1428" [pid 12456] <... setpgid resumed>) = 0 [pid 12454] <... symlink resumed>) = 0 [pid 12456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12455] <... openat resumed>) = 3 [pid 12454] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... rmdir resumed>) = 0 [pid 12457] <... chdir resumed>) = 0 [pid 12455] write(3, "1000", 4 [pid 12454] <... bpf resumed>) = 3 [pid 12457] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12456] <... openat resumed>) = 3 [pid 12455] <... write resumed>) = 4 [pid 12457] <... prctl resumed>) = 0 [pid 12455] close(3 [pid 5068] mkdir("./1473", 0777 [pid 12457] setpgid(0, 0 [pid 12455] <... close resumed>) = 0 [pid 12455] symlink("/dev/binderfs", "./binderfs" [pid 12454] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12457] <... setpgid resumed>) = 0 [pid 12456] write(3, "1000", 4 [pid 12455] <... symlink resumed>) = 0 [pid 12454] <... bpf resumed>) = 4 [pid 12454] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... mkdir resumed>) = 0 [pid 12457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12456] <... write resumed>) = 4 [pid 12455] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12457] <... openat resumed>) = 3 [pid 12456] close(3 [pid 12454] <... bpf resumed>) = 5 [pid 12456] <... close resumed>) = 0 [pid 12455] <... bpf resumed>) = 3 [pid 12456] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12458 attached [pid 12457] write(3, "1000", 4 [pid 12456] <... symlink resumed>) = 0 [pid 12455] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12454] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12458] set_robust_list(0x5555686ec660, 24 [pid 12457] <... write resumed>) = 4 [pid 12456] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12455] <... bpf resumed>) = 4 [pid 12454] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12458 [pid 12458] <... set_robust_list resumed>) = 0 [pid 12457] close(3 [pid 12456] <... bpf resumed>) = 3 [pid 12458] chdir("./1473" [pid 12457] <... close resumed>) = 0 [pid 12456] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12455] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12454] exit_group(0 [pid 12458] <... chdir resumed>) = 0 [pid 12457] symlink("/dev/binderfs", "./binderfs" [pid 12456] <... bpf resumed>) = 4 [pid 12454] <... exit_group resumed>) = ? [pid 12458] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12455] <... bpf resumed>) = 5 [pid 12458] <... prctl resumed>) = 0 [pid 12458] setpgid(0, 0 [pid 12457] <... symlink resumed>) = 0 [pid 12456] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12455] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12458] <... setpgid resumed>) = 0 [pid 12457] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12454] +++ exited with 0 +++ [pid 12458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12456] <... bpf resumed>) = 5 [pid 12458] <... openat resumed>) = 3 [pid 12457] <... bpf resumed>) = 3 [pid 12456] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12454, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12458] write(3, "1000", 4 [pid 12457] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12458] <... write resumed>) = 4 [pid 5069] <... restart_syscall resumed>) = 0 [pid 12458] close(3 [pid 12457] <... bpf resumed>) = 4 [pid 12458] <... close resumed>) = 0 [pid 12457] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] umount2("./1494", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12458] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1494", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] newfstatat(3, "", [pid 12458] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1494/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12458] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12457] <... bpf resumed>) = 5 [pid 12458] <... bpf resumed>) = 3 [pid 12458] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12457] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12455] <... bpf resumed>) = 6 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12458] <... bpf resumed>) = 4 [pid 12457] <... bpf resumed>) = 6 [pid 12456] <... bpf resumed>) = 6 [pid 5069] newfstatat(AT_FDCWD, "./1494/binderfs", [pid 12455] exit_group(0 [pid 12458] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12457] exit_group(0 [pid 12456] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12457] <... exit_group resumed>) = ? [pid 5069] unlink("./1494/binderfs" [pid 12458] <... bpf resumed>) = 5 [pid 12455] <... exit_group resumed>) = ? [pid 12458] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12457] +++ exited with 0 +++ [pid 12456] <... exit_group resumed>) = ? [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12457, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12455] +++ exited with 0 +++ [pid 5069] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12455, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12458] <... bpf resumed>) = 6 [pid 5069] rmdir("./1494" [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12458] exit_group(0 [pid 5069] <... rmdir resumed>) = 0 [pid 12458] <... exit_group resumed>) = ? [pid 5069] mkdir("./1495", 0777 [pid 5066] umount2("./1428", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1454", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1428", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 12459 attached [pid 5067] openat(AT_FDCWD, "./1454", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(3, "", [pid 12459] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12459 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12459] <... set_robust_list resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] getdents64(3, [pid 12459] chdir("./1495" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12456] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12459] <... chdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12456, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, [pid 12459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1428/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12459] <... prctl resumed>) = 0 [pid 5067] umount2("./1454/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12459] setpgid(0, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1428/binderfs", [pid 12459] <... setpgid resumed>) = 0 [pid 12458] +++ exited with 0 +++ [pid 5067] newfstatat(AT_FDCWD, "./1454/binderfs", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1428/binderfs" [pid 12459] <... openat resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12458, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] unlink("./1454/binderfs" [pid 12459] write(3, "1000", 4 [pid 5068] umount2("./1473", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1473", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./1509", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 12459] <... write resumed>) = 4 [pid 5068] newfstatat(3, "", [pid 12459] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 12459] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1509", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 12459] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12459] <... symlink resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5067] close(3 [pid 5066] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... close resumed>) = 0 [pid 12459] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] rmdir("./1454" [pid 5066] <... close resumed>) = 0 [pid 12459] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1473/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5066] rmdir("./1428" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1473/binderfs", [pid 12459] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1509/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12459] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./1455", 0777 [pid 12459] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(AT_FDCWD, "./1509/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12459] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1473/binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12459] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] unlink("./1509/binderfs" [pid 5068] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5066] mkdir("./1429", 0777 [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12460 attached [pid 12459] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12460 [pid 12460] set_robust_list(0x5555686ec660, 24 [pid 12459] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 12460] <... set_robust_list resumed>) = 0 [pid 12459] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 5068] <... close resumed>) = 0 [pid 12460] chdir("./1455" [pid 5071] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] rmdir("./1509" [pid 5068] rmdir("./1473" [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1474", 0777 [pid 12460] <... chdir resumed>) = 0 [pid 12459] +++ exited with 0 +++ [pid 5071] mkdir("./1510", 0777 [pid 5068] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12461 attached [pid 12460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12459, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12460] <... prctl resumed>) = 0 [pid 12460] setpgid(0, 0) = 0 [pid 5069] umount2("./1495", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12461] set_robust_list(0x5555686ec660, 24 [pid 12460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... mkdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12461 [pid 12461] <... set_robust_list resumed>) = 0 [pid 12460] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12462 attached [pid 12461] chdir("./1429" [pid 5069] openat(AT_FDCWD, "./1495", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12462] set_robust_list(0x5555686ec660, 24 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12462 [pid 12462] <... set_robust_list resumed>) = 0 [pid 12461] <... chdir resumed>) = 0 [pid 12460] write(3, "1000", 4 [pid 5069] newfstatat(3, "", [pid 12462] chdir("./1474" [pid 12461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12460] <... write resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12463 attached [pid 12461] <... prctl resumed>) = 0 [pid 12460] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12463 [pid 12461] setpgid(0, 0 [pid 12460] <... close resumed>) = 0 [pid 12462] <... chdir resumed>) = 0 [pid 12460] symlink("/dev/binderfs", "./binderfs" [pid 5069] getdents64(3, [pid 12461] <... setpgid resumed>) = 0 [pid 12463] set_robust_list(0x5555686ec660, 24 [pid 12462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12460] <... symlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12462] <... prctl resumed>) = 0 [pid 5069] umount2("./1495/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12462] setpgid(0, 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12462] <... setpgid resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1495/binderfs", [pid 12463] <... set_robust_list resumed>) = 0 [pid 12462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12461] <... openat resumed>) = 3 [pid 12463] chdir("./1510" [pid 12462] <... openat resumed>) = 3 [pid 12460] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12463] <... chdir resumed>) = 0 [pid 12461] write(3, "1000", 4 [pid 12460] <... bpf resumed>) = 3 [pid 5069] unlink("./1495/binderfs" [pid 12463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12461] <... write resumed>) = 4 [pid 12460] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12463] <... prctl resumed>) = 0 [pid 12462] write(3, "1000", 4) = 4 [pid 12462] close(3) = 0 [pid 12460] <... bpf resumed>) = 4 [pid 12463] setpgid(0, 0 [pid 12462] symlink("/dev/binderfs", "./binderfs" [pid 12463] <... setpgid resumed>) = 0 [pid 12461] close(3 [pid 12462] <... symlink resumed>) = 0 [pid 12460] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... unlink resumed>) = 0 [pid 12462] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12462] <... bpf resumed>) = 3 [pid 12461] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 12463] <... openat resumed>) = 3 [pid 12462] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12461] symlink("/dev/binderfs", "./binderfs" [pid 12460] <... bpf resumed>) = 5 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12463] write(3, "1000", 4 [pid 5069] close(3 [pid 12463] <... write resumed>) = 4 [pid 12462] <... bpf resumed>) = 4 [pid 12461] <... symlink resumed>) = 0 [pid 12460] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... close resumed>) = 0 [pid 12463] close(3 [pid 12462] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12460] <... bpf resumed>) = 6 [pid 12463] <... close resumed>) = 0 [pid 12461] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] rmdir("./1495" [pid 12463] symlink("/dev/binderfs", "./binderfs" [pid 12462] <... bpf resumed>) = 5 [pid 12461] <... bpf resumed>) = 3 [pid 12460] exit_group(0 [pid 12463] <... symlink resumed>) = 0 [pid 12462] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12461] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12460] <... exit_group resumed>) = ? [pid 12463] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12462] <... bpf resumed>) = 6 [pid 12461] <... bpf resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 12463] <... bpf resumed>) = 3 [pid 5069] mkdir("./1496", 0777 [pid 12463] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12462] exit_group(0 [pid 12461] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12463] <... bpf resumed>) = 4 [pid 12462] <... exit_group resumed>) = ? [pid 5069] <... mkdir resumed>) = 0 [pid 12463] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12463] <... bpf resumed>) = 5 [pid 12461] <... bpf resumed>) = 5 ./strace-static-x86_64: Process 12464 attached [pid 12463] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12461] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12464] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12464 [pid 12464] <... set_robust_list resumed>) = 0 [pid 12464] chdir("./1496") = 0 [pid 12464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12464] setpgid(0, 0) = 0 [pid 12464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12464] write(3, "1000", 4) = 4 [pid 12464] close(3) = 0 [pid 12464] symlink("/dev/binderfs", "./binderfs" [pid 12462] +++ exited with 0 +++ [pid 12460] +++ exited with 0 +++ [pid 12464] <... symlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12462, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12460, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12464] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5067] umount2("./1455", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1474", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12464] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1455", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./1474", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5068] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5068] getdents64(3, [pid 12464] <... bpf resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12464] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] umount2("./1474/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1455/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1474/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1455/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1474/binderfs" [pid 5067] unlink("./1455/binderfs" [pid 12464] <... bpf resumed>) = 5 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12464] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5067] close(3) = 0 [pid 5068] rmdir("./1474" [pid 12463] <... bpf resumed>) = 6 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] rmdir("./1455" [pid 12464] <... bpf resumed>) = 6 [pid 12463] exit_group(0 [pid 12461] <... bpf resumed>) = 6 [pid 5067] <... rmdir resumed>) = 0 [pid 12464] exit_group(0 [pid 12463] <... exit_group resumed>) = ? [pid 12461] exit_group(0 [pid 5068] mkdir("./1475", 0777 [pid 12461] <... exit_group resumed>) = ? [pid 5067] mkdir("./1456", 0777 [pid 12464] <... exit_group resumed>) = ? [pid 12461] +++ exited with 0 +++ [pid 5067] <... mkdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12461, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12466 attached ./strace-static-x86_64: Process 12465 attached [pid 12466] set_robust_list(0x5555686ec660, 24 [pid 12465] set_robust_list(0x5555686ec660, 24 [pid 5066] umount2("./1429", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12466 [pid 5066] openat(AT_FDCWD, "./1429", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12465 [pid 5066] newfstatat(3, "", [pid 12466] <... set_robust_list resumed>) = 0 [pid 12465] <... set_robust_list resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1429/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12466] chdir("./1475" [pid 12465] chdir("./1456" [pid 12464] +++ exited with 0 +++ [pid 12463] +++ exited with 0 +++ [pid 12466] <... chdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12463, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12464, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1429/binderfs", [pid 12466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12465] <... chdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./1510", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./1429/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1496", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1510", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 12466] <... prctl resumed>) = 0 [pid 12465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12466] setpgid(0, 0 [pid 12465] <... prctl resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5069] openat(AT_FDCWD, "./1496", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 12466] <... setpgid resumed>) = 0 [pid 12465] setpgid(0, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 5069] newfstatat(3, "", [pid 5066] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1429" [pid 12465] <... setpgid resumed>) = 0 [pid 5071] umount2("./1510/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 12466] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12466] write(3, "1000", 4 [pid 12465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12466] <... write resumed>) = 4 [pid 12466] close(3 [pid 5071] newfstatat(AT_FDCWD, "./1510/binderfs", [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] mkdir("./1430", 0777 [pid 12466] <... close resumed>) = 0 [pid 12465] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./1496/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12466] symlink("/dev/binderfs", "./binderfs" [pid 12465] write(3, "1000", 4 [pid 5071] unlink("./1510/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12466] <... symlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1496/binderfs", [pid 12466] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12465] <... write resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12465] close(3) = 0 [pid 12466] <... bpf resumed>) = 3 [pid 12465] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 5069] unlink("./1496/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12467 attached [pid 12466] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12465] <... symlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5071] close(3 [pid 12465] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 12467] set_robust_list(0x5555686ec660, 24 [pid 12466] <... bpf resumed>) = 4 [pid 12465] <... bpf resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12467 [pid 12467] <... set_robust_list resumed>) = 0 [pid 12466] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12465] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1510" [pid 5069] close(3 [pid 12467] chdir("./1430" [pid 12465] <... bpf resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1496") = 0 [pid 5071] mkdir("./1511", 0777 [pid 12467] <... chdir resumed>) = 0 [pid 12466] <... bpf resumed>) = 5 [pid 12465] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... mkdir resumed>) = 0 [pid 12467] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12466] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12467] <... prctl resumed>) = 0 [pid 12467] setpgid(0, 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] mkdir("./1497", 0777./strace-static-x86_64: Process 12468 attached [pid 12467] <... setpgid resumed>) = 0 [pid 12466] <... bpf resumed>) = 6 [pid 12465] <... bpf resumed>) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 12467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12468] set_robust_list(0x5555686ec660, 24 [pid 12466] exit_group(0 [pid 12465] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12469 attached [pid 12468] <... set_robust_list resumed>) = 0 [pid 12467] <... openat resumed>) = 3 [pid 12466] <... exit_group resumed>) = ? [pid 12465] <... bpf resumed>) = 6 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12468 [pid 12465] exit_group(0 [pid 12468] chdir("./1511" [pid 12467] write(3, "1000", 4 [pid 12469] set_robust_list(0x5555686ec660, 24 [pid 12467] <... write resumed>) = 4 [pid 12465] <... exit_group resumed>) = ? [pid 12469] <... set_robust_list resumed>) = 0 [pid 12467] close(3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12469 [pid 12465] +++ exited with 0 +++ [pid 12467] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12465, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12469] chdir("./1497" [pid 12468] <... chdir resumed>) = 0 [pid 12467] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12469] <... chdir resumed>) = 0 [pid 12468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12468] setpgid(0, 0 [pid 12467] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12468] <... setpgid resumed>) = 0 [pid 12466] +++ exited with 0 +++ [pid 12469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12467] <... bpf resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12466, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12469] <... prctl resumed>) = 0 [pid 12468] <... openat resumed>) = 3 [pid 12467] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12469] setpgid(0, 0 [pid 12468] write(3, "1000", 4 [pid 12467] <... bpf resumed>) = 4 [pid 5067] umount2("./1456", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... restart_syscall resumed>) = 0 [pid 12469] <... setpgid resumed>) = 0 [pid 12468] <... write resumed>) = 4 [pid 12467] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12468] close(3) = 0 [pid 5067] openat(AT_FDCWD, "./1456", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12469] <... openat resumed>) = 3 [pid 12468] symlink("/dev/binderfs", "./binderfs" [pid 12467] <... bpf resumed>) = 5 [pid 5068] umount2("./1475", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12469] write(3, "1000", 4 [pid 12468] <... symlink resumed>) = 0 [pid 12467] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 12469] <... write resumed>) = 4 [pid 12468] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12467] <... bpf resumed>) = 6 [pid 5068] openat(AT_FDCWD, "./1475", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 12469] close(3 [pid 12468] <... bpf resumed>) = 3 [pid 12467] exit_group(0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12469] <... close resumed>) = 0 [pid 12468] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12467] <... exit_group resumed>) = ? [pid 5068] newfstatat(3, "", [pid 12469] symlink("/dev/binderfs", "./binderfs" [pid 12468] <... bpf resumed>) = 4 [pid 5067] getdents64(3, [pid 12469] <... symlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12469] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12467] +++ exited with 0 +++ [pid 12468] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1456/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12469] <... bpf resumed>) = 3 [pid 5068] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12467, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12469] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12468] <... bpf resumed>) = 5 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(AT_FDCWD, "./1456/binderfs", [pid 12469] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12468] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] umount2("./1475/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./1456/binderfs" [pid 12469] <... bpf resumed>) = 5 [pid 5068] newfstatat(AT_FDCWD, "./1475/binderfs", [pid 5067] <... unlink resumed>) = 0 [pid 5066] umount2("./1430", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12469] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1430", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] unlink("./1475/binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5067] close(3 [pid 5066] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./1456" [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12469] <... bpf resumed>) = 6 [pid 12468] <... bpf resumed>) = 6 [pid 12469] exit_group(0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12469] <... exit_group resumed>) = ? [pid 5066] umount2("./1430/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12469] +++ exited with 0 +++ [pid 12468] exit_group(0 [pid 5068] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12469, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1430/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12468] <... exit_group resumed>) = ? [pid 5068] rmdir("./1475" [pid 5067] mkdir("./1457", 0777 [pid 5066] unlink("./1430/binderfs") = 0 [pid 12468] +++ exited with 0 +++ [pid 5069] umount2("./1497", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./1476", 0777 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12468, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] openat(AT_FDCWD, "./1497", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5071] umount2("./1511", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12470 attached ) = -1 EINVAL (Invalid argument) [pid 5069] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12470 [pid 5066] <... close resumed>) = 0 [pid 12470] set_robust_list(0x5555686ec660, 24 [pid 5071] openat(AT_FDCWD, "./1511", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] newfstatat(3, "", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] rmdir("./1430"./strace-static-x86_64: Process 12471 attached [pid 12470] <... set_robust_list resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12471 [pid 12471] set_robust_list(0x5555686ec660, 24 [pid 12470] chdir("./1457" [pid 5071] newfstatat(3, "", [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] mkdir("./1431", 0777 [pid 12471] <... set_robust_list resumed>) = 0 [pid 12471] chdir("./1476" [pid 12470] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./1497/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12470] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12471] <... chdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1497/binderfs", [pid 12471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12470] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12471] <... prctl resumed>) = 0 [pid 12471] setpgid(0, 0 [pid 5069] unlink("./1497/binderfs" [pid 12470] setpgid(0, 0 [pid 5071] umount2("./1511/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12471] <... setpgid resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12470] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12472 attached [pid 12471] <... openat resumed>) = 3 [pid 12470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(AT_FDCWD, "./1511/binderfs", [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12472] set_robust_list(0x5555686ec660, 24 [pid 12471] write(3, "1000", 4 [pid 12472] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] close(3 [pid 12471] <... write resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 12471] close(3 [pid 5071] unlink("./1511/binderfs" [pid 12471] <... close resumed>) = 0 [pid 12470] <... openat resumed>) = 3 [pid 5069] rmdir("./1497" [pid 12472] chdir("./1431" [pid 12471] symlink("/dev/binderfs", "./binderfs" [pid 12470] write(3, "1000", 4 [pid 5071] <... unlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12472 [pid 5069] <... rmdir resumed>) = 0 [pid 12472] <... chdir resumed>) = 0 [pid 12471] <... symlink resumed>) = 0 [pid 12470] <... write resumed>) = 4 [pid 5069] mkdir("./1498", 0777 [pid 12472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12470] close(3 [pid 5071] getdents64(3, [pid 5069] <... mkdir resumed>) = 0 [pid 12472] <... prctl resumed>) = 0 [pid 12471] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12470] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12470] symlink("/dev/binderfs", "./binderfs" [pid 5071] close(3 [pid 12472] setpgid(0, 0 [pid 12471] <... bpf resumed>) = 3 [pid 12470] <... symlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12472] <... setpgid resumed>) = 0 [pid 12471] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12473 attached [pid 12472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12470] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1511" [pid 12473] set_robust_list(0x5555686ec660, 24 [pid 12472] <... openat resumed>) = 3 [pid 12471] <... bpf resumed>) = 4 [pid 12472] write(3, "1000", 4 [pid 5071] <... rmdir resumed>) = 0 [pid 12472] <... write resumed>) = 4 [pid 12472] close(3) = 0 [pid 12472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12473] <... set_robust_list resumed>) = 0 [pid 12471] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12470] <... bpf resumed>) = 3 [pid 5071] mkdir("./1512", 0777 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12473 [pid 12473] chdir("./1498" [pid 12470] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12472] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 12472] <... bpf resumed>) = 3 [pid 12472] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12471] <... bpf resumed>) = 5 [pid 12473] <... chdir resumed>) = 0 [pid 12472] <... bpf resumed>) = 4 [pid 12470] <... bpf resumed>) = 4 [pid 12472] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12473] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12471] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12470] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12473] <... prctl resumed>) = 0 [pid 12472] <... bpf resumed>) = 5 [pid 12472] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12473] setpgid(0, 0 [pid 12472] <... bpf resumed>) = 6 [pid 12471] <... bpf resumed>) = 6 [pid 12472] exit_group(0) = ? [pid 12473] <... setpgid resumed>) = 0 [pid 12470] <... bpf resumed>) = 5 [pid 12471] exit_group(0) = ? [pid 12473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 12474 attached ) = 3 [pid 12470] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12474] set_robust_list(0x5555686ec660, 24 [pid 12473] write(3, "1000", 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12474 [pid 12474] <... set_robust_list resumed>) = 0 [pid 12473] <... write resumed>) = 4 [pid 12474] chdir("./1512" [pid 12473] close(3 [pid 12474] <... chdir resumed>) = 0 [pid 12473] <... close resumed>) = 0 [pid 12473] symlink("/dev/binderfs", "./binderfs" [pid 12474] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12474] setpgid(0, 0 [pid 12473] <... symlink resumed>) = 0 [pid 12474] <... setpgid resumed>) = 0 [pid 12473] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12473] <... bpf resumed>) = 3 [pid 12473] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12472] +++ exited with 0 +++ [pid 12471] +++ exited with 0 +++ [pid 12474] <... openat resumed>) = 3 [pid 12473] <... bpf resumed>) = 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12472, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12471, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12474] write(3, "1000", 4 [pid 12473] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12474] <... write resumed>) = 4 [pid 12474] close(3) = 0 [pid 12474] symlink("/dev/binderfs", "./binderfs" [pid 12473] <... bpf resumed>) = 5 [pid 5066] umount2("./1431", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12473] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12474] <... symlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1431", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12474] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1476", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 12474] <... bpf resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./1476", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", [pid 12474] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12474] <... bpf resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12474] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1431/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1476/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12474] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12474] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] newfstatat(AT_FDCWD, "./1476/binderfs", [pid 5066] newfstatat(AT_FDCWD, "./1431/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1476/binderfs" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1431/binderfs" [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 12474] <... bpf resumed>) = 6 [pid 12473] <... bpf resumed>) = 6 [pid 12470] <... bpf resumed>) = 6 [pid 5066] getdents64(3, [pid 12474] exit_group(0 [pid 12473] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12470] exit_group(0 [pid 5068] close(3 [pid 12473] <... exit_group resumed>) = ? [pid 5066] close(3 [pid 12474] <... exit_group resumed>) = ? [pid 12470] <... exit_group resumed>) = ? [pid 5068] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1431" [pid 12473] +++ exited with 0 +++ [pid 5068] rmdir("./1476" [pid 5066] <... rmdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12473, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] <... rmdir resumed>) = 0 [pid 5069] umount2("./1498", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1432", 0777 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1498", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./1477", 0777 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] newfstatat(3, "", [pid 5066] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] getdents64(3, ./strace-static-x86_64: Process 12475 attached 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1498/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12476 attached [pid 12475] set_robust_list(0x5555686ec660, 24 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12475 [pid 12475] <... set_robust_list resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1498/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12476] set_robust_list(0x5555686ec660, 24 [pid 5069] unlink("./1498/binderfs" [pid 12476] <... set_robust_list resumed>) = 0 [pid 12475] chdir("./1477" [pid 12470] +++ exited with 0 +++ [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12476 [pid 12476] chdir("./1432" [pid 12475] <... chdir resumed>) = 0 [pid 12474] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 12476] <... chdir resumed>) = 0 [pid 12475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12470, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12476] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12475] <... prctl resumed>) = 0 [pid 12476] <... prctl resumed>) = 0 [pid 12475] setpgid(0, 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12474, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] close(3 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12476] setpgid(0, 0 [pid 12475] <... setpgid resumed>) = 0 [pid 5071] umount2("./1512", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... close resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12476] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] rmdir("./1498" [pid 12476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1512", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1457", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5069] mkdir("./1499", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1457", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12475] <... openat resumed>) = 3 [pid 5071] umount2("./1512/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12476] <... openat resumed>) = 3 [pid 12475] write(3, "1000", 4 [pid 12476] write(3, "1000", 4 [pid 12475] <... write resumed>) = 4 [pid 12476] <... write resumed>) = 4 [pid 12475] close(3) = 0 [pid 12476] close(3) = 0 [pid 12476] symlink("/dev/binderfs", "./binderfs" [pid 12475] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12476] <... symlink resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 [pid 12476] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12475] <... symlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1512/binderfs", [pid 5067] newfstatat(3, "", ./strace-static-x86_64: Process 12477 attached [pid 12476] <... bpf resumed>) = 3 [pid 12475] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12477 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12477] set_robust_list(0x5555686ec660, 24 [pid 12476] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12475] <... bpf resumed>) = 3 [pid 5071] unlink("./1512/binderfs" [pid 5067] getdents64(3, [pid 12477] <... set_robust_list resumed>) = 0 [pid 12476] <... bpf resumed>) = 4 [pid 12475] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12477] chdir("./1499" [pid 12476] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12475] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 5067] umount2("./1457/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12477] <... chdir resumed>) = 0 [pid 12475] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12477] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12476] <... bpf resumed>) = 5 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12477] <... prctl resumed>) = 0 [pid 12477] setpgid(0, 0 [pid 5071] close(3 [pid 5067] newfstatat(AT_FDCWD, "./1457/binderfs", [pid 12477] <... setpgid resumed>) = 0 [pid 12476] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12475] <... bpf resumed>) = 5 [pid 5071] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] rmdir("./1512" [pid 5067] unlink("./1457/binderfs" [pid 12477] <... openat resumed>) = 3 [pid 12476] <... bpf resumed>) = 6 [pid 12475] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12477] write(3, "1000", 4) = 4 [pid 12475] <... bpf resumed>) = 6 [pid 12477] close(3 [pid 12476] exit_group(0 [pid 5071] mkdir("./1513", 0777 [pid 5067] getdents64(3, [pid 12477] <... close resumed>) = 0 [pid 12476] <... exit_group resumed>) = ? [pid 12475] exit_group(0 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12477] symlink("/dev/binderfs", "./binderfs" [pid 12475] <... exit_group resumed>) = ? [pid 12477] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] close(3) = 0 [pid 5067] rmdir("./1457"./strace-static-x86_64: Process 12478 attached [pid 12477] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12475] +++ exited with 0 +++ [pid 5067] <... rmdir resumed>) = 0 [pid 12478] set_robust_list(0x5555686ec660, 24 [pid 12477] <... bpf resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12478 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12475, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] mkdir("./1458", 0777 [pid 12478] <... set_robust_list resumed>) = 0 [pid 12477] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12478] chdir("./1513" [pid 12476] +++ exited with 0 +++ [pid 5067] <... mkdir resumed>) = 0 [pid 12478] <... chdir resumed>) = 0 [pid 12477] <... bpf resumed>) = 4 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12476, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12477] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12479 attached [pid 12478] setpgid(0, 0 [pid 5068] umount2("./1477", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12478] <... setpgid resumed>) = 0 [pid 12478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12479] set_robust_list(0x5555686ec660, 24 [pid 12478] <... openat resumed>) = 3 [pid 12477] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12479 [pid 12477] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12479] <... set_robust_list resumed>) = 0 [pid 12478] write(3, "1000", 4 [pid 5068] openat(AT_FDCWD, "./1477", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12479] chdir("./1458" [pid 12478] <... write resumed>) = 4 [pid 12477] <... bpf resumed>) = 6 [pid 5068] <... openat resumed>) = 3 [pid 5066] umount2("./1432", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12479] <... chdir resumed>) = 0 [pid 12478] close(3 [pid 12477] exit_group(0 [pid 5068] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12479] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12478] <... close resumed>) = 0 [pid 12477] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./1432", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12479] <... prctl resumed>) = 0 [pid 12478] symlink("/dev/binderfs", "./binderfs" [pid 12479] setpgid(0, 0 [pid 12478] <... symlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 12479] <... setpgid resumed>) = 0 [pid 12478] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12477] +++ exited with 0 +++ [pid 5066] newfstatat(3, "", [pid 12478] <... bpf resumed>) = 3 [pid 5068] umount2("./1477/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12479] <... openat resumed>) = 3 [pid 12478] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12477, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12479] write(3, "1000", 4 [pid 12478] <... bpf resumed>) = 4 [pid 5069] umount2("./1499", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./1477/binderfs", [pid 5066] getdents64(3, [pid 12479] <... write resumed>) = 4 [pid 12478] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12479] close(3 [pid 5069] openat(AT_FDCWD, "./1499", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] umount2("./1432/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12479] <... close resumed>) = 0 [pid 12478] <... bpf resumed>) = 5 [pid 5069] newfstatat(3, "", [pid 5068] unlink("./1477/binderfs" [pid 5066] newfstatat(AT_FDCWD, "./1432/binderfs", [pid 12478] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12479] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1432/binderfs" [pid 12479] <... symlink resumed>) = 0 [pid 12478] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 5068] <... unlink resumed>) = 0 [pid 12479] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12478] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 12478] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12479] <... bpf resumed>) = 3 [pid 5069] umount2("./1499/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 5066] getdents64(3, [pid 12479] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 12478] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12478, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] newfstatat(AT_FDCWD, "./1499/binderfs", [pid 5068] rmdir("./1477" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12479] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] close(3 [pid 12479] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] unlink("./1499/binderfs" [pid 5066] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] rmdir("./1432" [pid 5068] mkdir("./1478", 0777) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12479] <... bpf resumed>) = 5 [pid 5069] <... unlink resumed>) = 0 [pid 5066] mkdir("./1433", 0777 [pid 12479] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 12479] <... bpf resumed>) = 6 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12480 attached [pid 5071] umount2("./1513", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12480] set_robust_list(0x5555686ec660, 24 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12480] <... set_robust_list resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1513", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] close(3 [pid 12480] chdir("./1478" [pid 5069] <... close resumed>) = 0 [pid 12479] exit_group(0 [pid 5069] rmdir("./1499") = 0 [pid 12479] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12481 attached [pid 12480] <... chdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] mkdir("./1500", 0777 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12480 [pid 12481] set_robust_list(0x5555686ec660, 24 [pid 12480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12479] +++ exited with 0 +++ [pid 5071] newfstatat(3, "", [pid 5069] <... mkdir resumed>) = 0 [pid 12480] <... prctl resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12479, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12480] setpgid(0, 0 [pid 12481] <... set_robust_list resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12481 [pid 12481] chdir("./1433" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12481] <... chdir resumed>) = 0 [pid 12480] <... setpgid resumed>) = 0 [pid 5071] getdents64(3, [pid 12481] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 12482 attached ) = 0 [pid 12480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12482] set_robust_list(0x5555686ec660, 24 [pid 12481] setpgid(0, 0 [pid 12480] <... openat resumed>) = 3 [pid 5071] umount2("./1513/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12482 [pid 12482] <... set_robust_list resumed>) = 0 [pid 12481] <... setpgid resumed>) = 0 [pid 12480] write(3, "1000", 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12482] chdir("./1500" [pid 12481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12480] <... write resumed>) = 4 [pid 12482] <... chdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1513/binderfs", [pid 5067] umount2("./1458", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12482] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12482] <... prctl resumed>) = 0 [pid 12481] <... openat resumed>) = 3 [pid 12480] close(3 [pid 5071] unlink("./1513/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12482] setpgid(0, 0 [pid 12481] write(3, "1000", 4 [pid 12480] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1458", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12482] <... setpgid resumed>) = 0 [pid 12480] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12481] <... write resumed>) = 4 [pid 12480] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] newfstatat(3, "", [pid 12481] close(3 [pid 12480] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12482] <... openat resumed>) = 3 [pid 12481] <... close resumed>) = 0 [pid 5071] close(3 [pid 12482] write(3, "1000", 4 [pid 12481] symlink("/dev/binderfs", "./binderfs" [pid 12480] <... bpf resumed>) = 3 [pid 5067] getdents64(3, [pid 12482] <... write resumed>) = 4 [pid 12481] <... symlink resumed>) = 0 [pid 12480] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 12482] close(3 [pid 12481] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12480] <... bpf resumed>) = 4 [pid 5071] rmdir("./1513" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12482] <... close resumed>) = 0 [pid 12482] symlink("/dev/binderfs", "./binderfs" [pid 12481] <... bpf resumed>) = 3 [pid 12480] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] umount2("./1458/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12482] <... symlink resumed>) = 0 [pid 12481] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 12482] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12480] <... bpf resumed>) = 5 [pid 5071] mkdir("./1514", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12482] <... bpf resumed>) = 3 [pid 12481] <... bpf resumed>) = 4 [pid 12480] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] newfstatat(AT_FDCWD, "./1458/binderfs", [pid 5071] <... mkdir resumed>) = 0 [pid 12482] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12481] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12480] <... bpf resumed>) = 6 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12482] <... bpf resumed>) = 4 [pid 12480] exit_group(0 [pid 5067] unlink("./1458/binderfs") = 0 [pid 12482] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12480] <... exit_group resumed>) = ? [pid 12481] <... bpf resumed>) = 5 ./strace-static-x86_64: Process 12483 attached [pid 12482] <... bpf resumed>) = 5 [pid 12481] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12483 [pid 5067] getdents64(3, [pid 12483] set_robust_list(0x5555686ec660, 24 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12483] <... set_robust_list resumed>) = 0 [pid 12482] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12480] +++ exited with 0 +++ [pid 5067] close(3 [pid 12483] chdir("./1514") = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12480, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... close resumed>) = 0 [pid 12483] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] umount2("./1478", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1458" [pid 12483] <... prctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12483] setpgid(0, 0 [pid 5068] openat(AT_FDCWD, "./1478", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12483] <... setpgid resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 12483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] newfstatat(3, "", [pid 5067] mkdir("./1459", 0777 [pid 12483] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 12483] write(3, "1000", 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1478/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1478/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12483] <... write resumed>) = 4 [pid 5068] unlink("./1478/binderfs" [pid 12483] close(3 [pid 12482] <... bpf resumed>) = 6 [pid 12481] <... bpf resumed>) = 6 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12483] <... close resumed>) = 0 ./strace-static-x86_64: Process 12484 attached [pid 12483] symlink("/dev/binderfs", "./binderfs" [pid 12482] exit_group(0 [pid 12481] exit_group(0 [pid 5068] <... unlink resumed>) = 0 [pid 12484] set_robust_list(0x5555686ec660, 24 [pid 12483] <... symlink resumed>) = 0 [pid 12482] <... exit_group resumed>) = ? [pid 12481] <... exit_group resumed>) = ? [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12484 [pid 12484] <... set_robust_list resumed>) = 0 [pid 5068] getdents64(3, [pid 12484] chdir("./1459" [pid 12483] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12484] <... chdir resumed>) = 0 [pid 12483] <... bpf resumed>) = 3 [pid 5068] close(3 [pid 12484] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12483] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... close resumed>) = 0 [pid 12484] <... prctl resumed>) = 0 [pid 12484] setpgid(0, 0 [pid 5068] rmdir("./1478" [pid 12484] <... setpgid resumed>) = 0 [pid 12483] <... bpf resumed>) = 4 [pid 12483] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... rmdir resumed>) = 0 [pid 12484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12483] <... bpf resumed>) = 5 [pid 5068] mkdir("./1479", 0777 [pid 12483] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12481] +++ exited with 0 +++ [pid 12484] write(3, "1000", 4) = 4 [pid 12482] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12481, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12484] close(3) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12482, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12484] symlink("/dev/binderfs", "./binderfs" [pid 5069] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 12485 attached [pid 12484] <... symlink resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./1433", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12485] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12485 [pid 12485] <... set_robust_list resumed>) = 0 [pid 12484] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12485] chdir("./1479" [pid 12484] <... bpf resumed>) = 3 [pid 5069] umount2("./1500", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./1433", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12485] <... chdir resumed>) = 0 [pid 12484] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] openat(AT_FDCWD, "./1500", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 3 [pid 12485] <... prctl resumed>) = 0 [pid 12484] <... bpf resumed>) = 4 [pid 12485] setpgid(0, 0 [pid 5069] <... openat resumed>) = 3 [pid 12485] <... setpgid resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 12485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12484] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] newfstatat(3, "", [pid 12485] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12485] write(3, "1000", 4 [pid 5069] getdents64(3, [pid 12485] <... write resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12485] close(3 [pid 12484] <... bpf resumed>) = 5 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12483] <... bpf resumed>) = 6 [pid 12485] <... close resumed>) = 0 [pid 5069] umount2("./1500/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12485] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12485] <... symlink resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1500/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12485] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12484] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12483] exit_group(0 [pid 5069] unlink("./1500/binderfs" [pid 5066] getdents64(3, [pid 12483] <... exit_group resumed>) = ? [pid 12485] <... bpf resumed>) = 3 [pid 12484] <... bpf resumed>) = 6 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12485] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12484] exit_group(0 [pid 5069] getdents64(3, [pid 12485] <... bpf resumed>) = 4 [pid 12484] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1433/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12485] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1433/binderfs", [pid 12485] <... bpf resumed>) = 5 [pid 5069] <... close resumed>) = 0 [pid 12485] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] rmdir("./1500" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1433/binderfs") = 0 [pid 5066] getdents64(3, [pid 5069] <... rmdir resumed>) = 0 [pid 12484] +++ exited with 0 +++ [pid 12483] +++ exited with 0 +++ [pid 5069] mkdir("./1501", 0777 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12483, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12484, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... close resumed>) = 0 [pid 5071] umount2("./1514", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1459", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1433" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12486 attached [pid 5071] openat(AT_FDCWD, "./1514", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12486 [pid 5067] openat(AT_FDCWD, "./1459", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12486] set_robust_list(0x5555686ec660, 24) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 12485] <... bpf resumed>) = 6 [pid 5067] newfstatat(3, "", [pid 12486] chdir("./1501" [pid 5071] newfstatat(3, "", [pid 12486] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12485] exit_group(0 [pid 5071] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1434", 0777 [pid 12486] setpgid(0, 0 [pid 12485] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] getdents64(3, [pid 12486] <... setpgid resumed>) = 0 [pid 5071] umount2("./1514/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(AT_FDCWD, "./1514/binderfs", [pid 12486] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12486] write(3, "1000", 4 [pid 12485] +++ exited with 0 +++ [pid 5071] unlink("./1514/binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12486] <... write resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12485, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] umount2("./1479", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12487 attached [pid 12486] close(3 [pid 5071] getdents64(3, [pid 5068] openat(AT_FDCWD, "./1479", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1459/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12486] <... close resumed>) = 0 [pid 12486] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 3 [pid 12487] set_robust_list(0x5555686ec660, 24 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] newfstatat(3, "", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12487 [pid 12486] <... symlink resumed>) = 0 [pid 12487] <... set_robust_list resumed>) = 0 [pid 5071] close(3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1459/binderfs", [pid 12487] chdir("./1434" [pid 12486] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12487] <... chdir resumed>) = 0 [pid 12486] <... bpf resumed>) = 3 [pid 5071] rmdir("./1514" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] unlink("./1459/binderfs" [pid 12487] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12486] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12487] <... prctl resumed>) = 0 [pid 12486] <... bpf resumed>) = 4 [pid 5071] mkdir("./1515", 0777 [pid 5068] umount2("./1479/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 12487] setpgid(0, 0 [pid 12486] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12487] <... setpgid resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1479/binderfs", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12486] <... bpf resumed>) = 5 [pid 12487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] close(3 [pid 12486] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... close resumed>) = 0 [pid 5068] unlink("./1479/binderfs" [pid 5067] rmdir("./1459") = 0 [pid 5067] mkdir("./1460", 0777./strace-static-x86_64: Process 12488 attached [pid 12487] <... openat resumed>) = 3 [pid 12486] <... bpf resumed>) = 6 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12488 [pid 5068] <... unlink resumed>) = 0 [pid 12488] set_robust_list(0x5555686ec660, 24 [pid 12487] write(3, "1000", 4 [pid 12486] exit_group(0 [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 12488] <... set_robust_list resumed>) = 0 [pid 12487] <... write resumed>) = 4 [pid 12486] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12488] chdir("./1515" [pid 12487] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12488] <... chdir resumed>) = 0 [pid 12487] <... close resumed>) = 0 [pid 12486] +++ exited with 0 +++ [pid 5068] close(3 [pid 12488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12487] symlink("/dev/binderfs", "./binderfs" [pid 12488] <... prctl resumed>) = 0 [pid 12487] <... symlink resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12488] setpgid(0, 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12486, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] rmdir("./1479"./strace-static-x86_64: Process 12489 attached [pid 12488] <... setpgid resumed>) = 0 [pid 12487] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... restart_syscall resumed>) = 0 [pid 12489] set_robust_list(0x5555686ec660, 24 [pid 12488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... rmdir resumed>) = 0 [pid 12488] <... openat resumed>) = 3 [pid 12487] <... bpf resumed>) = 3 [pid 12489] <... set_robust_list resumed>) = 0 [pid 12488] write(3, "1000", 4 [pid 5069] umount2("./1501", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./1480", 0777 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12489 [pid 12489] chdir("./1460" [pid 12487] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12488] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12488] close(3 [pid 12487] <... bpf resumed>) = 4 [pid 12489] <... chdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1501", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12488] <... close resumed>) = 0 [pid 12487] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 12489] <... prctl resumed>) = 0 [pid 12488] symlink("/dev/binderfs", "./binderfs" [pid 12489] setpgid(0, 0 [pid 12487] <... bpf resumed>) = 5 [pid 5069] newfstatat(3, "", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12488] <... symlink resumed>) = 0 [pid 12487] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12489] <... setpgid resumed>) = 0 [pid 12488] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12487] <... bpf resumed>) = 6 [pid 12488] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12487] exit_group(0./strace-static-x86_64: Process 12490 attached [pid 12489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12488] <... bpf resumed>) = 4 [pid 12487] <... exit_group resumed>) = ? [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12490] set_robust_list(0x5555686ec660, 24 [pid 12489] <... openat resumed>) = 3 [pid 12488] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12490 [pid 12490] <... set_robust_list resumed>) = 0 [pid 12489] write(3, "1000", 4 [pid 12487] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12490] chdir("./1480" [pid 12489] <... write resumed>) = 4 [pid 5069] umount2("./1501/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12487, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 12489] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12490] <... chdir resumed>) = 0 [pid 12489] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1501/binderfs", [pid 12490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12490] setpgid(0, 0) = 0 [pid 12489] symlink("/dev/binderfs", "./binderfs" [pid 12488] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12489] <... symlink resumed>) = 0 [pid 12488] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] unlink("./1501/binderfs" [pid 12489] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12490] <... openat resumed>) = 3 [pid 12489] <... bpf resumed>) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 12490] write(3, "1000", 4) = 4 [pid 12489] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5066] umount2("./1434", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12490] close(3) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12490] symlink("/dev/binderfs", "./binderfs" [pid 12489] <... bpf resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./1434", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12490] <... symlink resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 12489] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12490] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12490] <... bpf resumed>) = 3 [pid 12488] <... bpf resumed>) = 6 [pid 5069] <... close resumed>) = 0 [pid 12490] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12488] exit_group(0 [pid 5069] rmdir("./1501" [pid 5066] getdents64(3, [pid 12489] <... bpf resumed>) = 5 [pid 12490] <... bpf resumed>) = 4 [pid 12489] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12488] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12490] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] umount2("./1434/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12490] <... bpf resumed>) = 5 [pid 5069] mkdir("./1502", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12489] <... bpf resumed>) = 6 [pid 5066] newfstatat(AT_FDCWD, "./1434/binderfs", [pid 12489] exit_group(0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12489] <... exit_group resumed>) = ? [pid 12490] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] unlink("./1434/binderfs"./strace-static-x86_64: Process 12491 attached [pid 12491] set_robust_list(0x5555686ec660, 24) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12491] chdir("./1502" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12491 [pid 12491] <... chdir resumed>) = 0 [pid 12491] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12491] setpgid(0, 0) = 0 [pid 12491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] getdents64(3, [pid 12491] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 12491] write(3, "1000", 4 [pid 5066] rmdir("./1434" [pid 12491] <... write resumed>) = 4 [pid 12491] close(3) = 0 [pid 12490] <... bpf resumed>) = 6 [pid 12488] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 12491] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] mkdir("./1435", 0777 [pid 12491] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12490] exit_group(0 [pid 12491] <... bpf resumed>) = 3 [pid 12490] <... exit_group resumed>) = ? [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12488, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... mkdir resumed>) = 0 [pid 12491] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12491] <... bpf resumed>) = 4 [pid 5071] umount2("./1515", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1515", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12492 attached [pid 12491] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... openat resumed>) = 3 [pid 12492] set_robust_list(0x5555686ec660, 24 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 12492] <... set_robust_list resumed>) = 0 [pid 12491] <... bpf resumed>) = 5 [pid 12490] +++ exited with 0 +++ [pid 12489] +++ exited with 0 +++ [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12492 [pid 12492] chdir("./1435" [pid 12491] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12490, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12489, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12492] <... chdir resumed>) = 0 [pid 5071] umount2("./1515/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12492] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12492] <... prctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1515/binderfs", [pid 12492] setpgid(0, 0 [pid 5068] umount2("./1480", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12492] <... setpgid resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] openat(AT_FDCWD, "./1480", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1460", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12492] <... openat resumed>) = 3 [pid 5071] unlink("./1515/binderfs" [pid 5067] openat(AT_FDCWD, "./1460", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12492] write(3, "1000", 4 [pid 5068] newfstatat(3, "", [pid 12492] <... write resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12492] close(3) = 0 [pid 5068] getdents64(3, [pid 12492] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] getdents64(3, [pid 5067] newfstatat(3, "", [pid 12492] <... symlink resumed>) = 0 [pid 5068] umount2("./1480/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12492] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12491] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12492] <... bpf resumed>) = 3 [pid 5071] close(3 [pid 5067] getdents64(3, [pid 12491] exit_group(0 [pid 5071] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] rmdir("./1515" [pid 5068] newfstatat(AT_FDCWD, "./1480/binderfs", [pid 12492] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12491] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1480/binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] umount2("./1460/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] mkdir("./1516", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1460/binderfs", [pid 12491] +++ exited with 0 +++ [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12492] <... bpf resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] unlink("./1460/binderfs" [pid 12492] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12493 attached [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12491, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... unlink resumed>) = 0 [pid 12493] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12493 [pid 5067] getdents64(3, [pid 12493] <... set_robust_list resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12493] chdir("./1516" [pid 12492] <... bpf resumed>) = 5 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 12493] <... chdir resumed>) = 0 [pid 5068] close(3 [pid 5067] rmdir("./1460" [pid 12493] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12492] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] umount2("./1502", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5068] rmdir("./1480" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12493] <... prctl resumed>) = 0 [pid 12493] setpgid(0, 0 [pid 5067] mkdir("./1461", 0777 [pid 12493] <... setpgid resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1502", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12494 attached [pid 5069] getdents64(3, [pid 5068] mkdir("./1481", 0777 [pid 12494] set_robust_list(0x5555686ec660, 24 [pid 12493] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12494] <... set_robust_list resumed>) = 0 [pid 12493] write(3, "1000", 4 [pid 5069] umount2("./1502/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12494 [pid 12494] chdir("./1461" [pid 12493] <... write resumed>) = 4 [pid 12493] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12494] <... chdir resumed>) = 0 [pid 12493] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1502/binderfs", ./strace-static-x86_64: Process 12495 attached [pid 12494] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12493] symlink("/dev/binderfs", "./binderfs" [pid 12495] set_robust_list(0x5555686ec660, 24 [pid 12494] <... prctl resumed>) = 0 [pid 12493] <... symlink resumed>) = 0 [pid 12492] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12495 [pid 12493] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12495] <... set_robust_list resumed>) = 0 [pid 12494] setpgid(0, 0 [pid 12493] <... bpf resumed>) = 3 [pid 12492] exit_group(0 [pid 5069] unlink("./1502/binderfs" [pid 12493] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12495] chdir("./1481" [pid 12494] <... setpgid resumed>) = 0 [pid 12492] <... exit_group resumed>) = ? [pid 5069] <... unlink resumed>) = 0 [pid 12493] <... bpf resumed>) = 4 [pid 12493] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 12492] +++ exited with 0 +++ [pid 12493] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12495] <... chdir resumed>) = 0 [pid 12494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] getdents64(3, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12492, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12495] <... prctl resumed>) = 0 [pid 12494] <... openat resumed>) = 3 [pid 5069] close(3 [pid 12495] setpgid(0, 0 [pid 12494] write(3, "1000", 4 [pid 5069] <... close resumed>) = 0 [pid 12495] <... setpgid resumed>) = 0 [pid 12494] <... write resumed>) = 4 [pid 5069] rmdir("./1502" [pid 12495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12494] close(3 [pid 5066] umount2("./1435", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12495] <... openat resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12495] write(3, "1000", 4 [pid 12494] <... close resumed>) = 0 [pid 5069] mkdir("./1503", 0777 [pid 5066] openat(AT_FDCWD, "./1435", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12494] symlink("/dev/binderfs", "./binderfs" [pid 12495] <... write resumed>) = 4 [pid 12493] <... bpf resumed>) = 6 [pid 5066] <... openat resumed>) = 3 [pid 12495] close(3 [pid 12494] <... symlink resumed>) = 0 [pid 12493] exit_group(0 [pid 12495] <... close resumed>) = 0 [pid 12495] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... mkdir resumed>) = 0 [pid 12495] <... symlink resumed>) = 0 [pid 12493] <... exit_group resumed>) = ? [pid 5066] newfstatat(3, "", [pid 12494] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12495] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12494] <... bpf resumed>) = 3 [pid 12494] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12495] <... bpf resumed>) = 3 [pid 12494] <... bpf resumed>) = 4 [pid 5066] getdents64(3, [pid 12495] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12494] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12496 attached [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12496] set_robust_list(0x5555686ec660, 24 [pid 12495] <... bpf resumed>) = 4 [pid 12496] <... set_robust_list resumed>) = 0 [pid 12496] chdir("./1503" [pid 12495] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12494] <... bpf resumed>) = 5 [pid 12493] +++ exited with 0 +++ [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12496 [pid 5066] umount2("./1435/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12496] <... chdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12493, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12495] <... bpf resumed>) = 5 [pid 12494] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12496] <... prctl resumed>) = 0 [pid 12496] setpgid(0, 0 [pid 5066] newfstatat(AT_FDCWD, "./1435/binderfs", [pid 12496] <... setpgid resumed>) = 0 [pid 12495] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1516", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] openat(AT_FDCWD, "./1516", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12496] <... openat resumed>) = 3 [pid 12495] <... bpf resumed>) = 6 [pid 12494] <... bpf resumed>) = 6 [pid 5066] unlink("./1435/binderfs" [pid 12496] write(3, "1000", 4 [pid 12495] exit_group(0 [pid 5071] getdents64(3, [pid 12496] <... write resumed>) = 4 [pid 12495] <... exit_group resumed>) = ? [pid 12494] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... unlink resumed>) = 0 [pid 12496] close(3 [pid 12494] <... exit_group resumed>) = ? [pid 12496] <... close resumed>) = 0 [pid 12495] +++ exited with 0 +++ [pid 5071] umount2("./1516/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12496] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12496] <... symlink resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1516/binderfs", [pid 5066] getdents64(3, [pid 12496] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12495, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12496] <... bpf resumed>) = 3 [pid 5071] unlink("./1516/binderfs" [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12496] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12494] +++ exited with 0 +++ [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] close(3 [pid 12496] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 12496] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... close resumed>) = 0 [pid 5071] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12494, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... close resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5071] rmdir("./1516" [pid 5067] <... restart_syscall resumed>) = 0 [pid 5068] umount2("./1481", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1435" [pid 12496] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1481", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12496] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] mkdir("./1517", 0777 [pid 5068] <... openat resumed>) = 3 [pid 5067] umount2("./1461", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(3, "", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] openat(AT_FDCWD, "./1461", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 5066] mkdir("./1436", 0777./strace-static-x86_64: Process 12497 attached [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(3, "", [pid 5066] <... mkdir resumed>) = 0 [pid 12497] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12497 [pid 5068] umount2("./1481/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12497] <... set_robust_list resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12497] chdir("./1517" [pid 5068] newfstatat(AT_FDCWD, "./1481/binderfs", [pid 12497] <... chdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] getdents64(3, [pid 12497] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12497] <... prctl resumed>) = 0 [pid 12497] setpgid(0, 0 [pid 5067] umount2("./1461/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] unlink("./1481/binderfs"./strace-static-x86_64: Process 12498 attached [pid 12497] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12498] set_robust_list(0x5555686ec660, 24 [pid 12497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... unlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1461/binderfs", [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12498 [pid 12498] <... set_robust_list resumed>) = 0 [pid 5068] getdents64(3, [pid 12498] chdir("./1436" [pid 12497] <... openat resumed>) = 3 [pid 12496] <... bpf resumed>) = 6 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12498] <... chdir resumed>) = 0 [pid 12497] write(3, "1000", 4 [pid 12496] exit_group(0 [pid 5068] close(3) = 0 [pid 12498] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12497] <... write resumed>) = 4 [pid 5068] rmdir("./1481" [pid 12498] <... prctl resumed>) = 0 [pid 12497] close(3 [pid 12496] <... exit_group resumed>) = ? [pid 5067] unlink("./1461/binderfs" [pid 12498] setpgid(0, 0 [pid 12497] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1482", 0777) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12498] <... setpgid resumed>) = 0 [pid 12497] symlink("/dev/binderfs", "./binderfs" [pid 12496] +++ exited with 0 +++ [pid 5067] <... unlink resumed>) = 0 [pid 12497] <... symlink resumed>) = 0 [pid 12497] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12499 attached [pid 12498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12496, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, [pid 12499] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12499 [pid 12499] <... set_robust_list resumed>) = 0 [pid 12497] <... bpf resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12499] chdir("./1482" [pid 12498] <... openat resumed>) = 3 [pid 12497] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] close(3 [pid 12499] <... chdir resumed>) = 0 [pid 12498] write(3, "1000", 4 [pid 12497] <... bpf resumed>) = 4 [pid 5069] umount2("./1503", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12497] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... close resumed>) = 0 [pid 12499] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12498] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./1461" [pid 12499] <... prctl resumed>) = 0 [pid 12498] close(3 [pid 5069] openat(AT_FDCWD, "./1503", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12499] setpgid(0, 0 [pid 12498] <... close resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 12499] <... setpgid resumed>) = 0 [pid 12498] symlink("/dev/binderfs", "./binderfs" [pid 12497] <... bpf resumed>) = 5 [pid 5069] newfstatat(3, "", [pid 12499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12498] <... symlink resumed>) = 0 [pid 5067] mkdir("./1462", 0777 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12497] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12498] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12499] <... openat resumed>) = 3 [pid 12497] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 12499] write(3, "1000", 4 [pid 12498] <... bpf resumed>) = 3 [pid 12497] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12499] <... write resumed>) = 4 [pid 12497] <... exit_group resumed>) = ? [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12499] close(3 [pid 12498] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1503/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12499] <... close resumed>) = 0 [pid 12498] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] newfstatat(AT_FDCWD, "./1503/binderfs", [pid 12498] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12497] +++ exited with 0 +++ ./strace-static-x86_64: Process 12500 attached [pid 12499] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12497, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] unlink("./1503/binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12500 [pid 12500] set_robust_list(0x5555686ec660, 24 [pid 12498] <... bpf resumed>) = 5 [pid 12500] <... set_robust_list resumed>) = 0 [pid 12499] <... bpf resumed>) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 12500] chdir("./1462" [pid 12499] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12498] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] getdents64(3, [pid 12500] <... chdir resumed>) = 0 [pid 12500] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12499] <... bpf resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12500] <... prctl resumed>) = 0 [pid 5071] umount2("./1517", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12500] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] close(3 [pid 12500] <... setpgid resumed>) = 0 [pid 12499] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12498] <... bpf resumed>) = 6 [pid 5071] openat(AT_FDCWD, "./1517", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... close resumed>) = 0 [pid 12500] <... openat resumed>) = 3 [pid 12499] <... bpf resumed>) = 5 [pid 12498] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 5069] rmdir("./1503" [pid 12500] write(3, "1000", 4 [pid 5071] newfstatat(3, "", [pid 12500] <... write resumed>) = 4 [pid 12498] <... exit_group resumed>) = ? [pid 12500] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12499] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 12499] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1517/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1504", 0777 [pid 12500] <... close resumed>) = 0 [pid 12499] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12500] symlink("/dev/binderfs", "./binderfs" [pid 12499] <... exit_group resumed>) = ? [pid 5071] newfstatat(AT_FDCWD, "./1517/binderfs", [pid 12500] <... symlink resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1517/binderfs" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12500] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12499] +++ exited with 0 +++ [pid 12498] +++ exited with 0 +++ [pid 5071] <... unlink resumed>) = 0 [pid 12500] <... bpf resumed>) = 3 [pid 12500] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12498, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12500] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12500] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12500] <... bpf resumed>) = 5 [pid 5071] close(3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1517" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12499, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 12501 attached [pid 12500] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./1436", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12501] set_robust_list(0x5555686ec660, 24 [pid 5071] mkdir("./1518", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12501] <... set_robust_list resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12501 [pid 5068] umount2("./1482", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./1436", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12501] chdir("./1504" [pid 12500] <... bpf resumed>) = 6 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12502 attached [pid 12501] <... chdir resumed>) = 0 [pid 12500] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 12501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12500] <... exit_group resumed>) = ? [pid 5068] openat(AT_FDCWD, "./1482", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12502] set_robust_list(0x5555686ec660, 24 [pid 12501] <... prctl resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12502 [pid 5066] newfstatat(3, "", [pid 12502] <... set_robust_list resumed>) = 0 [pid 12501] setpgid(0, 0 [pid 12500] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12502] chdir("./1518" [pid 12501] <... setpgid resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12500, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12502] <... chdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12502] <... prctl resumed>) = 0 [pid 12501] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 5066] umount2("./1436/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12502] setpgid(0, 0) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12501] write(3, "1000", 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1482/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12501] <... write resumed>) = 4 [pid 5066] newfstatat(AT_FDCWD, "./1436/binderfs", [pid 12501] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12502] <... openat resumed>) = 3 [pid 5068] newfstatat(AT_FDCWD, "./1482/binderfs", [pid 12502] write(3, "1000", 4 [pid 12501] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1462", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./1436/binderfs" [pid 12502] <... write resumed>) = 4 [pid 12501] symlink("/dev/binderfs", "./binderfs" [pid 5068] unlink("./1482/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12502] close(3 [pid 5067] openat(AT_FDCWD, "./1462", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 12502] <... close resumed>) = 0 [pid 12501] <... symlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 12502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12501] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] close(3 [pid 5066] close(3 [pid 12502] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 12501] <... bpf resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 12502] <... bpf resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] rmdir("./1482" [pid 12501] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] rmdir("./1436" [pid 12502] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] umount2("./1462/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12502] <... bpf resumed>) = 4 [pid 12501] <... bpf resumed>) = 4 [pid 5067] newfstatat(AT_FDCWD, "./1462/binderfs", [pid 5068] <... rmdir resumed>) = 0 [pid 12502] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12501] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] mkdir("./1483", 0777 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] mkdir("./1437", 0777 [pid 12502] <... bpf resumed>) = 5 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] unlink("./1462/binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 12501] <... bpf resumed>) = 5 [pid 12502] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 [pid 12502] <... bpf resumed>) = 6 [pid 12501] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12504 attached ./strace-static-x86_64: Process 12503 attached [pid 12502] exit_group(0 [pid 12501] <... bpf resumed>) = 6 [pid 5067] close(3 [pid 12502] <... exit_group resumed>) = ? [pid 12504] set_robust_list(0x5555686ec660, 24 [pid 12503] set_robust_list(0x5555686ec660, 24 [pid 12501] exit_group(0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12503 [pid 5067] <... close resumed>) = 0 [pid 12504] <... set_robust_list resumed>) = 0 [pid 12503] <... set_robust_list resumed>) = 0 [pid 5067] rmdir("./1462" [pid 12503] chdir("./1483" [pid 12501] <... exit_group resumed>) = ? [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12504 [pid 12503] <... chdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12503] setpgid(0, 0 [pid 5067] mkdir("./1463", 0777 [pid 12504] chdir("./1437" [pid 12503] <... setpgid resumed>) = 0 [pid 12504] <... chdir resumed>) = 0 [pid 12504] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... mkdir resumed>) = 0 [pid 12504] <... prctl resumed>) = 0 [pid 12504] setpgid(0, 0 [pid 12503] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12504] <... setpgid resumed>) = 0 [pid 12504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12503] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 12505 attached [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12505 [pid 12505] set_robust_list(0x5555686ec660, 24 [pid 12503] close(3 [pid 12505] <... set_robust_list resumed>) = 0 [pid 12504] <... openat resumed>) = 3 [pid 12503] <... close resumed>) = 0 [pid 12502] +++ exited with 0 +++ [pid 12504] write(3, "1000", 4 [pid 12503] symlink("/dev/binderfs", "./binderfs" [pid 12501] +++ exited with 0 +++ [pid 12505] chdir("./1463") = 0 [pid 12504] <... write resumed>) = 4 [pid 12503] <... symlink resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12502, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12501, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12505] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12504] close(3 [pid 5071] umount2("./1518", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12505] <... prctl resumed>) = 0 [pid 12504] <... close resumed>) = 0 [pid 12503] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12504] symlink("/dev/binderfs", "./binderfs" [pid 5071] openat(AT_FDCWD, "./1518", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12503] <... bpf resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 12505] setpgid(0, 0 [pid 12504] <... symlink resumed>) = 0 [pid 12503] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12505] <... setpgid resumed>) = 0 [pid 12504] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(3, "", [pid 5069] umount2("./1504", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12503] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12504] <... bpf resumed>) = 3 [pid 5071] getdents64(3, [pid 5069] openat(AT_FDCWD, "./1504", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12505] <... openat resumed>) = 3 [pid 12504] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12503] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... openat resumed>) = 3 [pid 12505] write(3, "1000", 4 [pid 12504] <... bpf resumed>) = 4 [pid 5071] umount2("./1518/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(3, "", [pid 12505] <... write resumed>) = 4 [pid 12504] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12505] close(3 [pid 5071] newfstatat(AT_FDCWD, "./1518/binderfs", [pid 5069] getdents64(3, [pid 12505] <... close resumed>) = 0 [pid 12503] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12505] symlink("/dev/binderfs", "./binderfs" [pid 12504] <... bpf resumed>) = 5 [pid 5071] unlink("./1518/binderfs" [pid 5069] umount2("./1504/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12505] <... symlink resumed>) = 0 [pid 12503] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12504] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12505] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5069] newfstatat(AT_FDCWD, "./1504/binderfs", [pid 12505] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12505] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] close(3 [pid 5069] unlink("./1504/binderfs" [pid 12505] <... bpf resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 12505] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] rmdir("./1518" [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] close(3 [pid 12505] <... bpf resumed>) = 5 [pid 12504] <... bpf resumed>) = 6 [pid 5071] mkdir("./1519", 0777 [pid 12504] exit_group(0 [pid 12503] <... bpf resumed>) = 6 [pid 12505] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12505] <... bpf resumed>) = 6 [pid 12504] <... exit_group resumed>) = ? [pid 12503] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] rmdir("./1504" [pid 12505] exit_group(0 [pid 12504] +++ exited with 0 +++ [pid 12503] <... exit_group resumed>) = ? [pid 12505] <... exit_group resumed>) = ? [pid 5069] <... rmdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12504, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] mkdir("./1505", 0777./strace-static-x86_64: Process 12506 attached ) = 0 [pid 12506] set_robust_list(0x5555686ec660, 24) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12506] chdir("./1519" [pid 5066] umount2("./1437", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12506 [pid 12506] <... chdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12506] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] openat(AT_FDCWD, "./1437", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12506] <... prctl resumed>) = 0 [pid 12506] setpgid(0, 0 [pid 5066] <... openat resumed>) = 3 [pid 12506] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 12507 attached [pid 12506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12505] +++ exited with 0 +++ [pid 12503] +++ exited with 0 +++ [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12507 [pid 5066] newfstatat(3, "", [pid 12507] set_robust_list(0x5555686ec660, 24 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12503, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12506] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12507] <... set_robust_list resumed>) = 0 [pid 12506] write(3, "1000", 4 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12505, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] getdents64(3, [pid 12506] <... write resumed>) = 4 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] umount2("./1463", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12506] close(3 [pid 12507] chdir("./1505" [pid 12506] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1437/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12506] symlink("/dev/binderfs", "./binderfs" [pid 5067] openat(AT_FDCWD, "./1463", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12507] <... chdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12506] <... symlink resumed>) = 0 [pid 5068] umount2("./1483", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12507] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12506] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... openat resumed>) = 3 [pid 5066] newfstatat(AT_FDCWD, "./1437/binderfs", [pid 12507] <... prctl resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12507] setpgid(0, 0 [pid 12506] <... bpf resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12507] <... setpgid resumed>) = 0 [pid 12506] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] openat(AT_FDCWD, "./1483", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] unlink("./1437/binderfs" [pid 5067] getdents64(3, [pid 12507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12506] <... bpf resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5066] <... unlink resumed>) = 0 [pid 12507] <... openat resumed>) = 3 [pid 12506] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12507] write(3, "1000", 4 [pid 5068] getdents64(3, [pid 12507] <... write resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1463/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12507] close(3 [pid 5068] umount2("./1483/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 12507] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12507] symlink("/dev/binderfs", "./binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1483/binderfs", [pid 12506] <... bpf resumed>) = 5 [pid 5067] newfstatat(AT_FDCWD, "./1463/binderfs", [pid 5066] <... close resumed>) = 0 [pid 12507] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1483/binderfs" [pid 12507] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12506] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] rmdir("./1437" [pid 12507] <... bpf resumed>) = 3 [pid 5068] getdents64(3, [pid 12507] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12506] <... bpf resumed>) = 6 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./1463/binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 12507] <... bpf resumed>) = 4 [pid 12506] exit_group(0 [pid 5068] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5066] mkdir("./1438", 0777 [pid 12506] <... exit_group resumed>) = ? [pid 5068] <... close resumed>) = 0 [pid 12507] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] rmdir("./1483" [pid 12507] <... bpf resumed>) = 5 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12506] +++ exited with 0 +++ [pid 5067] getdents64(3, [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12506, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] umount2("./1519", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12507] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./1484", 0777 [pid 5067] close(3 [pid 5071] openat(AT_FDCWD, "./1519", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 12508 attached [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1463" [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12508 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12508] set_robust_list(0x5555686ec660, 24 [pid 5071] newfstatat(3, "", [pid 12508] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12508] chdir("./1438" [pid 5071] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 12508] <... chdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12507] <... bpf resumed>) = 6 [pid 12508] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] umount2("./1519/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12508] <... prctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12508] setpgid(0, 0) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1519/binderfs", [pid 12508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12507] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1519/binderfs"./strace-static-x86_64: Process 12509 attached [pid 12508] <... openat resumed>) = 3 [pid 12507] <... exit_group resumed>) = ? [pid 5071] <... unlink resumed>) = 0 [pid 5067] mkdir("./1464", 0777 [pid 12509] set_robust_list(0x5555686ec660, 24) = 0 [pid 12509] chdir("./1484" [pid 5071] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 12509] <... chdir resumed>) = 0 [pid 12508] write(3, "1000", 4 [pid 12507] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12509 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12510 attached [pid 12509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12508] <... write resumed>) = 4 [pid 5071] rmdir("./1519" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12507, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12509] <... prctl resumed>) = 0 [pid 12508] close(3 [pid 12510] set_robust_list(0x5555686ec660, 24 [pid 12509] setpgid(0, 0 [pid 12508] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12510 [pid 12510] <... set_robust_list resumed>) = 0 [pid 12509] <... setpgid resumed>) = 0 [pid 12508] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./1520", 0777 [pid 12510] chdir("./1464" [pid 12508] <... symlink resumed>) = 0 [pid 12510] <... chdir resumed>) = 0 [pid 12510] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1505", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12508] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12509] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] openat(AT_FDCWD, "./1505", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12510] <... prctl resumed>) = 0 [pid 12509] write(3, "1000", 4 [pid 12508] <... bpf resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 12509] <... write resumed>) = 4 [pid 12510] setpgid(0, 0 [pid 12508] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12510] <... setpgid resumed>) = 0 [pid 12510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12509] close(3 [pid 5069] newfstatat(3, "", ./strace-static-x86_64: Process 12511 attached [pid 12510] <... openat resumed>) = 3 [pid 12509] <... close resumed>) = 0 [pid 12508] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12511] set_robust_list(0x5555686ec660, 24 [pid 12510] write(3, "1000", 4 [pid 12509] symlink("/dev/binderfs", "./binderfs" [pid 12508] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12511 [pid 5069] getdents64(3, [pid 12511] <... set_robust_list resumed>) = 0 [pid 12510] <... write resumed>) = 4 [pid 12509] <... symlink resumed>) = 0 [pid 12510] close(3) = 0 [pid 12510] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12508] <... bpf resumed>) = 5 [pid 12511] chdir("./1520" [pid 12510] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12511] <... chdir resumed>) = 0 [pid 12509] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12511] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12508] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12511] <... prctl resumed>) = 0 [pid 5069] umount2("./1505/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12510] <... bpf resumed>) = 3 [pid 12511] setpgid(0, 0 [pid 12510] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12508] <... bpf resumed>) = 6 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12511] <... setpgid resumed>) = 0 [pid 12510] <... bpf resumed>) = 4 [pid 12509] <... bpf resumed>) = 3 [pid 5069] newfstatat(AT_FDCWD, "./1505/binderfs", [pid 12510] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12510] <... bpf resumed>) = 5 [pid 12509] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12508] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12510] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 5069] unlink("./1505/binderfs" [pid 12508] <... exit_group resumed>) = ? [pid 12510] exit_group(0) = ? [pid 12511] <... openat resumed>) = 3 [pid 12509] <... bpf resumed>) = 4 [pid 12511] write(3, "1000", 4 [pid 12509] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... unlink resumed>) = 0 [pid 12511] <... write resumed>) = 4 [pid 12511] close(3 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12511] <... close resumed>) = 0 [pid 12509] <... bpf resumed>) = 5 [pid 12511] symlink("/dev/binderfs", "./binderfs" [pid 12509] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12511] <... symlink resumed>) = 0 [pid 5069] close(3) = 0 [pid 12511] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] rmdir("./1505" [pid 12511] <... bpf resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 12511] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] mkdir("./1506", 0777 [pid 12511] <... bpf resumed>) = 4 [pid 12511] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12511] <... bpf resumed>) = 5 [pid 12511] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12512 attached [pid 12510] +++ exited with 0 +++ [pid 12508] +++ exited with 0 +++ [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12512 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12510, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12508, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12512] set_robust_list(0x5555686ec660, 24 [pid 5067] umount2("./1464", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12512] <... set_robust_list resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1438", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12512] chdir("./1506" [pid 5067] openat(AT_FDCWD, "./1464", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1438", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12512] <... chdir resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] <... openat resumed>) = 3 [pid 12512] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12512] <... prctl resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12512] setpgid(0, 0 [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12512] <... setpgid resumed>) = 0 [pid 12512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 5067] umount2("./1464/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1464/binderfs", [pid 5066] umount2("./1438/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12512] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./1464/binderfs" [pid 5066] newfstatat(AT_FDCWD, "./1438/binderfs", [pid 12512] write(3, "1000", 4 [pid 5067] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12512] <... write resumed>) = 4 [pid 12512] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] unlink("./1438/binderfs" [pid 12512] <... close resumed>) = 0 [pid 5067] close(3 [pid 12512] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12512] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12509] <... bpf resumed>) = 6 [pid 5067] rmdir("./1464" [pid 5066] getdents64(3, [pid 12511] <... bpf resumed>) = 6 [pid 12512] <... bpf resumed>) = 3 [pid 12512] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12509] exit_group(0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12512] <... bpf resumed>) = 4 [pid 12511] exit_group(0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] close(3 [pid 12511] <... exit_group resumed>) = ? [pid 12512] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12511] +++ exited with 0 +++ [pid 12509] <... exit_group resumed>) = ? [pid 5067] mkdir("./1465", 0777 [pid 5066] <... close resumed>) = 0 [pid 12512] <... bpf resumed>) = 5 [pid 12509] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12511, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5066] rmdir("./1438" [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12509, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12512] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] umount2("./1484", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1439", 0777 [pid 5071] umount2("./1520", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./1484", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1520", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12514 attached ./strace-static-x86_64: Process 12513 attached [pid 5071] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12513] set_robust_list(0x5555686ec660, 24 [pid 5068] getdents64(3, [pid 12514] set_robust_list(0x5555686ec660, 24 [pid 5071] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12514] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12514] chdir("./1439" [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12514 [pid 12513] <... set_robust_list resumed>) = 0 [pid 5071] umount2("./1520/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1484/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12513 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12514] <... chdir resumed>) = 0 [pid 12513] chdir("./1465" [pid 5071] newfstatat(AT_FDCWD, "./1520/binderfs", [pid 12514] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12513] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1484/binderfs", [pid 12513] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] unlink("./1520/binderfs" [pid 12513] <... prctl resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12514] <... prctl resumed>) = 0 [pid 12513] setpgid(0, 0 [pid 5071] getdents64(3, [pid 5068] unlink("./1484/binderfs" [pid 12514] setpgid(0, 0 [pid 12513] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12514] <... setpgid resumed>) = 0 [pid 12512] <... bpf resumed>) = 6 [pid 5068] <... unlink resumed>) = 0 [pid 12514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3 [pid 12512] exit_group(0 [pid 5068] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 12514] <... openat resumed>) = 3 [pid 12512] <... exit_group resumed>) = ? [pid 5071] rmdir("./1520" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12513] <... openat resumed>) = 3 [pid 12514] write(3, "1000", 4 [pid 5071] <... rmdir resumed>) = 0 [pid 12513] write(3, "1000", 4 [pid 5068] close(3 [pid 12514] <... write resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 12514] close(3 [pid 5068] rmdir("./1484" [pid 12514] <... close resumed>) = 0 [pid 12513] <... write resumed>) = 4 [pid 12512] +++ exited with 0 +++ [pid 12514] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./1521", 0777 [pid 12514] <... symlink resumed>) = 0 [pid 12513] close(3 [pid 5071] <... mkdir resumed>) = 0 [pid 12514] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12513] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12514] <... bpf resumed>) = 3 [pid 12513] symlink("/dev/binderfs", "./binderfs" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12512, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] mkdir("./1485", 0777 [pid 12514] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12513] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1506", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12514] <... bpf resumed>) = 4 [pid 12513] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 12514] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] openat(AT_FDCWD, "./1506", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12515 attached [pid 12514] <... bpf resumed>) = 5 [pid 12513] <... bpf resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12515 [pid 5069] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12516 attached [pid 12514] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12515] set_robust_list(0x5555686ec660, 24 [pid 12516] set_robust_list(0x5555686ec660, 24 [pid 12515] <... set_robust_list resumed>) = 0 [pid 12514] <... bpf resumed>) = 6 [pid 12513] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(3, "", [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12516 [pid 12516] <... set_robust_list resumed>) = 0 [pid 12514] exit_group(0 [pid 12513] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12516] chdir("./1485" [pid 12514] <... exit_group resumed>) = ? [pid 12516] <... chdir resumed>) = 0 [pid 12515] chdir("./1521" [pid 12513] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] getdents64(3, [pid 12516] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12515] <... chdir resumed>) = 0 [pid 12514] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12516] <... prctl resumed>) = 0 [pid 12515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12514, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12516] setpgid(0, 0 [pid 12515] <... prctl resumed>) = 0 [pid 5069] umount2("./1506/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12516] <... setpgid resumed>) = 0 [pid 12515] setpgid(0, 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12515] <... setpgid resumed>) = 0 [pid 12513] <... bpf resumed>) = 5 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12516] <... openat resumed>) = 3 [pid 12515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(AT_FDCWD, "./1506/binderfs", [pid 5066] umount2("./1439", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12516] write(3, "1000", 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12516] <... write resumed>) = 4 [pid 12515] <... openat resumed>) = 3 [pid 12513] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] unlink("./1506/binderfs" [pid 5066] openat(AT_FDCWD, "./1439", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12516] close(3 [pid 12515] write(3, "1000", 4 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12516] <... close resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12515] <... write resumed>) = 4 [pid 12515] close(3 [pid 5069] getdents64(3, [pid 12516] symlink("/dev/binderfs", "./binderfs" [pid 12515] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12515] symlink("/dev/binderfs", "./binderfs" [pid 12516] <... symlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 12516] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12515] <... symlink resumed>) = 0 [pid 5069] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12516] <... bpf resumed>) = 3 [pid 12515] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 5066] umount2("./1439/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12516] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12515] <... bpf resumed>) = 3 [pid 5069] rmdir("./1506" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12516] <... bpf resumed>) = 4 [pid 12515] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(AT_FDCWD, "./1439/binderfs", [pid 12516] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12515] <... bpf resumed>) = 4 [pid 5069] mkdir("./1507", 0777 [pid 5066] unlink("./1439/binderfs" [pid 12513] <... bpf resumed>) = 6 [pid 12516] <... bpf resumed>) = 5 [pid 12515] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12516] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12513] exit_group(0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12516] <... bpf resumed>) = 6 [pid 12515] <... bpf resumed>) = 5 [pid 12513] <... exit_group resumed>) = ? [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12517 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12517 [pid 12516] exit_group(0 [pid 12517] set_robust_list(0x5555686ec660, 24 [pid 12516] <... exit_group resumed>) = ? [pid 12515] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 12517] <... set_robust_list resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1439") = 0 [pid 12517] chdir("./1507" [pid 5066] mkdir("./1440", 0777 [pid 12517] <... chdir resumed>) = 0 [pid 12517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12517] setpgid(0, 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12517] <... setpgid resumed>) = 0 [pid 12517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 12518 attached [pid 12517] write(3, "1000", 4 [pid 12518] set_robust_list(0x5555686ec660, 24 [pid 12517] <... write resumed>) = 4 [pid 12518] <... set_robust_list resumed>) = 0 [pid 12517] close(3 [pid 12518] chdir("./1440" [pid 12517] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12518 [pid 12518] <... chdir resumed>) = 0 [pid 12517] symlink("/dev/binderfs", "./binderfs" [pid 12518] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12517] <... symlink resumed>) = 0 [pid 12517] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12518] setpgid(0, 0 [pid 12517] <... bpf resumed>) = 3 [pid 12518] <... setpgid resumed>) = 0 [pid 12518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12517] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12518] <... openat resumed>) = 3 [pid 12517] <... bpf resumed>) = 4 [pid 12518] write(3, "1000", 4 [pid 12517] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12513] +++ exited with 0 +++ [pid 12515] <... bpf resumed>) = 6 [pid 12518] <... write resumed>) = 4 [pid 12515] exit_group(0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12513, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12518] close(3 [pid 12515] <... exit_group resumed>) = ? [pid 12518] <... close resumed>) = 0 [pid 12517] <... bpf resumed>) = 5 [pid 12518] symlink("/dev/binderfs", "./binderfs" [pid 12517] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12518] <... symlink resumed>) = 0 [pid 12518] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5067] umount2("./1465", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12518] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12518] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] openat(AT_FDCWD, "./1465", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12518] <... bpf resumed>) = 5 [pid 5067] <... openat resumed>) = 3 [pid 12518] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1465/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1465/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1465/binderfs") = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./1465" [pid 12517] <... bpf resumed>) = 6 [pid 12516] +++ exited with 0 +++ [pid 5067] <... rmdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12516, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12517] exit_group(0) = ? [pid 5067] mkdir("./1466", 0777 [pid 5068] umount2("./1485", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1485", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(3, "", ./strace-static-x86_64: Process 12519 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1485/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1485/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12519 [pid 12519] set_robust_list(0x5555686ec660, 24 [pid 5068] unlink("./1485/binderfs" [pid 12519] <... set_robust_list resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12519] chdir("./1466") = 0 [pid 12519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] getdents64(3, [pid 12519] <... prctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12519] setpgid(0, 0 [pid 5068] close(3 [pid 12519] <... setpgid resumed>) = 0 [pid 12519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... close resumed>) = 0 [pid 12519] <... openat resumed>) = 3 [pid 12518] <... bpf resumed>) = 6 [pid 12515] +++ exited with 0 +++ [pid 5068] rmdir("./1485" [pid 12519] write(3, "1000", 4 [pid 12518] exit_group(0 [pid 12519] <... write resumed>) = 4 [pid 12518] <... exit_group resumed>) = ? [pid 12519] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12515, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... rmdir resumed>) = 0 [pid 12519] <... close resumed>) = 0 [pid 12519] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./1521", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12519] <... symlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1521", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12519] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 5068] mkdir("./1486", 0777 [pid 12519] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12519] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12519] <... bpf resumed>) = 4 [pid 12519] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12520 attached [pid 12519] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1521/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12518] +++ exited with 0 +++ [pid 12517] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12520 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12518, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] newfstatat(AT_FDCWD, "./1521/binderfs", [pid 12520] set_robust_list(0x5555686ec660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12520] <... set_robust_list resumed>) = 0 [pid 5071] unlink("./1521/binderfs" [pid 5066] <... restart_syscall resumed>) = 0 [pid 12520] chdir("./1486" [pid 5071] <... unlink resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12517, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] umount2("./1507", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5069] openat(AT_FDCWD, "./1507", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12520] <... chdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 12520] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] close(3 [pid 5069] newfstatat(3, "", [pid 5066] umount2("./1440", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12520] <... prctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12520] setpgid(0, 0 [pid 5071] rmdir("./1521" [pid 5069] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1507/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1507/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1507/binderfs" [pid 12520] <... setpgid resumed>) = 0 [pid 12519] <... bpf resumed>) = 6 [pid 5071] mkdir("./1522", 0777 [pid 5066] openat(AT_FDCWD, "./1440", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12519] exit_group(0 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 12520] <... openat resumed>) = 3 [pid 12519] <... exit_group resumed>) = ? [pid 5066] newfstatat(3, "", [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12521 attached [pid 12520] write(3, "1000", 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12521] set_robust_list(0x5555686ec660, 24 [pid 12520] <... write resumed>) = 4 [pid 12519] +++ exited with 0 +++ [pid 5069] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12521 [pid 12520] close(3 [pid 5069] <... close resumed>) = 0 [pid 12521] <... set_robust_list resumed>) = 0 [pid 12520] <... close resumed>) = 0 [pid 5069] rmdir("./1507" [pid 5066] umount2("./1440/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12520] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12521] chdir("./1522" [pid 12520] <... symlink resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12519, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12521] <... chdir resumed>) = 0 [pid 5069] mkdir("./1508", 0777 [pid 12521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] umount2("./1466", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12520] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(AT_FDCWD, "./1440/binderfs", [pid 12521] setpgid(0, 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12521] <... setpgid resumed>) = 0 [pid 12520] <... bpf resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1466", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12520] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... openat resumed>) = 3 [pid 12521] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5066] unlink("./1440/binderfs"./strace-static-x86_64: Process 12522 attached [pid 12521] write(3, "1000", 4 [pid 12520] <... bpf resumed>) = 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12522 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12522] set_robust_list(0x5555686ec660, 24 [pid 5066] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 12522] <... set_robust_list resumed>) = 0 [pid 12521] <... write resumed>) = 4 [pid 12520] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12522] chdir("./1508" [pid 12521] close(3 [pid 5067] umount2("./1466/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12522] <... chdir resumed>) = 0 [pid 12521] <... close resumed>) = 0 [pid 12520] <... bpf resumed>) = 5 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12522] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12521] symlink("/dev/binderfs", "./binderfs" [pid 12520] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12522] <... prctl resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1466/binderfs", [pid 5066] close(3 [pid 12521] <... symlink resumed>) = 0 [pid 12520] <... bpf resumed>) = 6 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... close resumed>) = 0 [pid 5067] unlink("./1466/binderfs" [pid 5066] rmdir("./1440" [pid 12522] setpgid(0, 0 [pid 12521] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12520] exit_group(0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12522] <... setpgid resumed>) = 0 [pid 12521] <... bpf resumed>) = 3 [pid 12520] <... exit_group resumed>) = ? [pid 5067] getdents64(3, [pid 12522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 12521] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... close resumed>) = 0 [pid 5066] mkdir("./1441", 0777 [pid 12522] <... openat resumed>) = 3 [pid 5067] rmdir("./1466" [pid 12520] +++ exited with 0 +++ [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] mkdir("./1467", 0777 [pid 12522] write(3, "1000", 4 [pid 12521] <... bpf resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12520, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12522] <... write resumed>) = 4 [pid 12522] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12522] <... close resumed>) = 0 [pid 12521] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12524 attached [pid 12522] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./1486", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12524] set_robust_list(0x5555686ec660, 24 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12523 attached [pid 12524] <... set_robust_list resumed>) = 0 [pid 12522] <... symlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1486", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12523 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12524 [pid 12524] chdir("./1441" [pid 12523] set_robust_list(0x5555686ec660, 24 [pid 12521] <... bpf resumed>) = 5 [pid 5068] <... openat resumed>) = 3 [pid 12524] <... chdir resumed>) = 0 [pid 12523] <... set_robust_list resumed>) = 0 [pid 12522] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12521] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] newfstatat(3, "", [pid 12524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12523] chdir("./1467" [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12524] <... prctl resumed>) = 0 [pid 12523] <... chdir resumed>) = 0 [pid 12522] <... bpf resumed>) = 3 [pid 12524] setpgid(0, 0 [pid 12523] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12522] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 12524] <... setpgid resumed>) = 0 [pid 12523] <... prctl resumed>) = 0 [pid 12524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12523] setpgid(0, 0 [pid 12522] <... bpf resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12524] <... openat resumed>) = 3 [pid 12523] <... setpgid resumed>) = 0 [pid 12522] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12521] <... bpf resumed>) = 6 [pid 5068] umount2("./1486/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12524] write(3, "1000", 4 [pid 12523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12524] <... write resumed>) = 4 [pid 12522] <... bpf resumed>) = 5 [pid 12521] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12524] close(3 [pid 12523] <... openat resumed>) = 3 [pid 12522] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12521] <... exit_group resumed>) = ? [pid 5068] newfstatat(AT_FDCWD, "./1486/binderfs", [pid 12524] <... close resumed>) = 0 [pid 12523] write(3, "1000", 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12524] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] unlink("./1486/binderfs" [pid 12521] +++ exited with 0 +++ [pid 12523] <... write resumed>) = 4 [pid 12523] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 12524] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12523] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12521, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12523] symlink("/dev/binderfs", "./binderfs" [pid 12524] <... bpf resumed>) = 3 [pid 12524] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12523] <... symlink resumed>) = 0 [pid 5068] getdents64(3, [pid 12524] <... bpf resumed>) = 4 [pid 5071] umount2("./1522", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12524] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12523] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] close(3) = 0 [pid 5068] rmdir("./1486" [pid 12524] <... bpf resumed>) = 5 [pid 12523] <... bpf resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1522", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1487", 0777 [pid 12524] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12523] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12523] <... bpf resumed>) = 4 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12525 attached [pid 12523] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 12525] set_robust_list(0x5555686ec660, 24 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1522/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12525] <... set_robust_list resumed>) = 0 [pid 12523] <... bpf resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12525 [pid 5071] newfstatat(AT_FDCWD, "./1522/binderfs", [pid 12525] chdir("./1487" [pid 12524] <... bpf resumed>) = 6 [pid 12523] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12522] <... bpf resumed>) = 6 [pid 12525] <... chdir resumed>) = 0 [pid 12523] <... bpf resumed>) = 6 [pid 12522] exit_group(0 [pid 12524] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12524] <... exit_group resumed>) = ? [pid 12523] exit_group(0 [pid 12522] <... exit_group resumed>) = ? [pid 5071] unlink("./1522/binderfs" [pid 12525] setpgid(0, 0 [pid 12523] <... exit_group resumed>) = ? [pid 12525] <... setpgid resumed>) = 0 [pid 12524] +++ exited with 0 +++ [pid 12523] +++ exited with 0 +++ [pid 5071] <... unlink resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12524, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12523, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12525] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... restart_syscall resumed>) = 0 [pid 12525] write(3, "1000", 4 [pid 12522] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12525] <... write resumed>) = 4 [pid 5071] close(3 [pid 12525] close(3 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1522" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12522, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12525] <... close resumed>) = 0 [pid 12525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] umount2("./1508", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1467", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1441", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] mkdir("./1523", 0777 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12525] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] openat(AT_FDCWD, "./1508", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1467", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1441", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12525] <... bpf resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5066] <... openat resumed>) = 3 [pid 12525] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12525] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12526 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12526 [pid 5069] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 12526] set_robust_list(0x5555686ec660, 24 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12525] <... bpf resumed>) = 5 [pid 12526] <... set_robust_list resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12526] chdir("./1523" [pid 12525] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12526] <... chdir resumed>) = 0 [pid 12525] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] umount2("./1508/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1467/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1441/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12526] <... prctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12526] setpgid(0, 0 [pid 5067] newfstatat(AT_FDCWD, "./1467/binderfs", [pid 5069] newfstatat(AT_FDCWD, "./1508/binderfs", [pid 5066] newfstatat(AT_FDCWD, "./1441/binderfs", [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1467/binderfs" [pid 12525] <... exit_group resumed>) = ? [pid 12526] <... setpgid resumed>) = 0 [pid 5069] unlink("./1508/binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 5066] unlink("./1441/binderfs" [pid 12526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12525] +++ exited with 0 +++ [pid 5069] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12525, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 12526] write(3, "1000", 4 [pid 5069] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12526] <... write resumed>) = 4 [pid 12526] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./1487", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1467" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12526] <... close resumed>) = 0 [pid 12526] symlink("/dev/binderfs", "./binderfs" [pid 5069] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 5068] openat(AT_FDCWD, "./1487", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12526] <... symlink resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5069] rmdir("./1508" [pid 5067] mkdir("./1468", 0777 [pid 12526] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] rmdir("./1441" [pid 12526] <... bpf resumed>) = 3 [pid 5069] mkdir("./1509", 0777 [pid 5068] newfstatat(3, "", [pid 5067] <... mkdir resumed>) = 0 [pid 12526] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5069] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1442", 0777 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... mkdir resumed>) = 0 [pid 12526] <... bpf resumed>) = 4 [pid 5068] umount2("./1487/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1487/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12526] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] unlink("./1487/binderfs"./strace-static-x86_64: Process 12527 attached ) = 0 [pid 5068] getdents64(3, [pid 12527] set_robust_list(0x5555686ec660, 24./strace-static-x86_64: Process 12529 attached ./strace-static-x86_64: Process 12528 attached ) = 0 [pid 12526] <... bpf resumed>) = 5 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12528 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12527 [pid 12529] set_robust_list(0x5555686ec660, 24 [pid 12528] set_robust_list(0x5555686ec660, 24 [pid 12527] chdir("./1442" [pid 12526] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12529 [pid 5068] close(3 [pid 12529] <... set_robust_list resumed>) = 0 [pid 12528] <... set_robust_list resumed>) = 0 [pid 12527] <... chdir resumed>) = 0 [pid 12526] <... bpf resumed>) = 6 [pid 5068] <... close resumed>) = 0 [pid 12529] chdir("./1509" [pid 12528] chdir("./1468" [pid 12527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12526] exit_group(0 [pid 5068] rmdir("./1487" [pid 12527] <... prctl resumed>) = 0 [pid 12529] <... chdir resumed>) = 0 [pid 12527] setpgid(0, 0 [pid 12526] <... exit_group resumed>) = ? [pid 12529] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12528] <... chdir resumed>) = 0 [pid 12527] <... setpgid resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12529] <... prctl resumed>) = 0 [pid 12528] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12529] setpgid(0, 0 [pid 12528] <... prctl resumed>) = 0 [pid 12529] <... setpgid resumed>) = 0 [pid 12528] setpgid(0, 0 [pid 12527] <... openat resumed>) = 3 [pid 12528] <... setpgid resumed>) = 0 [pid 12529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] mkdir("./1488", 0777 [pid 12529] <... openat resumed>) = 3 [pid 12527] write(3, "1000", 4 [pid 12526] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12526, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12529] write(3, "1000", 4 [pid 12527] <... write resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 12529] <... write resumed>) = 4 [pid 12528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12527] close(3 [pid 12529] close(3 [pid 12527] <... close resumed>) = 0 [pid 12529] <... close resumed>) = 0 [pid 12527] symlink("/dev/binderfs", "./binderfs" [pid 12529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12528] <... openat resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12528] write(3, "1000", 4 [pid 12527] <... symlink resumed>) = 0 [pid 12529] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1523", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12529] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12528] <... write resumed>) = 4 ./strace-static-x86_64: Process 12530 attached [pid 12529] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12527] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] openat(AT_FDCWD, "./1523", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12530] set_robust_list(0x5555686ec660, 24 [pid 12529] <... bpf resumed>) = 4 [pid 12528] close(3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12530 [pid 12530] <... set_robust_list resumed>) = 0 [pid 12529] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12528] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12530] chdir("./1488" [pid 12528] symlink("/dev/binderfs", "./binderfs" [pid 12527] <... bpf resumed>) = 3 [pid 12530] <... chdir resumed>) = 0 [pid 12529] <... bpf resumed>) = 5 [pid 12528] <... symlink resumed>) = 0 [pid 12527] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(3, "", [pid 12530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12529] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12528] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12530] <... prctl resumed>) = 0 [pid 12528] <... bpf resumed>) = 3 [pid 12527] <... bpf resumed>) = 4 [pid 12530] setpgid(0, 0 [pid 12528] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12527] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 12530] <... setpgid resumed>) = 0 [pid 12528] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12528] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12527] <... bpf resumed>) = 5 [pid 5071] umount2("./1523/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12530] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12527] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12530] write(3, "1000", 4 [pid 12529] <... bpf resumed>) = 6 [pid 12528] <... bpf resumed>) = 5 [pid 5071] newfstatat(AT_FDCWD, "./1523/binderfs", [pid 12530] <... write resumed>) = 4 [pid 12529] exit_group(0 [pid 12528] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12527] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12530] close(3 [pid 12529] <... exit_group resumed>) = ? [pid 12530] <... close resumed>) = 0 [pid 12527] exit_group(0 [pid 5071] unlink("./1523/binderfs" [pid 12530] symlink("/dev/binderfs", "./binderfs" [pid 12527] <... exit_group resumed>) = ? [pid 5071] <... unlink resumed>) = 0 [pid 12530] <... symlink resumed>) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 12530] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 12530] <... bpf resumed>) = 3 [pid 5071] rmdir("./1523" [pid 12530] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 12530] <... bpf resumed>) = 4 [pid 12530] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1524", 0777) = 0 [pid 12530] <... bpf resumed>) = 5 [pid 12530] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12531 attached [pid 12529] +++ exited with 0 +++ [pid 12528] <... bpf resumed>) = 6 [pid 12531] set_robust_list(0x5555686ec660, 24 [pid 12528] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12531 [pid 12531] <... set_robust_list resumed>) = 0 [pid 12528] <... exit_group resumed>) = ? [pid 12531] chdir("./1524") = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12529, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12531] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] umount2("./1509", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12531] <... prctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12531] setpgid(0, 0 [pid 5069] openat(AT_FDCWD, "./1509", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12531] <... setpgid resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 12531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 12531] <... openat resumed>) = 3 [pid 12530] <... bpf resumed>) = 6 [pid 12527] +++ exited with 0 +++ [pid 12531] write(3, "1000", 4) = 4 [pid 12530] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12530] <... exit_group resumed>) = ? [pid 12531] close(3 [pid 5069] umount2("./1509/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12527, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12531] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1442", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12531] symlink("/dev/binderfs", "./binderfs" [pid 5069] newfstatat(AT_FDCWD, "./1509/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1442", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12531] <... symlink resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12531] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(3, "", [pid 12531] <... bpf resumed>) = 3 [pid 5069] unlink("./1509/binderfs" [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12531] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 12531] <... bpf resumed>) = 4 [pid 5069] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12531] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12530] +++ exited with 0 +++ [pid 12528] +++ exited with 0 +++ [pid 5066] umount2("./1442/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12530, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12528, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] newfstatat(AT_FDCWD, "./1442/binderfs", [pid 5069] rmdir("./1509" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... rmdir resumed>) = 0 [pid 5066] unlink("./1442/binderfs" [pid 12531] <... bpf resumed>) = 5 [pid 5068] umount2("./1488", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... restart_syscall resumed>) = 0 [pid 12531] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] mkdir("./1510", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 12531] <... bpf resumed>) = 6 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1488", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12531] exit_group(0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... openat resumed>) = 3 [pid 5067] umount2("./1468", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12531] <... exit_group resumed>) = ? [pid 5068] newfstatat(3, "", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3./strace-static-x86_64: Process 12532 attached [pid 12532] set_robust_list(0x5555686ec660, 24) = 0 [pid 5066] <... close resumed>) = 0 [pid 12532] chdir("./1510" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12532 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] openat(AT_FDCWD, "./1468", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] rmdir("./1442" [pid 12532] <... chdir resumed>) = 0 [pid 12532] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... openat resumed>) = 3 [pid 12532] <... prctl resumed>) = 0 [pid 12532] setpgid(0, 0) = 0 [pid 12531] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 5067] newfstatat(3, "", [pid 5066] <... rmdir resumed>) = 0 [pid 12532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1443", 0777 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12531, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] umount2("./1488/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 12532] <... openat resumed>) = 3 [pid 5071] umount2("./1524", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(AT_FDCWD, "./1488/binderfs", [pid 5067] umount2("./1468/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12532] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "./1524", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12532] <... write resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 12532] close(3) = 0 [pid 12532] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(3, "", [pid 12532] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] unlink("./1488/binderfs" [pid 5067] newfstatat(AT_FDCWD, "./1468/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] getdents64(3, [pid 12532] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12532] <... bpf resumed>) = 3 [pid 5071] umount2("./1524/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1468/binderfs" [pid 12532] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12532] <... bpf resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./1524/binderfs", [pid 5068] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 12532] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] unlink("./1524/binderfs" [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3./strace-static-x86_64: Process 12533 attached [pid 12532] <... bpf resumed>) = 5 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12533 [pid 12533] set_robust_list(0x5555686ec660, 24 [pid 12532] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 5068] rmdir("./1488" [pid 5067] rmdir("./1468" [pid 12533] <... set_robust_list resumed>) = 0 [pid 12532] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12533] chdir("./1443" [pid 12532] exit_group(0 [pid 5071] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1524" [pid 5068] mkdir("./1489", 0777 [pid 12533] <... chdir resumed>) = 0 [pid 5067] mkdir("./1469", 0777 [pid 12532] <... exit_group resumed>) = ? [pid 12533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5071] mkdir("./1525", 0777 [pid 12532] +++ exited with 0 +++ [pid 12533] <... prctl resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12532, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12533] setpgid(0, 0) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1510", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12534 attached [pid 12533] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1510", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 12536 attached ./strace-static-x86_64: Process 12535 attached [pid 12534] set_robust_list(0x5555686ec660, 24 [pid 12533] write(3, "1000", 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12535 [pid 5069] newfstatat(3, "", [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12534 [pid 12536] set_robust_list(0x5555686ec660, 24 [pid 12535] set_robust_list(0x5555686ec660, 24 [pid 12534] <... set_robust_list resumed>) = 0 [pid 12533] <... write resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12533] close(3 [pid 5069] getdents64(3, [pid 12533] <... close resumed>) = 0 [pid 12536] <... set_robust_list resumed>) = 0 [pid 12533] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12536] chdir("./1469" [pid 12534] chdir("./1489" [pid 12536] <... chdir resumed>) = 0 [pid 12535] <... set_robust_list resumed>) = 0 [pid 12533] <... symlink resumed>) = 0 [pid 5069] umount2("./1510/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12536 [pid 12536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12535] chdir("./1525" [pid 12534] <... chdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12536] <... prctl resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1510/binderfs", [pid 12536] setpgid(0, 0 [pid 12535] <... chdir resumed>) = 0 [pid 12534] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12533] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12536] <... setpgid resumed>) = 0 [pid 12535] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12534] <... prctl resumed>) = 0 [pid 5069] unlink("./1510/binderfs" [pid 12533] <... bpf resumed>) = 3 [pid 12535] <... prctl resumed>) = 0 [pid 12536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12535] setpgid(0, 0 [pid 5069] <... unlink resumed>) = 0 [pid 12535] <... setpgid resumed>) = 0 [pid 12534] setpgid(0, 0 [pid 12536] <... openat resumed>) = 3 [pid 12533] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 12536] write(3, "1000", 4 [pid 12535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12534] <... setpgid resumed>) = 0 [pid 12536] <... write resumed>) = 4 [pid 12533] <... bpf resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12536] close(3 [pid 5069] close(3 [pid 12536] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12536] symlink("/dev/binderfs", "./binderfs" [pid 12535] <... openat resumed>) = 3 [pid 12534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12533] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] rmdir("./1510" [pid 12536] <... symlink resumed>) = 0 [pid 12535] write(3, "1000", 4 [pid 12534] <... openat resumed>) = 3 [pid 12536] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12535] <... write resumed>) = 4 [pid 12534] write(3, "1000", 4 [pid 5069] <... rmdir resumed>) = 0 [pid 12533] <... bpf resumed>) = 5 [pid 12535] close(3 [pid 12534] <... write resumed>) = 4 [pid 12536] <... bpf resumed>) = 3 [pid 12535] <... close resumed>) = 0 [pid 12534] close(3 [pid 12536] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12535] symlink("/dev/binderfs", "./binderfs" [pid 12534] <... close resumed>) = 0 [pid 12533] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] mkdir("./1511", 0777 [pid 12536] <... bpf resumed>) = 4 [pid 12534] symlink("/dev/binderfs", "./binderfs" [pid 12535] <... symlink resumed>) = 0 [pid 12534] <... symlink resumed>) = 0 [pid 12533] <... bpf resumed>) = 6 [pid 12536] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12535] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12534] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... mkdir resumed>) = 0 [pid 12533] exit_group(0 [pid 12536] <... bpf resumed>) = 5 [pid 12533] <... exit_group resumed>) = ? [pid 12535] <... bpf resumed>) = 3 [pid 12534] <... bpf resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12535] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12536] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 ./strace-static-x86_64: Process 12537 attached [pid 12536] exit_group(0 [pid 12537] set_robust_list(0x5555686ec660, 24 [pid 12536] <... exit_group resumed>) = ? [pid 12537] <... set_robust_list resumed>) = 0 [pid 12535] <... bpf resumed>) = 4 [pid 12534] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12537 [pid 12535] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12534] <... bpf resumed>) = 4 [pid 12537] chdir("./1511" [pid 12535] <... bpf resumed>) = 5 [pid 12534] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12537] <... chdir resumed>) = 0 [pid 12535] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12537] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12534] <... bpf resumed>) = 5 [pid 12537] <... prctl resumed>) = 0 [pid 12537] setpgid(0, 0 [pid 12534] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12537] <... setpgid resumed>) = 0 [pid 12537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12537] write(3, "1000", 4 [pid 12536] +++ exited with 0 +++ [pid 12533] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12536, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12533, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12537] <... write resumed>) = 4 [pid 12537] close(3) = 0 [pid 12537] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] umount2("./1443", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1469", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12537] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] openat(AT_FDCWD, "./1443", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12537] <... bpf resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1469", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12537] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... openat resumed>) = 3 [pid 12537] <... bpf resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 12537] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] newfstatat(3, "", [pid 5066] newfstatat(3, "", [pid 12537] <... bpf resumed>) = 5 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 12537] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12535] <... bpf resumed>) = 6 [pid 12534] <... bpf resumed>) = 6 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1443/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12537] <... bpf resumed>) = 6 [pid 12535] exit_group(0 [pid 12534] exit_group(0 [pid 5067] umount2("./1469/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12537] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12537] <... exit_group resumed>) = ? [pid 12535] <... exit_group resumed>) = ? [pid 12534] <... exit_group resumed>) = ? [pid 5067] newfstatat(AT_FDCWD, "./1469/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1469/binderfs" [pid 12537] +++ exited with 0 +++ [pid 12535] +++ exited with 0 +++ [pid 12534] +++ exited with 0 +++ [pid 5066] newfstatat(AT_FDCWD, "./1443/binderfs", [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12535, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12537, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12534, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1443/binderfs" [pid 5069] umount2("./1511", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1489", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 5071] umount2("./1525", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1511", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./1489", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] openat(AT_FDCWD, "./1525", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] close(3 [pid 5071] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5067] rmdir("./1469" [pid 5066] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] newfstatat(3, "", [pid 5066] rmdir("./1443" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] mkdir("./1470", 0777 [pid 5066] <... rmdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1444", 0777 [pid 5071] umount2("./1525/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1511/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1489/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... mkdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1511/binderfs", [pid 5071] newfstatat(AT_FDCWD, "./1525/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12538 attached [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1511/binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1489/binderfs", [pid 5071] unlink("./1525/binderfs"./strace-static-x86_64: Process 12539 attached [pid 12538] set_robust_list(0x5555686ec660, 24 [pid 5071] <... unlink resumed>) = 0 [pid 12538] <... set_robust_list resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12538 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12539 [pid 12538] chdir("./1470" [pid 5068] unlink("./1489/binderfs" [pid 12539] set_robust_list(0x5555686ec660, 24 [pid 5071] getdents64(3, [pid 12539] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] getdents64(3, [pid 5068] <... unlink resumed>) = 0 [pid 12538] <... chdir resumed>) = 0 [pid 12539] chdir("./1444" [pid 5071] close(3 [pid 12539] <... chdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12539] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12538] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] rmdir("./1525" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 12539] <... prctl resumed>) = 0 [pid 12538] <... prctl resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] close(3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12539] setpgid(0, 0 [pid 5069] <... close resumed>) = 0 [pid 12538] setpgid(0, 0 [pid 5069] rmdir("./1511" [pid 5068] close(3 [pid 12538] <... setpgid resumed>) = 0 [pid 12539] <... setpgid resumed>) = 0 [pid 5071] mkdir("./1526", 0777 [pid 12539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12539] <... openat resumed>) = 3 [pid 12538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12539] write(3, "1000", 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12539] <... write resumed>) = 4 [pid 12538] <... openat resumed>) = 3 [pid 5069] mkdir("./1512", 0777 [pid 5068] rmdir("./1489"./strace-static-x86_64: Process 12540 attached [pid 12539] close(3 [pid 12538] write(3, "1000", 4 [pid 5068] <... rmdir resumed>) = 0 [pid 12539] <... close resumed>) = 0 [pid 5068] mkdir("./1490", 0777 [pid 12540] set_robust_list(0x5555686ec660, 24 [pid 12539] symlink("/dev/binderfs", "./binderfs" [pid 12538] <... write resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12540 [pid 5069] <... mkdir resumed>) = 0 [pid 12540] <... set_robust_list resumed>) = 0 [pid 12539] <... symlink resumed>) = 0 [pid 12538] close(3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... mkdir resumed>) = 0 [pid 12540] chdir("./1526" [pid 12539] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12538] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12541 attached [pid 12540] <... chdir resumed>) = 0 [pid 12538] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12542 attached [pid 12541] set_robust_list(0x5555686ec660, 24 [pid 12540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12539] <... bpf resumed>) = 3 [pid 12542] set_robust_list(0x5555686ec660, 24 [pid 12541] <... set_robust_list resumed>) = 0 [pid 12538] <... symlink resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12541 [pid 12542] <... set_robust_list resumed>) = 0 [pid 12541] chdir("./1512" [pid 12540] <... prctl resumed>) = 0 [pid 12542] chdir("./1490" [pid 12541] <... chdir resumed>) = 0 [pid 12540] setpgid(0, 0 [pid 12539] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12538] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12542 [pid 12542] <... chdir resumed>) = 0 [pid 12541] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12540] <... setpgid resumed>) = 0 [pid 12539] <... bpf resumed>) = 4 [pid 12538] <... bpf resumed>) = 3 [pid 12542] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12541] <... prctl resumed>) = 0 [pid 12538] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12542] <... prctl resumed>) = 0 [pid 12541] setpgid(0, 0 [pid 12540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12539] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12542] setpgid(0, 0 [pid 12541] <... setpgid resumed>) = 0 [pid 12538] <... bpf resumed>) = 4 [pid 12542] <... setpgid resumed>) = 0 [pid 12541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12540] <... openat resumed>) = 3 [pid 12542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12541] <... openat resumed>) = 3 [pid 12539] <... bpf resumed>) = 5 [pid 12538] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12542] <... openat resumed>) = 3 [pid 12541] write(3, "1000", 4 [pid 12540] write(3, "1000", 4 [pid 12539] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12540] <... write resumed>) = 4 [pid 12542] write(3, "1000", 4 [pid 12541] <... write resumed>) = 4 [pid 12540] close(3 [pid 12538] <... bpf resumed>) = 5 [pid 12542] <... write resumed>) = 4 [pid 12541] close(3 [pid 12540] <... close resumed>) = 0 [pid 12539] <... bpf resumed>) = 6 [pid 12538] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12542] close(3 [pid 12541] <... close resumed>) = 0 [pid 12540] symlink("/dev/binderfs", "./binderfs" [pid 12539] exit_group(0 [pid 12542] <... close resumed>) = 0 [pid 12541] symlink("/dev/binderfs", "./binderfs" [pid 12538] <... bpf resumed>) = 6 [pid 12542] symlink("/dev/binderfs", "./binderfs" [pid 12541] <... symlink resumed>) = 0 [pid 12540] <... symlink resumed>) = 0 [pid 12539] <... exit_group resumed>) = ? [pid 12542] <... symlink resumed>) = 0 [pid 12542] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12541] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12538] exit_group(0 [pid 12542] <... bpf resumed>) = 3 [pid 12541] <... bpf resumed>) = 3 [pid 12542] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12540] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12538] <... exit_group resumed>) = ? [pid 12541] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12542] <... bpf resumed>) = 4 [pid 12540] <... bpf resumed>) = 3 [pid 12542] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12541] <... bpf resumed>) = 4 [pid 12540] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12542] <... bpf resumed>) = 5 [pid 12541] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12542] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12540] <... bpf resumed>) = 4 [pid 12540] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12541] <... bpf resumed>) = 5 [pid 12541] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12540] <... bpf resumed>) = 5 [pid 12540] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12539] +++ exited with 0 +++ [pid 12538] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12539, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12538, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./1470", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1470", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./1444", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12542] <... bpf resumed>) = 6 [pid 5067] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1444", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12541] <... bpf resumed>) = 6 [pid 12540] <... bpf resumed>) = 6 [pid 12542] exit_group(0) = ? [pid 12541] exit_group(0 [pid 12540] exit_group(0 [pid 5067] newfstatat(3, "", [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 12542] +++ exited with 0 +++ [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12541] <... exit_group resumed>) = ? [pid 12540] <... exit_group resumed>) = ? [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12542, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] umount2("./1444/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1444/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./1490", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./1444/binderfs" [pid 5068] openat(AT_FDCWD, "./1490", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] getdents64(3, [pid 5067] umount2("./1470/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12541] +++ exited with 0 +++ [pid 12540] +++ exited with 0 +++ [pid 5067] newfstatat(AT_FDCWD, "./1470/binderfs", [pid 5066] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12540, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12541, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] umount2("./1490/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... close resumed>) = 0 [pid 5067] unlink("./1470/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5066] rmdir("./1444" [pid 5071] umount2("./1526", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./1490/binderfs", [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] mkdir("./1445", 0777 [pid 5071] openat(AT_FDCWD, "./1526", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] unlink("./1490/binderfs" [pid 5067] close(3 [pid 5071] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5069] umount2("./1512", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5067] rmdir("./1470" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] openat(AT_FDCWD, "./1512", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3./strace-static-x86_64: Process 12543 attached [pid 12543] set_robust_list(0x5555686ec660, 24 [pid 5071] getdents64(3, [pid 5069] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12543 [pid 5068] rmdir("./1490" [pid 5067] mkdir("./1471", 0777 [pid 12543] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] newfstatat(3, "", [pid 12543] chdir("./1445" [pid 5071] umount2("./1526/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12543] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 12543] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] newfstatat(AT_FDCWD, "./1526/binderfs", [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... mkdir resumed>) = 0 [pid 12543] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1526/binderfs" [pid 5069] umount2("./1512/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./1491", 0777 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12543] setpgid(0, 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12543] <... setpgid resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1512/binderfs", [pid 12543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5069] unlink("./1512/binderfs"./strace-static-x86_64: Process 12544 attached [pid 12543] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] getdents64(3, [pid 12544] set_robust_list(0x5555686ec660, 24 [pid 12543] write(3, "1000", 4 [pid 5069] <... unlink resumed>) = 0 [pid 12544] <... set_robust_list resumed>) = 0 [pid 12543] <... write resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12545 attached [pid 5071] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12544 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12545 [pid 12545] set_robust_list(0x5555686ec660, 24) = 0 [pid 12544] chdir("./1471" [pid 12543] close(3 [pid 5071] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 12545] chdir("./1491" [pid 12544] <... chdir resumed>) = 0 [pid 12543] <... close resumed>) = 0 [pid 5071] rmdir("./1526" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12545] <... chdir resumed>) = 0 [pid 12544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12543] symlink("/dev/binderfs", "./binderfs" [pid 5069] close(3 [pid 12545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12544] <... prctl resumed>) = 0 [pid 12543] <... symlink resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12545] <... prctl resumed>) = 0 [pid 12544] setpgid(0, 0 [pid 12545] setpgid(0, 0 [pid 12544] <... setpgid resumed>) = 0 [pid 12543] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1527", 0777 [pid 5069] rmdir("./1512" [pid 12545] <... setpgid resumed>) = 0 [pid 12543] <... bpf resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12543] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12544] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12543] <... bpf resumed>) = 4 [pid 5069] mkdir("./1513", 0777 [pid 12543] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... mkdir resumed>) = 0 [pid 12545] <... openat resumed>) = 3 [pid 12544] write(3, "1000", 4./strace-static-x86_64: Process 12546 attached [pid 12543] <... bpf resumed>) = 5 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12545] write(3, "1000", 4 [pid 12544] <... write resumed>) = 4 [pid 12545] <... write resumed>) = 4 [pid 12544] close(3 [pid 12545] close(3 [pid 12544] <... close resumed>) = 0 [pid 12545] <... close resumed>) = 0 [pid 12544] symlink("/dev/binderfs", "./binderfs" [pid 12545] symlink("/dev/binderfs", "./binderfs" [pid 12546] set_robust_list(0x5555686ec660, 24 [pid 12544] <... symlink resumed>) = 0 [pid 12545] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12547 attached [pid 12546] <... set_robust_list resumed>) = 0 [pid 12545] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12544] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12543] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12547] set_robust_list(0x5555686ec660, 24 [pid 12546] chdir("./1527" [pid 12544] <... bpf resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12546 [pid 12547] <... set_robust_list resumed>) = 0 [pid 12546] <... chdir resumed>) = 0 [pid 12544] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12543] <... bpf resumed>) = 6 [pid 12547] chdir("./1513" [pid 12546] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12545] <... bpf resumed>) = 3 [pid 12544] <... bpf resumed>) = 4 [pid 12543] exit_group(0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12547 [pid 12547] <... chdir resumed>) = 0 [pid 12546] <... prctl resumed>) = 0 [pid 12544] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12543] <... exit_group resumed>) = ? [pid 12547] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12546] setpgid(0, 0 [pid 12545] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12544] <... bpf resumed>) = 5 [pid 12546] <... setpgid resumed>) = 0 [pid 12547] <... prctl resumed>) = 0 [pid 12547] setpgid(0, 0 [pid 12546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12547] <... setpgid resumed>) = 0 [pid 12544] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12545] <... bpf resumed>) = 4 [pid 12544] <... bpf resumed>) = 6 [pid 12545] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12544] exit_group(0 [pid 12547] <... openat resumed>) = 3 [pid 12546] <... openat resumed>) = 3 [pid 12544] <... exit_group resumed>) = ? [pid 12547] write(3, "1000", 4 [pid 12546] write(3, "1000", 4 [pid 12545] <... bpf resumed>) = 5 [pid 12547] <... write resumed>) = 4 [pid 12546] <... write resumed>) = 4 [pid 12547] close(3 [pid 12546] close(3 [pid 12547] <... close resumed>) = 0 [pid 12546] <... close resumed>) = 0 [pid 12546] symlink("/dev/binderfs", "./binderfs" [pid 12547] symlink("/dev/binderfs", "./binderfs" [pid 12545] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12546] <... symlink resumed>) = 0 [pid 12546] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12547] <... symlink resumed>) = 0 [pid 12546] <... bpf resumed>) = 3 [pid 12547] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12546] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12547] <... bpf resumed>) = 3 [pid 12547] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12546] <... bpf resumed>) = 4 [pid 12546] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12547] <... bpf resumed>) = 4 [pid 12546] <... bpf resumed>) = 5 [pid 12547] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12546] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12547] <... bpf resumed>) = 5 [pid 12547] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12544] +++ exited with 0 +++ [pid 12543] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12544, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12543, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12547] <... bpf resumed>) = 6 [pid 12546] <... bpf resumed>) = 6 [pid 12545] <... bpf resumed>) = 6 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12547] exit_group(0 [pid 12546] exit_group(0 [pid 12545] exit_group(0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12546] <... exit_group resumed>) = ? [pid 12547] <... exit_group resumed>) = ? [pid 12545] <... exit_group resumed>) = ? [pid 12547] +++ exited with 0 +++ [pid 5067] umount2("./1471", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12547, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] openat(AT_FDCWD, "./1471", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] umount2("./1445", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./1445", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] umount2("./1513", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5066] newfstatat(3, "", [pid 5069] openat(AT_FDCWD, "./1513", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] umount2("./1471/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5069] newfstatat(3, "", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1471/binderfs", [pid 5069] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./1445/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] unlink("./1471/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1513/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1445/binderfs", [pid 5069] newfstatat(AT_FDCWD, "./1513/binderfs", [pid 5067] <... unlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1513/binderfs" [pid 5067] getdents64(3, [pid 5066] unlink("./1445/binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5067] close(3 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1513" [pid 5067] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5067] rmdir("./1471" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] mkdir("./1514", 0777 [pid 5067] mkdir("./1472", 0777 [pid 5066] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] rmdir("./1445" [pid 12545] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12545, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12548 attached [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... rmdir resumed>) = 0 [pid 12548] set_robust_list(0x5555686ec660, 24) = 0 [pid 12546] +++ exited with 0 +++ [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12548 [pid 5068] umount2("./1491", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1446", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12549 attached [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12546, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] openat(AT_FDCWD, "./1491", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12549 [pid 12549] set_robust_list(0x5555686ec660, 24 [pid 12548] chdir("./1514" [pid 5068] <... openat resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 12549] <... set_robust_list resumed>) = 0 [pid 5071] umount2("./1527", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(3, "", [pid 12548] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12549] chdir("./1472" [pid 12548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] openat(AT_FDCWD, "./1527", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(3, [pid 12549] <... chdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12548] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 12550 attached [pid 12550] set_robust_list(0x5555686ec660, 24 [pid 12549] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12548] setpgid(0, 0 [pid 5071] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12550 [pid 12550] <... set_robust_list resumed>) = 0 [pid 12549] <... prctl resumed>) = 0 [pid 12548] <... setpgid resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12549] setpgid(0, 0 [pid 12550] chdir("./1446" [pid 12549] <... setpgid resumed>) = 0 [pid 12548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./1491/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12550] <... chdir resumed>) = 0 [pid 12549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12550] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12548] <... openat resumed>) = 3 [pid 12550] <... prctl resumed>) = 0 [pid 12549] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(AT_FDCWD, "./1491/binderfs", [pid 12550] setpgid(0, 0) = 0 [pid 12549] write(3, "1000", 4 [pid 12548] write(3, "1000", 4 [pid 5071] umount2("./1527/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12549] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] unlink("./1491/binderfs" [pid 12549] close(3 [pid 12548] <... write resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./1527/binderfs", [pid 12550] <... openat resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 12549] <... close resumed>) = 0 [pid 12548] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12548] <... close resumed>) = 0 [pid 12548] symlink("/dev/binderfs", "./binderfs" [pid 12550] write(3, "1000", 4 [pid 12549] symlink("/dev/binderfs", "./binderfs" [pid 5071] unlink("./1527/binderfs" [pid 5068] getdents64(3, [pid 12550] <... write resumed>) = 4 [pid 12549] <... symlink resumed>) = 0 [pid 12548] <... symlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12550] close(3 [pid 12549] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5068] close(3 [pid 12550] <... close resumed>) = 0 [pid 12548] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 12550] symlink("/dev/binderfs", "./binderfs" [pid 12549] <... bpf resumed>) = 3 [pid 5071] close(3 [pid 5068] rmdir("./1491" [pid 12550] <... symlink resumed>) = 0 [pid 12549] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12548] <... bpf resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12550] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12548] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12550] <... bpf resumed>) = 3 [pid 12549] <... bpf resumed>) = 4 [pid 5071] rmdir("./1527" [pid 5068] mkdir("./1492", 0777 [pid 12550] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12549] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12548] <... bpf resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12548] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1528", 0777 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12551 attached [pid 12550] <... bpf resumed>) = 4 [pid 12549] <... bpf resumed>) = 5 [pid 12548] <... bpf resumed>) = 5 [pid 5071] <... mkdir resumed>) = 0 [pid 12550] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12551] set_robust_list(0x5555686ec660, 24 [pid 12550] <... bpf resumed>) = 5 [pid 12549] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12548] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12551] <... set_robust_list resumed>) = 0 [pid 12551] chdir("./1492" [pid 12549] <... bpf resumed>) = 6 [pid 12548] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12551 [pid 12550] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12549] exit_group(0./strace-static-x86_64: Process 12552 attached [pid 12551] <... chdir resumed>) = 0 [pid 12550] <... bpf resumed>) = 6 [pid 12548] exit_group(0 [pid 12552] set_robust_list(0x5555686ec660, 24 [pid 12551] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12550] exit_group(0 [pid 12549] <... exit_group resumed>) = ? [pid 12548] <... exit_group resumed>) = ? [pid 12552] <... set_robust_list resumed>) = 0 [pid 12550] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12552 [pid 12552] chdir("./1528" [pid 12550] +++ exited with 0 +++ [pid 12548] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12548, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12552] <... chdir resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12552] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12551] <... prctl resumed>) = 0 [pid 12549] +++ exited with 0 +++ [pid 5069] <... restart_syscall resumed>) = 0 [pid 12552] <... prctl resumed>) = 0 [pid 12551] setpgid(0, 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12550, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12551] <... setpgid resumed>) = 0 [pid 12552] setpgid(0, 0 [pid 12551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12552] <... setpgid resumed>) = 0 [pid 5069] umount2("./1514", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12549, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5069] openat(AT_FDCWD, "./1514", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... restart_syscall resumed>) = 0 [pid 12552] <... openat resumed>) = 3 [pid 12551] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5066] umount2("./1446", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12551] write(3, "1000", 4 [pid 12552] write(3, "1000", 4 [pid 5069] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12552] <... write resumed>) = 4 [pid 12551] <... write resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./1446", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12551] close(3 [pid 12552] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1472", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12552] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12552] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] openat(AT_FDCWD, "./1472", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12552] <... symlink resumed>) = 0 [pid 5069] umount2("./1514/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 12552] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12551] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 12552] <... bpf resumed>) = 3 [pid 5069] newfstatat(AT_FDCWD, "./1514/binderfs", [pid 5067] newfstatat(3, "", [pid 12552] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12551] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 12552] <... bpf resumed>) = 4 [pid 5069] unlink("./1514/binderfs" [pid 5067] getdents64(3, [pid 12551] <... symlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12552] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12551] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... unlink resumed>) = 0 [pid 5067] umount2("./1472/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12552] <... bpf resumed>) = 5 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1472/binderfs", [pid 12552] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] rmdir("./1514" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12552] <... bpf resumed>) = 6 [pid 12551] <... bpf resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12551] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] umount2("./1446/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12552] exit_group(0 [pid 12551] <... bpf resumed>) = 4 [pid 5069] mkdir("./1515", 0777 [pid 5067] unlink("./1472/binderfs" [pid 5066] newfstatat(AT_FDCWD, "./1446/binderfs", [pid 12552] <... exit_group resumed>) = ? [pid 12551] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12552] +++ exited with 0 +++ [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12553 attached [pid 12551] <... bpf resumed>) = 5 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12552, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12553] set_robust_list(0x5555686ec660, 24 [pid 12551] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1528", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12553 [pid 5067] close(3 [pid 5066] unlink("./1446/binderfs" [pid 12553] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1472" [pid 12553] chdir("./1515" [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12551] <... bpf resumed>) = 6 [pid 12553] <... chdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1528", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] mkdir("./1473", 0777 [pid 5066] getdents64(3, [pid 12553] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12551] exit_group(0 [pid 5071] <... openat resumed>) = 3 [pid 12553] <... prctl resumed>) = 0 [pid 12553] setpgid(0, 0 [pid 12551] <... exit_group resumed>) = ? [pid 5071] newfstatat(3, "", [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12553] <... setpgid resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12554 attached [pid 12553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] close(3 [pid 12554] set_robust_list(0x5555686ec660, 24 [pid 12553] <... openat resumed>) = 3 [pid 12551] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 12554] <... set_robust_list resumed>) = 0 [pid 12553] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12554 [pid 5066] rmdir("./1446" [pid 12554] chdir("./1473" [pid 12553] <... write resumed>) = 4 [pid 12553] close(3 [pid 5071] umount2("./1528/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12551, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12554] <... chdir resumed>) = 0 [pid 12553] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1492", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 12554] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12553] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./1528/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12554] <... prctl resumed>) = 0 [pid 12553] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] openat(AT_FDCWD, "./1492", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12554] setpgid(0, 0 [pid 5066] mkdir("./1447", 0777 [pid 12554] <... setpgid resumed>) = 0 [pid 12553] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] unlink("./1528/binderfs" [pid 5068] <... openat resumed>) = 3 [pid 12554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12553] <... bpf resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] <... mkdir resumed>) = 0 [pid 12554] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 12553] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12553] <... bpf resumed>) = 4 [pid 5071] close(3 [pid 12554] write(3, "1000", 4 [pid 5071] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 12554] <... write resumed>) = 4 [pid 12554] close(3) = 0 [pid 12554] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 12555 attached [pid 12555] set_robust_list(0x5555686ec660, 24) = 0 [pid 12555] chdir("./1447" [pid 12553] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] rmdir("./1528" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12555 [pid 12555] <... chdir resumed>) = 0 [pid 12554] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] umount2("./1492/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12555] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12554] <... bpf resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12555] <... prctl resumed>) = 0 [pid 12554] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12555] setpgid(0, 0 [pid 12554] <... bpf resumed>) = 4 [pid 12553] <... bpf resumed>) = 5 [pid 5071] mkdir("./1529", 0777 [pid 5068] newfstatat(AT_FDCWD, "./1492/binderfs", [pid 12555] <... setpgid resumed>) = 0 [pid 12554] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12554] <... bpf resumed>) = 5 [pid 12553] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12554] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12555] <... openat resumed>) = 3 [pid 12553] <... bpf resumed>) = 6 [pid 5068] unlink("./1492/binderfs" [pid 12554] <... bpf resumed>) = 6 [pid 12555] write(3, "1000", 4 [pid 12554] exit_group(0 [pid 5068] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12556 attached [pid 12555] <... write resumed>) = 4 [pid 12554] <... exit_group resumed>) = ? [pid 12553] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12556 [pid 5068] getdents64(3, [pid 12556] set_robust_list(0x5555686ec660, 24 [pid 12555] close(3 [pid 12553] <... exit_group resumed>) = ? [pid 12555] <... close resumed>) = 0 [pid 12556] <... set_robust_list resumed>) = 0 [pid 12555] symlink("/dev/binderfs", "./binderfs" [pid 12554] +++ exited with 0 +++ [pid 12553] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12556] chdir("./1529" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12553, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12555] <... symlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12554, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12556] <... chdir resumed>) = 0 [pid 5068] close(3 [pid 12556] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... close resumed>) = 0 [pid 12556] <... prctl resumed>) = 0 [pid 12555] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] rmdir("./1492" [pid 12556] setpgid(0, 0 [pid 12555] <... bpf resumed>) = 3 [pid 5069] umount2("./1515", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1473", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12556] <... setpgid resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12555] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] openat(AT_FDCWD, "./1515", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1473", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... rmdir resumed>) = 0 [pid 12556] <... openat resumed>) = 3 [pid 12556] write(3, "1000", 4 [pid 5069] <... openat resumed>) = 3 [pid 5068] mkdir("./1493", 0777 [pid 5067] <... openat resumed>) = 3 [pid 12556] <... write resumed>) = 4 [pid 12555] <... bpf resumed>) = 4 [pid 5069] newfstatat(3, "", [pid 5067] newfstatat(3, "", [pid 12556] close(3 [pid 12555] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12556] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5069] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12556] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12557 ./strace-static-x86_64: Process 12557 attached [pid 12556] <... symlink resumed>) = 0 [pid 12555] <... bpf resumed>) = 5 [pid 5069] umount2("./1515/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1473/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12557] set_robust_list(0x5555686ec660, 24) = 0 [pid 12557] chdir("./1493" [pid 12556] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12555] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12557] <... chdir resumed>) = 0 [pid 12556] <... bpf resumed>) = 3 [pid 12555] <... bpf resumed>) = 6 [pid 5069] newfstatat(AT_FDCWD, "./1515/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1473/binderfs", [pid 12557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12556] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12555] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12557] <... prctl resumed>) = 0 [pid 5067] unlink("./1473/binderfs" [pid 12555] <... exit_group resumed>) = ? [pid 12557] setpgid(0, 0 [pid 12556] <... bpf resumed>) = 4 [pid 5069] unlink("./1515/binderfs" [pid 12557] <... setpgid resumed>) = 0 [pid 12557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12556] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12555] +++ exited with 0 +++ [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] getdents64(3, [pid 12557] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12555, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] close(3 [pid 5067] close(3 [pid 12557] write(3, "1000", 4 [pid 12556] <... bpf resumed>) = 5 [pid 5069] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5069] rmdir("./1515" [pid 5067] rmdir("./1473" [pid 12557] <... write resumed>) = 4 [pid 12556] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... rmdir resumed>) = 0 [pid 12557] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 12557] <... close resumed>) = 0 [pid 5066] umount2("./1447", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12557] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] mkdir("./1516", 0777 [pid 12557] <... symlink resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] mkdir("./1474", 0777 [pid 5066] openat(AT_FDCWD, "./1447", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12557] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(3, "", [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12558 attached [pid 12557] <... bpf resumed>) = 3 [pid 12556] <... bpf resumed>) = 6 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12556] exit_group(0 [pid 12558] set_robust_list(0x5555686ec660, 24 [pid 12557] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12559 attached [pid 12558] <... set_robust_list resumed>) = 0 [pid 12556] <... exit_group resumed>) = ? [pid 12559] set_robust_list(0x5555686ec660, 24 [pid 12558] chdir("./1516" [pid 12557] <... bpf resumed>) = 4 [pid 12556] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12558 [pid 12559] <... set_robust_list resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12556, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12559 [pid 5066] umount2("./1447/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12557] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12559] chdir("./1474" [pid 12558] <... chdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] newfstatat(AT_FDCWD, "./1447/binderfs", [pid 12558] <... prctl resumed>) = 0 [pid 12558] setpgid(0, 0 [pid 12559] <... chdir resumed>) = 0 [pid 12558] <... setpgid resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12559] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] unlink("./1447/binderfs" [pid 12558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12559] <... prctl resumed>) = 0 [pid 12557] <... bpf resumed>) = 5 [pid 5066] <... unlink resumed>) = 0 [pid 12559] setpgid(0, 0 [pid 12557] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1529", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12559] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12558] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 12559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1529", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12558] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12559] <... openat resumed>) = 3 [pid 12558] <... write resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5066] close(3 [pid 12558] close(3) = 0 [pid 5071] newfstatat(3, "", [pid 12559] write(3, "1000", 4 [pid 12558] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12559] <... write resumed>) = 4 [pid 12559] close(3) = 0 [pid 12558] <... symlink resumed>) = 0 [pid 12559] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] getdents64(3, [pid 5066] rmdir("./1447" [pid 12558] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12559] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... rmdir resumed>) = 0 [pid 12559] <... bpf resumed>) = 3 [pid 12558] <... bpf resumed>) = 3 [pid 5071] umount2("./1529/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12559] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12558] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12559] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12558] <... bpf resumed>) = 4 [pid 5066] mkdir("./1448", 0777 [pid 12559] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(AT_FDCWD, "./1529/binderfs", [pid 12559] <... bpf resumed>) = 5 [pid 12558] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12559] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12558] <... bpf resumed>) = 5 [pid 5071] unlink("./1529/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12558] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12560 attached [pid 12559] <... bpf resumed>) = 6 [pid 12557] <... bpf resumed>) = 6 [pid 5071] <... unlink resumed>) = 0 [pid 5071] getdents64(3, [pid 12558] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12560 [pid 12560] set_robust_list(0x5555686ec660, 24 [pid 12559] exit_group(0 [pid 5071] close(3 [pid 12557] exit_group(0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1529" [pid 12560] <... set_robust_list resumed>) = 0 [pid 12559] <... exit_group resumed>) = ? [pid 12558] exit_group(0 [pid 12557] <... exit_group resumed>) = ? [pid 5071] <... rmdir resumed>) = 0 [pid 12560] chdir("./1448" [pid 12558] <... exit_group resumed>) = ? [pid 12557] +++ exited with 0 +++ [pid 5071] mkdir("./1530", 0777 [pid 12560] <... chdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12557, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12560] <... prctl resumed>) = 0 [pid 12560] setpgid(0, 0./strace-static-x86_64: Process 12561 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12561 [pid 12560] <... setpgid resumed>) = 0 [pid 12561] set_robust_list(0x5555686ec660, 24 [pid 12560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12561] <... set_robust_list resumed>) = 0 [pid 12560] <... openat resumed>) = 3 [pid 12560] write(3, "1000", 4 [pid 12561] chdir("./1530" [pid 5068] umount2("./1493", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12561] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12561] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12560] <... write resumed>) = 4 [pid 12559] +++ exited with 0 +++ [pid 12558] +++ exited with 0 +++ [pid 5068] openat(AT_FDCWD, "./1493", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12561] <... prctl resumed>) = 0 [pid 12560] close(3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12558, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... openat resumed>) = 3 [pid 12561] setpgid(0, 0 [pid 12560] <... close resumed>) = 0 [pid 12560] symlink("/dev/binderfs", "./binderfs" [pid 12561] <... setpgid resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12559, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12560] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1474", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12561] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12560] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] openat(AT_FDCWD, "./1474", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12561] write(3, "1000", 4 [pid 12560] <... bpf resumed>) = 3 [pid 5068] umount2("./1493/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 12561] <... write resumed>) = 4 [pid 12560] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12561] close(3 [pid 5069] umount2("./1516", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(3, "", [pid 12560] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1493/binderfs", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12561] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1516", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] getdents64(3, [pid 12561] symlink("/dev/binderfs", "./binderfs" [pid 12560] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... openat resumed>) = 3 [pid 5068] unlink("./1493/binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12561] <... symlink resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] <... unlink resumed>) = 0 [pid 5067] umount2("./1474/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12561] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12560] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 12561] <... bpf resumed>) = 3 [pid 12561] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12560] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1474/binderfs", [pid 12561] <... bpf resumed>) = 4 [pid 12560] <... bpf resumed>) = 6 [pid 5069] umount2("./1516/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12561] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] newfstatat(AT_FDCWD, "./1516/binderfs", [pid 5067] unlink("./1474/binderfs" [pid 12560] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12560] <... exit_group resumed>) = ? [pid 5069] unlink("./1516/binderfs" [pid 5068] rmdir("./1493" [pid 5067] getdents64(3, [pid 12561] <... bpf resumed>) = 5 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] close(3 [pid 5069] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./1474" [pid 12561] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] close(3 [pid 5068] mkdir("./1494", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 12560] +++ exited with 0 +++ [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1516" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12560, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] umount2("./1448", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./1475", 0777 [pid 5066] openat(AT_FDCWD, "./1448", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] mkdir("./1517", 0777 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(3, "", [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12562 attached [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12563 ./strace-static-x86_64: Process 12563 attached [pid 12562] set_robust_list(0x5555686ec660, 24 [pid 5066] getdents64(3, [pid 12563] set_robust_list(0x5555686ec660, 24) = 0 [pid 12562] <... set_robust_list resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12563] chdir("./1494" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12562 [pid 5066] umount2("./1448/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12563] <... chdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12564 attached [pid 12563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] newfstatat(AT_FDCWD, "./1448/binderfs", [pid 12562] chdir("./1475" [pid 12561] <... bpf resumed>) = 6 [pid 12564] set_robust_list(0x5555686ec660, 24 [pid 12563] <... prctl resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12564] <... set_robust_list resumed>) = 0 [pid 12563] setpgid(0, 0 [pid 12564] chdir("./1517" [pid 12563] <... setpgid resumed>) = 0 [pid 12562] <... chdir resumed>) = 0 [pid 12561] exit_group(0 [pid 5066] unlink("./1448/binderfs" [pid 12562] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12561] <... exit_group resumed>) = ? [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12564 [pid 12564] <... chdir resumed>) = 0 [pid 12563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12562] <... prctl resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12563] <... openat resumed>) = 3 [pid 12562] setpgid(0, 0 [pid 12564] setpgid(0, 0 [pid 12562] <... setpgid resumed>) = 0 [pid 5066] getdents64(3, [pid 12564] <... setpgid resumed>) = 0 [pid 12563] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12563] <... write resumed>) = 4 [pid 12562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] close(3 [pid 12564] <... openat resumed>) = 3 [pid 12563] close(3 [pid 5066] <... close resumed>) = 0 [pid 12563] <... close resumed>) = 0 [pid 5066] rmdir("./1448" [pid 12564] write(3, "1000", 4 [pid 12563] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 12564] <... write resumed>) = 4 [pid 12563] <... symlink resumed>) = 0 [pid 12562] <... openat resumed>) = 3 [pid 12561] +++ exited with 0 +++ [pid 12562] write(3, "1000", 4 [pid 12564] close(3) = 0 [pid 12562] <... write resumed>) = 4 [pid 12564] symlink("/dev/binderfs", "./binderfs" [pid 12563] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12562] close(3 [pid 5066] mkdir("./1449", 0777 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12561, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12564] <... symlink resumed>) = 0 [pid 12562] <... close resumed>) = 0 [pid 5071] umount2("./1530", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12562] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12564] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12563] <... bpf resumed>) = 3 [pid 12562] <... symlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1530", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... mkdir resumed>) = 0 [pid 12563] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12562] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12564] <... bpf resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 12564] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12563] <... bpf resumed>) = 4 [pid 12562] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12564] <... bpf resumed>) = 4 [pid 12563] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12562] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12564] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12565 attached [pid 12562] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 12563] <... bpf resumed>) = 5 [pid 12565] set_robust_list(0x5555686ec660, 24) = 0 [pid 12562] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12565] chdir("./1449" [pid 12564] <... bpf resumed>) = 5 [pid 12563] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12565 [pid 12565] <... chdir resumed>) = 0 [pid 12564] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1530/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12562] <... bpf resumed>) = 5 [pid 12565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12564] <... bpf resumed>) = 6 [pid 12563] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12565] <... prctl resumed>) = 0 [pid 12564] exit_group(0 [pid 12563] exit_group(0 [pid 12562] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(AT_FDCWD, "./1530/binderfs", [pid 12565] setpgid(0, 0 [pid 12564] <... exit_group resumed>) = ? [pid 12563] <... exit_group resumed>) = ? [pid 12562] <... bpf resumed>) = 6 [pid 12565] <... setpgid resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12563] +++ exited with 0 +++ [pid 12562] exit_group(0 [pid 5071] unlink("./1530/binderfs" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12563, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] <... unlink resumed>) = 0 [pid 12562] <... exit_group resumed>) = ? [pid 12565] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 12565] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./1494", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12565] <... write resumed>) = 4 [pid 12565] close(3 [pid 5071] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12565] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1494", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12565] symlink("/dev/binderfs", "./binderfs" [pid 5071] rmdir("./1530" [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 12565] <... symlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1531", 0777 [pid 12565] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12565] <... bpf resumed>) = 3 ./strace-static-x86_64: Process 12566 attached [pid 5068] umount2("./1494/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12566] set_robust_list(0x5555686ec660, 24 [pid 12565] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12564] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12566] <... set_robust_list resumed>) = 0 [pid 12565] <... bpf resumed>) = 4 [pid 12562] +++ exited with 0 +++ [pid 12566] chdir("./1531" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12566 [pid 5068] newfstatat(AT_FDCWD, "./1494/binderfs", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12562, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12564, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12566] <... chdir resumed>) = 0 [pid 12565] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12566] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] umount2("./1517", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1517", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] newfstatat(3, "", [pid 12566] <... prctl resumed>) = 0 [pid 12565] <... bpf resumed>) = 5 [pid 5068] unlink("./1494/binderfs" [pid 12566] setpgid(0, 0 [pid 12565] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1475", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12566] <... setpgid resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] getdents64(3, [pid 12566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1517/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./1475", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12565] <... bpf resumed>) = 6 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12566] <... openat resumed>) = 3 [pid 12565] exit_group(0 [pid 5069] newfstatat(AT_FDCWD, "./1517/binderfs", [pid 5068] close(3 [pid 5067] <... openat resumed>) = 3 [pid 12565] <... exit_group resumed>) = ? [pid 12566] write(3, "1000", 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... close resumed>) = 0 [pid 12566] <... write resumed>) = 4 [pid 12566] close(3 [pid 5069] unlink("./1517/binderfs" [pid 5068] rmdir("./1494" [pid 12566] <... close resumed>) = 0 [pid 12565] +++ exited with 0 +++ [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 12566] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12565, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12566] <... symlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] mkdir("./1495", 0777 [pid 5067] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 12566] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] rmdir("./1517" [pid 12566] <... bpf resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] umount2("./1475/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1475/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1475/binderfs" [pid 5066] umount2("./1449", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1449", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12566] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 12566] <... bpf resumed>) = 4 [pid 5069] mkdir("./1518", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(3, "", ./strace-static-x86_64: Process 12567 attached [pid 5067] close(3 [pid 12567] set_robust_list(0x5555686ec660, 24 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... close resumed>) = 0 [pid 12566] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... mkdir resumed>) = 0 [pid 12567] <... set_robust_list resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12567 [pid 5067] rmdir("./1475" [pid 5066] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12566] <... bpf resumed>) = 5 [pid 12567] chdir("./1495" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1476", 0777 [pid 5066] umount2("./1449/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12566] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12568 attached ) = 6 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12568] set_robust_list(0x5555686ec660, 24 [pid 12567] <... chdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12568 [pid 5067] <... mkdir resumed>) = 0 [pid 12566] exit_group(0 [pid 5066] newfstatat(AT_FDCWD, "./1449/binderfs", [pid 12567] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12568] <... set_robust_list resumed>) = 0 [pid 12567] <... prctl resumed>) = 0 [pid 12566] <... exit_group resumed>) = ? [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12568] chdir("./1518" [pid 5066] unlink("./1449/binderfs" [pid 12568] <... chdir resumed>) = 0 [pid 12567] setpgid(0, 0./strace-static-x86_64: Process 12569 attached [pid 12566] +++ exited with 0 +++ [pid 12567] <... setpgid resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12568] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12566, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12569 [pid 12569] set_robust_list(0x5555686ec660, 24 [pid 12568] <... prctl resumed>) = 0 [pid 12567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] getdents64(3, [pid 12569] <... set_robust_list resumed>) = 0 [pid 12568] setpgid(0, 0 [pid 5071] umount2("./1531", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12568] <... setpgid resumed>) = 0 [pid 12569] chdir("./1476" [pid 12567] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12569] <... chdir resumed>) = 0 [pid 12568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1531", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12567] write(3, "1000", 4 [pid 5066] close(3 [pid 12569] <... prctl resumed>) = 0 [pid 12567] <... write resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 12569] setpgid(0, 0 [pid 12568] <... openat resumed>) = 3 [pid 12567] close(3 [pid 5071] newfstatat(3, "", [pid 5066] rmdir("./1449" [pid 12569] <... setpgid resumed>) = 0 [pid 12568] write(3, "1000", 4 [pid 12567] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12567] symlink("/dev/binderfs", "./binderfs" [pid 12569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] mkdir("./1450", 0777 [pid 12569] <... openat resumed>) = 3 [pid 12568] <... write resumed>) = 4 [pid 5071] getdents64(3, [pid 12568] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12569] write(3, "1000", 4 [pid 12568] <... close resumed>) = 0 [pid 5071] umount2("./1531/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12567] <... symlink resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12569] <... write resumed>) = 4 [pid 12568] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12569] close(3 [pid 12567] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1531/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12569] <... close resumed>) = 0 [pid 12568] <... symlink resumed>) = 0 [pid 12567] <... bpf resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12569] symlink("/dev/binderfs", "./binderfs" [pid 12567] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12569] <... symlink resumed>) = 0 [pid 5071] unlink("./1531/binderfs" [pid 12569] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12568] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12567] <... bpf resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12570 attached [pid 12569] <... bpf resumed>) = 3 [pid 12568] <... bpf resumed>) = 3 [pid 12567] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 12570] set_robust_list(0x5555686ec660, 24 [pid 12569] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12568] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12567] <... bpf resumed>) = 5 [pid 12570] <... set_robust_list resumed>) = 0 [pid 5071] close(3 [pid 12570] chdir("./1450" [pid 12569] <... bpf resumed>) = 4 [pid 12568] <... bpf resumed>) = 4 [pid 12567] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12570 [pid 12570] <... chdir resumed>) = 0 [pid 12569] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12568] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12567] <... bpf resumed>) = 6 [pid 5071] rmdir("./1531" [pid 12570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12569] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 12570] <... prctl resumed>) = 0 [pid 12570] setpgid(0, 0 [pid 12568] <... bpf resumed>) = 5 [pid 12570] <... setpgid resumed>) = 0 [pid 12567] exit_group(0 [pid 5071] mkdir("./1532", 0777 [pid 12570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12569] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12568] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12567] <... exit_group resumed>) = ? [pid 12570] <... openat resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 12569] <... bpf resumed>) = 6 [pid 12570] write(3, "1000", 4 [pid 12569] exit_group(0 [pid 12568] <... bpf resumed>) = 6 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12569] <... exit_group resumed>) = ? [pid 12570] <... write resumed>) = 4 [pid 12570] close(3 [pid 12568] exit_group(0 [pid 12570] <... close resumed>) = 0 [pid 12570] symlink("/dev/binderfs", "./binderfs" [pid 12569] +++ exited with 0 +++ [pid 12568] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12571 attached [pid 12570] <... symlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12569, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12570] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12571] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12571 [pid 12571] <... set_robust_list resumed>) = 0 [pid 12570] <... bpf resumed>) = 3 [pid 12570] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12571] chdir("./1532") = 0 [pid 12570] <... bpf resumed>) = 4 [pid 12571] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12570] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12571] setpgid(0, 0) = 0 [pid 12571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12570] <... bpf resumed>) = 5 [pid 12571] <... openat resumed>) = 3 [pid 12570] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] umount2("./1476", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12571] write(3, "1000", 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1476", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12571] <... write resumed>) = 4 [pid 12571] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12571] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12571] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12571] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, [pid 12571] <... bpf resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12571] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5067] umount2("./1476/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12571] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5067] newfstatat(AT_FDCWD, "./1476/binderfs", [pid 12567] +++ exited with 0 +++ [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12567, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] unlink("./1476/binderfs" [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12571] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12571] exit_group(0) = ? [pid 5067] <... unlink resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5068] umount2("./1495", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./1476" [pid 5068] openat(AT_FDCWD, "./1495", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", [pid 5067] <... rmdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mkdir("./1477", 0777 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... mkdir resumed>) = 0 [pid 5068] umount2("./1495/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1495/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12572 attached [pid 12570] <... bpf resumed>) = 6 [pid 12568] +++ exited with 0 +++ [pid 5068] unlink("./1495/binderfs" [pid 12572] set_robust_list(0x5555686ec660, 24 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12572 [pid 12572] <... set_robust_list resumed>) = 0 [pid 12570] exit_group(0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12568, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... unlink resumed>) = 0 [pid 12572] chdir("./1477" [pid 12570] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 12572] <... chdir resumed>) = 0 [pid 12572] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] umount2("./1518", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12572] <... prctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 12572] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "./1518", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... close resumed>) = 0 [pid 12572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... openat resumed>) = 3 [pid 5068] rmdir("./1495" [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12572] <... openat resumed>) = 3 [pid 12571] +++ exited with 0 +++ [pid 12570] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 5068] <... rmdir resumed>) = 0 [pid 12572] write(3, "1000", 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12571, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] mkdir("./1496", 0777 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12570, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12572] <... write resumed>) = 4 [pid 5069] umount2("./1518/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12572] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 12572] <... close resumed>) = 0 [pid 5071] umount2("./1532", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./1518/binderfs", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12572] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12572] <... symlink resumed>) = 0 [pid 5069] unlink("./1518/binderfs" [pid 5066] umount2("./1450", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12572] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1532", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12573 attached [pid 12572] <... bpf resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1450", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12573] set_robust_list(0x5555686ec660, 24 [pid 12572] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(3, "", [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12573 [pid 5066] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 12573] <... set_robust_list resumed>) = 0 [pid 12572] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(3, "", [pid 12573] chdir("./1496" [pid 12572] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1532/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12573] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12573] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12572] <... bpf resumed>) = 5 [pid 5071] newfstatat(AT_FDCWD, "./1532/binderfs", [pid 5069] rmdir("./1518" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12573] <... prctl resumed>) = 0 [pid 12572] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5071] unlink("./1532/binderfs" [pid 12573] setpgid(0, 0 [pid 12572] <... bpf resumed>) = 6 [pid 5071] <... unlink resumed>) = 0 [pid 12573] <... setpgid resumed>) = 0 [pid 5069] mkdir("./1519", 0777 [pid 5066] umount2("./1450/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 12573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12572] exit_group(0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12573] <... openat resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(AT_FDCWD, "./1450/binderfs", [pid 12573] write(3, "1000", 4 [pid 12572] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12574 attached [pid 12573] <... write resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12574] set_robust_list(0x5555686ec660, 24 [pid 12573] close(3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12574 [pid 5066] unlink("./1450/binderfs" [pid 12573] <... close resumed>) = 0 [pid 12572] +++ exited with 0 +++ [pid 12574] <... set_robust_list resumed>) = 0 [pid 5071] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 12574] chdir("./1519" [pid 12573] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12572, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12574] <... chdir resumed>) = 0 [pid 5071] rmdir("./1532" [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12574] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12573] <... symlink resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] getdents64(3, [pid 12574] <... prctl resumed>) = 0 [pid 12574] setpgid(0, 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12574] <... setpgid resumed>) = 0 [pid 12573] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1533", 0777 [pid 5066] close(3 [pid 12574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12573] <... bpf resumed>) = 3 [pid 5067] umount2("./1477", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 12574] <... openat resumed>) = 3 [pid 12573] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./1450" [pid 12574] write(3, "1000", 4 [pid 5067] openat(AT_FDCWD, "./1477", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12574] <... write resumed>) = 4 [pid 12573] <... bpf resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 [pid 12574] close(3 [pid 12573] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] newfstatat(3, "", [pid 5066] <... rmdir resumed>) = 0 [pid 12574] <... close resumed>) = 0 [pid 12574] symlink("/dev/binderfs", "./binderfs" [pid 12573] <... bpf resumed>) = 5 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1451", 0777 [pid 12574] <... symlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12575 attached [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12574] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12573] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12575 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./1477/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12575] set_robust_list(0x5555686ec660, 24 [pid 12574] <... bpf resumed>) = 3 [pid 12573] <... bpf resumed>) = 6 [pid 12573] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12575] <... set_robust_list resumed>) = 0 [pid 12574] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12575] chdir("./1533" [pid 5067] newfstatat(AT_FDCWD, "./1477/binderfs", [pid 12573] <... exit_group resumed>) = ? [pid 12575] <... chdir resumed>) = 0 [pid 12574] <... bpf resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12575] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] unlink("./1477/binderfs" [pid 12575] <... prctl resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12576 ./strace-static-x86_64: Process 12576 attached [pid 12576] set_robust_list(0x5555686ec660, 24) = 0 [pid 12575] setpgid(0, 0 [pid 5067] <... unlink resumed>) = 0 [pid 12576] chdir("./1451" [pid 12574] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12573] +++ exited with 0 +++ [pid 12576] <... chdir resumed>) = 0 [pid 12575] <... setpgid resumed>) = 0 [pid 5067] getdents64(3, [pid 12576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12576] setpgid(0, 0) = 0 [pid 12575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12574] <... bpf resumed>) = 5 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12573, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12574] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12575] <... openat resumed>) = 3 [pid 5067] close(3 [pid 12574] <... bpf resumed>) = 6 [pid 12576] <... openat resumed>) = 3 [pid 12574] exit_group(0 [pid 5067] <... close resumed>) = 0 [pid 12574] <... exit_group resumed>) = ? [pid 12576] write(3, "1000", 4 [pid 12575] write(3, "1000", 4 [pid 5068] umount2("./1496", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1477" [pid 12576] <... write resumed>) = 4 [pid 12575] <... write resumed>) = 4 [pid 12574] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12576] close(3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12574, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] openat(AT_FDCWD, "./1496", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12576] <... close resumed>) = 0 [pid 12575] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1478", 0777 [pid 12576] symlink("/dev/binderfs", "./binderfs" [pid 12575] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 12576] <... symlink resumed>) = 0 [pid 12576] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12575] symlink("/dev/binderfs", "./binderfs" [pid 5069] umount2("./1519", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(3, "", [pid 12576] <... bpf resumed>) = 3 [pid 12575] <... symlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12576] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] openat(AT_FDCWD, "./1519", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12577 attached [pid 12575] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12575] <... bpf resumed>) = 3 [pid 12577] set_robust_list(0x5555686ec660, 24 [pid 12576] <... bpf resumed>) = 4 [pid 5069] newfstatat(3, "", [pid 5068] umount2("./1496/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12577] <... set_robust_list resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12577 [pid 12577] chdir("./1478" [pid 12576] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12575] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12577] <... chdir resumed>) = 0 [pid 12577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12576] <... bpf resumed>) = 5 [pid 5068] newfstatat(AT_FDCWD, "./1496/binderfs", [pid 12577] <... prctl resumed>) = 0 [pid 12576] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12575] <... bpf resumed>) = 4 [pid 5069] getdents64(3, [pid 12577] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12577] <... setpgid resumed>) = 0 [pid 12577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12575] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] unlink("./1496/binderfs" [pid 12577] <... openat resumed>) = 3 [pid 12575] <... bpf resumed>) = 5 [pid 12577] write(3, "1000", 4 [pid 5068] <... unlink resumed>) = 0 [pid 5069] umount2("./1519/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12577] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12577] close(3 [pid 5069] newfstatat(AT_FDCWD, "./1519/binderfs", [pid 12577] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 12577] symlink("/dev/binderfs", "./binderfs" [pid 12576] <... bpf resumed>) = 6 [pid 12575] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12576] exit_group(0 [pid 12575] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12577] <... symlink resumed>) = 0 [pid 12575] exit_group(0 [pid 5069] unlink("./1519/binderfs" [pid 5068] close(3 [pid 12576] <... exit_group resumed>) = ? [pid 12575] <... exit_group resumed>) = ? [pid 5068] <... close resumed>) = 0 [pid 12577] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... unlink resumed>) = 0 [pid 5068] rmdir("./1496" [pid 12577] <... bpf resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 12575] +++ exited with 0 +++ [pid 12577] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12575, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] getdents64(3, [pid 12577] <... bpf resumed>) = 4 [pid 12576] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] mkdir("./1497", 0777 [pid 12577] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] close(3 [pid 12577] <... bpf resumed>) = 5 [pid 5069] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12576, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1451", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] rmdir("./1519" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1451", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./1533", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12577] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1533", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] mkdir("./1520", 0777 [pid 5066] newfstatat(3, "", [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12578 attached [pid 12577] <... bpf resumed>) = 6 [pid 5071] <... openat resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12578] set_robust_list(0x5555686ec660, 24 [pid 12577] exit_group(0 [pid 5071] newfstatat(3, "", [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12578 [pid 12577] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12579 attached [pid 12578] <... set_robust_list resumed>) = 0 [pid 5071] getdents64(3, [pid 5066] umount2("./1451/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12579] set_robust_list(0x5555686ec660, 24 [pid 12578] chdir("./1497" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12579] <... set_robust_list resumed>) = 0 [pid 12578] <... chdir resumed>) = 0 [pid 12577] +++ exited with 0 +++ [pid 5071] umount2("./1533/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12579 [pid 5066] newfstatat(AT_FDCWD, "./1451/binderfs", [pid 12579] chdir("./1520" [pid 12578] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12577, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12579] <... chdir resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12579] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] unlink("./1451/binderfs" [pid 12579] <... prctl resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12578] <... prctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1533/binderfs", [pid 12578] setpgid(0, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12578] <... setpgid resumed>) = 0 [pid 5071] unlink("./1533/binderfs" [pid 12579] setpgid(0, 0 [pid 12578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./1478", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 12579] <... setpgid resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 12579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12578] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5067] openat(AT_FDCWD, "./1478", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12579] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 12579] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(3, "", [pid 5066] close(3 [pid 12579] <... write resumed>) = 4 [pid 12578] write(3, "1000", 4 [pid 5071] close(3 [pid 12579] close(3 [pid 12578] <... write resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... close resumed>) = 0 [pid 12579] <... close resumed>) = 0 [pid 12578] close(3 [pid 5071] rmdir("./1533" [pid 12579] symlink("/dev/binderfs", "./binderfs" [pid 12578] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] rmdir("./1451" [pid 12578] symlink("/dev/binderfs", "./binderfs" [pid 12579] <... symlink resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1452", 0777 [pid 12579] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12578] <... symlink resumed>) = 0 [pid 5071] mkdir("./1534", 0777 [pid 5067] umount2("./1478/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12579] <... bpf resumed>) = 3 [pid 12579] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12579] <... bpf resumed>) = 4 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12579] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12578] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1478/binderfs", ./strace-static-x86_64: Process 12580 attached [pid 12579] <... bpf resumed>) = 5 [pid 12578] <... bpf resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1478/binderfs" [pid 12580] set_robust_list(0x5555686ec660, 24 [pid 12579] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12578] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12580 [pid 12580] <... set_robust_list resumed>) = 0 [pid 12578] <... bpf resumed>) = 4 [pid 5067] getdents64(3, [pid 12579] <... bpf resumed>) = 6 [pid 12580] chdir("./1452" [pid 12578] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12581 attached [pid 12580] <... chdir resumed>) = 0 [pid 12579] exit_group(0 [pid 5067] close(3 [pid 12581] set_robust_list(0x5555686ec660, 24) = 0 [pid 12580] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12579] <... exit_group resumed>) = ? [pid 12578] <... bpf resumed>) = 5 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12581 [pid 5067] <... close resumed>) = 0 [pid 12580] <... prctl resumed>) = 0 [pid 5067] rmdir("./1478") = 0 [pid 12579] +++ exited with 0 +++ [pid 12578] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12580] setpgid(0, 0 [pid 12581] chdir("./1534" [pid 12580] <... setpgid resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12579, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5067] mkdir("./1479", 0777 [pid 5069] <... restart_syscall resumed>) = 0 [pid 12580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12581] <... chdir resumed>) = 0 [pid 5069] umount2("./1520", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12581] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12580] <... openat resumed>) = 3 [pid 12578] <... bpf resumed>) = 6 [pid 5067] <... mkdir resumed>) = 0 [pid 12581] <... prctl resumed>) = 0 [pid 12580] write(3, "1000", 4 [pid 12578] exit_group(0 [pid 12581] setpgid(0, 0 [pid 12580] <... write resumed>) = 4 [pid 12578] <... exit_group resumed>) = ? [pid 5069] openat(AT_FDCWD, "./1520", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12581] <... setpgid resumed>) = 0 [pid 12581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 12582 attached [pid 12580] close(3 [pid 12578] +++ exited with 0 +++ [pid 5069] <... openat resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12578, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12582 [pid 12582] set_robust_list(0x5555686ec660, 24 [pid 12581] write(3, "1000", 4 [pid 12580] <... close resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 12582] <... set_robust_list resumed>) = 0 [pid 12581] <... write resumed>) = 4 [pid 12580] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12582] chdir("./1479" [pid 12581] close(3 [pid 12580] <... symlink resumed>) = 0 [pid 5069] getdents64(3, [pid 12581] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12581] symlink("/dev/binderfs", "./binderfs" [pid 12580] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1520/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1497", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12582] <... chdir resumed>) = 0 [pid 12581] <... symlink resumed>) = 0 [pid 12582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12582] <... prctl resumed>) = 0 [pid 12581] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12580] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1497", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12582] setpgid(0, 0) = 0 [pid 12581] <... bpf resumed>) = 3 [pid 12580] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(AT_FDCWD, "./1520/binderfs", [pid 5068] <... openat resumed>) = 3 [pid 12582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12581] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12580] <... bpf resumed>) = 4 [pid 5068] newfstatat(3, "", [pid 12582] <... openat resumed>) = 3 [pid 12580] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12582] write(3, "1000", 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12581] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12582] <... write resumed>) = 4 [pid 12581] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] unlink("./1520/binderfs" [pid 12582] close(3 [pid 5068] getdents64(3, [pid 12582] <... close resumed>) = 0 [pid 12581] <... bpf resumed>) = 5 [pid 12580] <... bpf resumed>) = 5 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12582] symlink("/dev/binderfs", "./binderfs" [pid 12581] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] getdents64(3, [pid 12581] <... bpf resumed>) = 6 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./1520" [pid 12581] exit_group(0 [pid 5069] <... rmdir resumed>) = 0 [pid 12582] <... symlink resumed>) = 0 [pid 5068] umount2("./1497/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12580] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12581] <... exit_group resumed>) = ? [pid 12582] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12580] <... bpf resumed>) = 6 [pid 5069] mkdir("./1521", 0777 [pid 5068] newfstatat(AT_FDCWD, "./1497/binderfs", [pid 12582] <... bpf resumed>) = 3 [pid 12580] exit_group(0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12582] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1497/binderfs" [pid 5069] <... mkdir resumed>) = 0 [pid 12580] <... exit_group resumed>) = ? [pid 12582] <... bpf resumed>) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... unlink resumed>) = 0 [pid 12582] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3./strace-static-x86_64: Process 12583 attached [pid 12582] <... bpf resumed>) = 5 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12583 [pid 5068] <... close resumed>) = 0 [pid 12583] set_robust_list(0x5555686ec660, 24 [pid 5068] rmdir("./1497" [pid 12583] <... set_robust_list resumed>) = 0 [pid 12582] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12583] chdir("./1521" [pid 5068] <... rmdir resumed>) = 0 [pid 12583] <... chdir resumed>) = 0 [pid 12583] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12583] setpgid(0, 0) = 0 [pid 12583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12581] +++ exited with 0 +++ [pid 12580] +++ exited with 0 +++ [pid 12583] <... openat resumed>) = 3 [pid 5068] mkdir("./1498", 0777 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12581, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12580, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12583] write(3, "1000", 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12583] <... write resumed>) = 4 [pid 12582] <... bpf resumed>) = 6 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12583] close(3 [pid 12582] exit_group(0 [pid 5066] umount2("./1452", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12583] <... close resumed>) = 0 [pid 12583] symlink("/dev/binderfs", "./binderfs" [pid 12582] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12584 attached [pid 5066] openat(AT_FDCWD, "./1452", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./1534", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 5071] openat(AT_FDCWD, "./1534", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12584] set_robust_list(0x5555686ec660, 24 [pid 12583] <... symlink resumed>) = 0 [pid 12582] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12584 [pid 12584] <... set_robust_list resumed>) = 0 [pid 12583] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(3, "", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12582, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] getdents64(3, [pid 12584] chdir("./1498" [pid 12583] <... bpf resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12584] <... chdir resumed>) = 0 [pid 12583] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12584] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 12583] <... bpf resumed>) = 4 [pid 5067] umount2("./1479", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12584] <... prctl resumed>) = 0 [pid 5066] umount2("./1452/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12584] setpgid(0, 0 [pid 5071] umount2("./1534/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12584] <... setpgid resumed>) = 0 [pid 12583] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1479", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(AT_FDCWD, "./1452/binderfs", [pid 12583] <... bpf resumed>) = 5 [pid 12584] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./1534/binderfs", [pid 5067] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12584] write(3, "1000", 4 [pid 12583] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] newfstatat(3, "", [pid 5066] unlink("./1452/binderfs" [pid 12584] <... write resumed>) = 4 [pid 5071] unlink("./1534/binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12584] close(3 [pid 5071] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 12583] <... bpf resumed>) = 6 [pid 12584] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12583] exit_group(0 [pid 12584] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./1479/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12583] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 12584] <... symlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 12584] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1534" [pid 5067] newfstatat(AT_FDCWD, "./1479/binderfs", [pid 12583] +++ exited with 0 +++ [pid 12584] <... bpf resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... close resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12583, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] rmdir("./1452" [pid 5069] umount2("./1521", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12584] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] unlink("./1479/binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1535", 0777 [pid 5069] openat(AT_FDCWD, "./1521", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... unlink resumed>) = 0 [pid 12584] <... bpf resumed>) = 4 [pid 5069] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 5066] mkdir("./1453", 0777 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12584] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12585 attached [pid 5069] getdents64(3, [pid 5067] close(3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12585] set_robust_list(0x5555686ec660, 24 [pid 12584] <... bpf resumed>) = 5 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12585 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1479"./strace-static-x86_64: Process 12586 attached [pid 12585] <... set_robust_list resumed>) = 0 [pid 12584] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] umount2("./1521/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1521/binderfs", [pid 12586] set_robust_list(0x5555686ec660, 24 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12586 [pid 12586] <... set_robust_list resumed>) = 0 [pid 12585] chdir("./1535" [pid 5067] mkdir("./1480", 0777 [pid 12586] chdir("./1453" [pid 5069] unlink("./1521/binderfs" [pid 12586] <... chdir resumed>) = 0 [pid 12585] <... chdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12586] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... unlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12586] <... prctl resumed>) = 0 [pid 12585] <... prctl resumed>) = 0 [pid 5069] getdents64(3, [pid 12586] setpgid(0, 0 [pid 12585] setpgid(0, 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12586] <... setpgid resumed>) = 0 [pid 12585] <... setpgid resumed>) = 0 [pid 5069] close(3 [pid 12584] <... bpf resumed>) = 6 [pid 12586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12584] exit_group(0 [pid 5069] <... close resumed>) = 0 ./strace-static-x86_64: Process 12587 attached [pid 12586] <... openat resumed>) = 3 [pid 12584] <... exit_group resumed>) = ? [pid 5069] rmdir("./1521" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12587 [pid 12587] set_robust_list(0x5555686ec660, 24 [pid 12585] <... openat resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 12584] +++ exited with 0 +++ [pid 12587] <... set_robust_list resumed>) = 0 [pid 12586] write(3, "1000", 4 [pid 12585] write(3, "1000", 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12584, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] mkdir("./1522", 0777 [pid 12587] chdir("./1480" [pid 12586] <... write resumed>) = 4 [pid 12585] <... write resumed>) = 4 [pid 5069] <... mkdir resumed>) = 0 [pid 12586] close(3 [pid 12585] close(3 [pid 12586] <... close resumed>) = 0 [pid 12585] <... close resumed>) = 0 [pid 12587] <... chdir resumed>) = 0 [pid 12586] symlink("/dev/binderfs", "./binderfs" [pid 12585] symlink("/dev/binderfs", "./binderfs" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1498", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12588 attached [pid 12587] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12586] <... symlink resumed>) = 0 [pid 12585] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12587] <... prctl resumed>) = 0 [pid 12587] setpgid(0, 0 [pid 12586] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12585] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12588] set_robust_list(0x5555686ec660, 24) = 0 [pid 12587] <... setpgid resumed>) = 0 [pid 12586] <... bpf resumed>) = 3 [pid 12585] <... bpf resumed>) = 3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12588 [pid 5068] openat(AT_FDCWD, "./1498", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12588] chdir("./1522" [pid 12587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12586] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12585] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 12588] <... chdir resumed>) = 0 [pid 12587] <... openat resumed>) = 3 [pid 12586] <... bpf resumed>) = 4 [pid 12585] <... bpf resumed>) = 4 [pid 5068] newfstatat(3, "", [pid 12586] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12585] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12588] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12587] write(3, "1000", 4 [pid 12586] <... bpf resumed>) = 5 [pid 12585] <... bpf resumed>) = 5 [pid 5068] getdents64(3, [pid 12588] <... prctl resumed>) = 0 [pid 12587] <... write resumed>) = 4 [pid 12586] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12588] setpgid(0, 0 [pid 12587] close(3 [pid 12588] <... setpgid resumed>) = 0 [pid 12588] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12587] <... close resumed>) = 0 [pid 12585] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12587] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./1498/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12588] <... openat resumed>) = 3 [pid 12587] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12588] write(3, "1000", 4 [pid 12587] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(AT_FDCWD, "./1498/binderfs", [pid 12587] <... bpf resumed>) = 3 [pid 12588] <... write resumed>) = 4 [pid 12587] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12588] close(3 [pid 12587] <... bpf resumed>) = 4 [pid 5068] unlink("./1498/binderfs" [pid 12588] <... close resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12588] symlink("/dev/binderfs", "./binderfs" [pid 12587] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12588] <... symlink resumed>) = 0 [pid 12587] <... bpf resumed>) = 5 [pid 12586] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 12585] <... bpf resumed>) = 6 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 12586] exit_group(0 [pid 5068] <... close resumed>) = 0 [pid 12588] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12585] exit_group(0 [pid 12587] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12586] <... exit_group resumed>) = ? [pid 5068] rmdir("./1498" [pid 12588] <... bpf resumed>) = 3 [pid 12587] <... bpf resumed>) = 6 [pid 12586] +++ exited with 0 +++ [pid 12585] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 12588] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12587] exit_group(0) = ? [pid 5068] mkdir("./1499", 0777 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12586, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12588] <... bpf resumed>) = 4 [pid 12588] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] umount2("./1453", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12588] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] openat(AT_FDCWD, "./1453", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12589 attached ) = 3 [pid 12589] set_robust_list(0x5555686ec660, 24 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12589] <... set_robust_list resumed>) = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12589 [pid 5066] umount2("./1453/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12589] chdir("./1499" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1453/binderfs", [pid 12589] <... chdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] unlink("./1453/binderfs" [pid 12589] setpgid(0, 0 [pid 5066] <... unlink resumed>) = 0 [pid 12589] <... setpgid resumed>) = 0 [pid 12585] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12585, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] getdents64(3, [pid 12587] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12587, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] close(3) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] rmdir("./1453" [pid 12589] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 12589] write(3, "1000", 4 [pid 5071] umount2("./1535", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12589] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1480", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1454", 0777 [pid 5071] openat(AT_FDCWD, "./1535", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12589] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... mkdir resumed>) = 0 [pid 12589] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1480", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(3, "", [pid 12589] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12589] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12589] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(3, "", [pid 12589] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12589] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12590 attached ) = 4 [pid 5071] umount2("./1535/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 12590] set_robust_list(0x5555686ec660, 24 [pid 12589] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12588] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12590 [pid 12590] <... set_robust_list resumed>) = 0 [pid 12589] <... bpf resumed>) = 5 [pid 12588] exit_group(0 [pid 5071] newfstatat(AT_FDCWD, "./1535/binderfs", [pid 5067] umount2("./1480/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12590] chdir("./1454" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12588] <... exit_group resumed>) = ? [pid 5071] unlink("./1535/binderfs" [pid 5067] newfstatat(AT_FDCWD, "./1480/binderfs", [pid 12589] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12589] <... bpf resumed>) = 6 [pid 5067] unlink("./1480/binderfs") = 0 [pid 12589] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 12589] <... exit_group resumed>) = ? [pid 12590] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12590] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12590] <... prctl resumed>) = 0 [pid 5071] close(3) = 0 [pid 5067] close(3 [pid 12590] setpgid(0, 0 [pid 5071] rmdir("./1535" [pid 12590] <... setpgid resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12589] +++ exited with 0 +++ [pid 12588] +++ exited with 0 +++ [pid 5071] mkdir("./1536", 0777 [pid 5067] rmdir("./1480" [pid 12590] <... openat resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12589, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12590] write(3, "1000", 4 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12590] <... write resumed>) = 4 [pid 12590] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12590] <... close resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12588, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12590] symlink("/dev/binderfs", "./binderfs" [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12590] <... symlink resumed>) = 0 [pid 12590] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12591 attached ) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12591 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] mkdir("./1481", 0777 [pid 12591] set_robust_list(0x5555686ec660, 24 [pid 12590] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12591] <... set_robust_list resumed>) = 0 [pid 5068] umount2("./1499", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12590] <... bpf resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 12591] chdir("./1536" [pid 12590] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12591] <... chdir resumed>) = 0 [pid 5069] umount2("./1522", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1499", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12590] <... bpf resumed>) = 5 [pid 12591] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 12592 attached [pid 5068] <... openat resumed>) = 3 [pid 12592] set_robust_list(0x5555686ec660, 24 [pid 12591] <... prctl resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1522", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(3, "", [pid 12592] <... set_robust_list resumed>) = 0 [pid 12590] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12592] chdir("./1481" [pid 12591] setpgid(0, 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12592 [pid 12591] <... setpgid resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] getdents64(3, [pid 12592] <... chdir resumed>) = 0 [pid 12591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12590] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12592] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12591] <... openat resumed>) = 3 [pid 12590] exit_group(0 [pid 5069] getdents64(3, [pid 5068] umount2("./1499/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12592] <... prctl resumed>) = 0 [pid 12591] write(3, "1000", 4 [pid 12590] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12592] setpgid(0, 0 [pid 12591] <... write resumed>) = 4 [pid 5069] umount2("./1522/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12591] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1499/binderfs", [pid 12591] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1522/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12591] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12592] <... setpgid resumed>) = 0 [pid 12591] <... symlink resumed>) = 0 [pid 12590] +++ exited with 0 +++ [pid 5069] unlink("./1522/binderfs" [pid 5068] unlink("./1499/binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12591] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12590, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12592] <... openat resumed>) = 3 [pid 12591] <... bpf resumed>) = 3 [pid 12592] write(3, "1000", 4 [pid 12591] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12592] <... write resumed>) = 4 [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 12592] close(3 [pid 12591] <... bpf resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1454", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12592] <... close resumed>) = 0 [pid 5069] close(3 [pid 5068] close(3 [pid 12592] symlink("/dev/binderfs", "./binderfs" [pid 12591] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12592] <... symlink resumed>) = 0 [pid 5069] rmdir("./1522" [pid 5068] rmdir("./1499" [pid 5066] openat(AT_FDCWD, "./1454", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5069] mkdir("./1523", 0777 [pid 5068] mkdir("./1500", 0777 [pid 12592] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12591] <... bpf resumed>) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12592] <... bpf resumed>) = 3 [pid 12591] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12592] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12592] <... bpf resumed>) = 4 [pid 12592] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] getdents64(3, [pid 12592] <... bpf resumed>) = 5 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1454/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12594 attached ./strace-static-x86_64: Process 12593 attached [pid 12592] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12591] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12593 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12594] set_robust_list(0x5555686ec660, 24 [pid 12593] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12594 [pid 5066] newfstatat(AT_FDCWD, "./1454/binderfs", [pid 12594] <... set_robust_list resumed>) = 0 [pid 12593] <... set_robust_list resumed>) = 0 [pid 12592] <... bpf resumed>) = 6 [pid 12591] exit_group(0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12594] chdir("./1523" [pid 12592] exit_group(0 [pid 12591] <... exit_group resumed>) = ? [pid 5066] unlink("./1454/binderfs" [pid 12593] chdir("./1500" [pid 12594] <... chdir resumed>) = 0 [pid 12593] <... chdir resumed>) = 0 [pid 12592] <... exit_group resumed>) = ? [pid 5066] <... unlink resumed>) = 0 [pid 12593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12593] <... prctl resumed>) = 0 [pid 5066] close(3 [pid 12593] setpgid(0, 0 [pid 5066] <... close resumed>) = 0 [pid 12594] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12593] <... setpgid resumed>) = 0 [pid 12592] +++ exited with 0 +++ [pid 5066] rmdir("./1454" [pid 12594] <... prctl resumed>) = 0 [pid 12593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12591] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 12594] setpgid(0, 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12591, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12592, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12593] <... openat resumed>) = 3 [pid 12594] <... setpgid resumed>) = 0 [pid 5071] umount2("./1536", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1481", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1455", 0777 [pid 12594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12593] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "./1536", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1481", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... mkdir resumed>) = 0 [pid 12594] <... openat resumed>) = 3 [pid 12593] <... write resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5071] newfstatat(3, "", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12594] write(3, "1000", 4 [pid 12593] close(3 [pid 12594] <... write resumed>) = 4 [pid 12593] <... close resumed>) = 0 [pid 12594] close(3 [pid 12593] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 5067] getdents64(3, [pid 12594] <... close resumed>) = 0 [pid 12593] <... symlink resumed>) = 0 [pid 12594] symlink("/dev/binderfs", "./binderfs" [pid 12593] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12595 attached [pid 12594] <... symlink resumed>) = 0 [pid 12593] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12595] set_robust_list(0x5555686ec660, 24 [pid 12594] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12593] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1536/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1481/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12595] <... set_robust_list resumed>) = 0 [pid 12594] <... bpf resumed>) = 3 [pid 12593] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12595 [pid 12594] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1536/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12595] chdir("./1455" [pid 12594] <... bpf resumed>) = 4 [pid 12593] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12595] <... chdir resumed>) = 0 [pid 12594] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] unlink("./1536/binderfs" [pid 5067] newfstatat(AT_FDCWD, "./1481/binderfs", [pid 12595] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12593] <... bpf resumed>) = 5 [pid 5071] <... unlink resumed>) = 0 [pid 12594] <... bpf resumed>) = 5 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12595] <... prctl resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] unlink("./1481/binderfs" [pid 12595] setpgid(0, 0 [pid 12594] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12593] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12595] <... setpgid resumed>) = 0 [pid 5071] close(3 [pid 12595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... close resumed>) = 0 [pid 12595] <... openat resumed>) = 3 [pid 5071] rmdir("./1536" [pid 5067] getdents64(3, [pid 12595] write(3, "1000", 4 [pid 12594] <... bpf resumed>) = 6 [pid 12593] <... bpf resumed>) = 6 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12593] exit_group(0 [pid 5067] close(3 [pid 12595] <... write resumed>) = 4 [pid 12594] exit_group(0 [pid 12593] <... exit_group resumed>) = ? [pid 5071] mkdir("./1537", 0777 [pid 5067] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] rmdir("./1481" [pid 12593] +++ exited with 0 +++ [pid 12594] <... exit_group resumed>) = ? [pid 12595] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12593, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] mkdir("./1482", 0777./strace-static-x86_64: Process 12596 attached [pid 12594] +++ exited with 0 +++ [pid 5067] <... mkdir resumed>) = 0 [pid 12595] <... close resumed>) = 0 [pid 12596] set_robust_list(0x5555686ec660, 24 [pid 12595] symlink("/dev/binderfs", "./binderfs" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12594, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] umount2("./1500", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12596] <... set_robust_list resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12595] <... symlink resumed>) = 0 [pid 12596] chdir("./1537" [pid 5068] openat(AT_FDCWD, "./1500", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12595] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12596 [pid 5068] <... openat resumed>) = 3 [pid 12596] <... chdir resumed>) = 0 [pid 12595] <... bpf resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 12596] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12595] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12596] <... prctl resumed>) = 0 [pid 12596] setpgid(0, 0 [pid 5069] umount2("./1523", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12597 attached [pid 12596] <... setpgid resumed>) = 0 [pid 12595] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12597] set_robust_list(0x5555686ec660, 24 [pid 5069] openat(AT_FDCWD, "./1523", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./1500/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12597] <... set_robust_list resumed>) = 0 [pid 12596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... openat resumed>) = 3 [pid 12595] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12597] chdir("./1482" [pid 12596] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1500/binderfs", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12597 [pid 5069] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12595] <... bpf resumed>) = 5 [pid 12597] <... chdir resumed>) = 0 [pid 12596] write(3, "1000", 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1523/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] unlink("./1500/binderfs" [pid 12596] <... write resumed>) = 4 [pid 12597] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12596] close(3 [pid 12595] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 12597] <... prctl resumed>) = 0 [pid 12596] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1523/binderfs", [pid 12597] setpgid(0, 0 [pid 12596] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] getdents64(3, [pid 5069] unlink("./1523/binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12597] <... setpgid resumed>) = 0 [pid 12596] <... symlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] close(3) = 0 [pid 12597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] getdents64(3, [pid 5068] rmdir("./1500" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12597] <... openat resumed>) = 3 [pid 12596] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12595] <... bpf resumed>) = 6 [pid 5069] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 12597] write(3, "1000", 4) = 4 [pid 12595] exit_group(0 [pid 12596] <... bpf resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 12597] close(3 [pid 12596] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12595] <... exit_group resumed>) = ? [pid 5069] rmdir("./1523" [pid 5068] mkdir("./1501", 0777 [pid 12597] <... close resumed>) = 0 [pid 12596] <... bpf resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12597] symlink("/dev/binderfs", "./binderfs" [pid 12596] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12595] +++ exited with 0 +++ [pid 12597] <... symlink resumed>) = 0 [pid 5069] mkdir("./1524", 0777 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12595, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12596] <... bpf resumed>) = 5 [pid 12597] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12596] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 12598 attached [pid 12598] set_robust_list(0x5555686ec660, 24 [pid 12597] <... bpf resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12598 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12598] <... set_robust_list resumed>) = 0 [pid 12597] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12598] chdir("./1501" [pid 12597] <... bpf resumed>) = 4 [pid 12597] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12599 attached [pid 12598] <... chdir resumed>) = 0 [pid 12598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12599 [pid 12598] <... prctl resumed>) = 0 [pid 12599] set_robust_list(0x5555686ec660, 24 [pid 12597] <... bpf resumed>) = 5 [pid 12596] <... bpf resumed>) = 6 [pid 5066] umount2("./1455", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12598] setpgid(0, 0 [pid 12597] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12599] <... set_robust_list resumed>) = 0 [pid 12596] exit_group(0 [pid 12598] <... setpgid resumed>) = 0 [pid 12597] <... bpf resumed>) = 6 [pid 12596] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12599] chdir("./1524" [pid 12598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12597] exit_group(0 [pid 5066] openat(AT_FDCWD, "./1455", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12599] <... chdir resumed>) = 0 [pid 12597] <... exit_group resumed>) = ? [pid 5066] <... openat resumed>) = 3 [pid 12599] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12598] <... openat resumed>) = 3 [pid 12599] <... prctl resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12599] setpgid(0, 0 [pid 12598] write(3, "1000", 4) = 4 [pid 12597] +++ exited with 0 +++ [pid 12596] +++ exited with 0 +++ [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12599] <... setpgid resumed>) = 0 [pid 12598] close(3 [pid 5066] getdents64(3, [pid 12599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12598] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12596, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12597, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12598] symlink("/dev/binderfs", "./binderfs" [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12599] <... openat resumed>) = 3 [pid 5066] umount2("./1455/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12599] write(3, "1000", 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12599] <... write resumed>) = 4 [pid 12598] <... symlink resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1455/binderfs", [pid 12599] close(3 [pid 12598] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12599] <... close resumed>) = 0 [pid 5066] unlink("./1455/binderfs" [pid 12599] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./1537", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 12598] <... bpf resumed>) = 3 [pid 5067] umount2("./1482", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12598] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, [pid 12599] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 12598] <... bpf resumed>) = 4 [pid 5066] rmdir("./1455" [pid 12599] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12598] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] openat(AT_FDCWD, "./1537", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1482", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12599] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5067] <... openat resumed>) = 3 [pid 5066] mkdir("./1456", 0777 [pid 12599] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12598] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] newfstatat(3, "", [pid 5066] <... mkdir resumed>) = 0 [pid 12599] <... bpf resumed>) = 4 [pid 12598] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12599] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12598] <... bpf resumed>) = 6 [pid 5067] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12599] <... bpf resumed>) = 5 [pid 12599] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12600 attached [pid 12598] exit_group(0 [pid 5071] umount2("./1537/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12599] <... bpf resumed>) = 6 [pid 12600] set_robust_list(0x5555686ec660, 24 [pid 12598] <... exit_group resumed>) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1482/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12600 [pid 12599] exit_group(0 [pid 12600] <... set_robust_list resumed>) = 0 [pid 12599] <... exit_group resumed>) = ? [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12600] chdir("./1456" [pid 5071] newfstatat(AT_FDCWD, "./1537/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1482/binderfs", [pid 12600] <... chdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] unlink("./1482/binderfs" [pid 12600] setpgid(0, 0) = 0 [pid 12600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5071] unlink("./1537/binderfs" [pid 12600] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 12600] write(3, "1000", 4) = 4 [pid 5067] getdents64(3, [pid 12600] close(3 [pid 5071] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... close resumed>) = 0 [pid 5071] close(3 [pid 12600] <... close resumed>) = 0 [pid 5067] rmdir("./1482" [pid 12600] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... close resumed>) = 0 [pid 12600] <... symlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12600] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1537" [pid 5067] mkdir("./1483", 0777 [pid 12600] <... bpf resumed>) = 3 [pid 12600] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 12600] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12599] +++ exited with 0 +++ [pid 12598] +++ exited with 0 +++ [pid 5071] mkdir("./1538", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 12600] <... bpf resumed>) = 5 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12598, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12600] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... mkdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12599, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] umount2("./1524", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12601 attached [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1501", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] openat(AT_FDCWD, "./1524", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12601] set_robust_list(0x5555686ec660, 24 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12601 [pid 12601] <... set_robust_list resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./1501", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12602 attached [pid 12601] chdir("./1483" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12602] set_robust_list(0x5555686ec660, 24 [pid 12601] <... chdir resumed>) = 0 [pid 5069] getdents64(3, [pid 12601] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12602 [pid 12602] <... set_robust_list resumed>) = 0 [pid 12601] <... prctl resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(3, "", [pid 12602] chdir("./1538" [pid 12601] setpgid(0, 0 [pid 12600] <... bpf resumed>) = 6 [pid 5069] umount2("./1524/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12602] <... chdir resumed>) = 0 [pid 12600] exit_group(0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 12602] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12601] <... setpgid resumed>) = 0 [pid 12600] <... exit_group resumed>) = ? [pid 5069] newfstatat(AT_FDCWD, "./1524/binderfs", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12602] <... prctl resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./1501/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12602] setpgid(0, 0 [pid 5069] unlink("./1524/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12602] <... setpgid resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1501/binderfs", [pid 12602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12600] +++ exited with 0 +++ [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12600, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] unlink("./1501/binderfs" [pid 12602] <... openat resumed>) = 3 [pid 12601] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12602] write(3, "1000", 4 [pid 5069] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 12602] <... write resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 12602] close(3 [pid 12601] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 12602] <... close resumed>) = 0 [pid 12601] write(3, "1000", 4 [pid 5069] rmdir("./1524" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1456", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12602] symlink("/dev/binderfs", "./binderfs" [pid 12601] <... write resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12602] <... symlink resumed>) = 0 [pid 5069] mkdir("./1525", 0777 [pid 5068] close(3 [pid 5066] openat(AT_FDCWD, "./1456", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12602] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... openat resumed>) = 3 [pid 12601] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12601] <... close resumed>) = 0 [pid 5068] rmdir("./1501" [pid 12602] <... bpf resumed>) = 3 [pid 12601] symlink("/dev/binderfs", "./binderfs" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(3, "", [pid 12602] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12601] <... symlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12603 attached [pid 12602] <... bpf resumed>) = 4 [pid 12601] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12603] set_robust_list(0x5555686ec660, 24 [pid 12602] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12601] <... bpf resumed>) = 3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12603 [pid 5068] mkdir("./1502", 0777 [pid 5066] getdents64(3, [pid 12603] <... set_robust_list resumed>) = 0 [pid 12602] <... bpf resumed>) = 5 [pid 12601] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... mkdir resumed>) = 0 [pid 12603] chdir("./1525" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12603] <... chdir resumed>) = 0 [pid 12602] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1456/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12603] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12602] <... bpf resumed>) = 6 [pid 12601] <... bpf resumed>) = 4 [pid 12603] <... prctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12603] setpgid(0, 0 [pid 12601] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] newfstatat(AT_FDCWD, "./1456/binderfs", ./strace-static-x86_64: Process 12604 attached [pid 12603] <... setpgid resumed>) = 0 [pid 12602] exit_group(0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12604] set_robust_list(0x5555686ec660, 24 [pid 12603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12602] <... exit_group resumed>) = ? [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12604 [pid 5066] unlink("./1456/binderfs" [pid 12604] <... set_robust_list resumed>) = 0 [pid 12601] <... bpf resumed>) = 5 [pid 12603] <... openat resumed>) = 3 [pid 12601] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12604] chdir("./1502" [pid 12603] write(3, "1000", 4 [pid 5066] <... unlink resumed>) = 0 [pid 12604] <... chdir resumed>) = 0 [pid 12603] <... write resumed>) = 4 [pid 12601] <... bpf resumed>) = 6 [pid 5066] getdents64(3, [pid 12604] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12603] close(3 [pid 12601] exit_group(0 [pid 12604] <... prctl resumed>) = 0 [pid 12603] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12604] setpgid(0, 0 [pid 12603] symlink("/dev/binderfs", "./binderfs" [pid 12601] <... exit_group resumed>) = ? [pid 12604] <... setpgid resumed>) = 0 [pid 12603] <... symlink resumed>) = 0 [pid 12604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12603] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] close(3 [pid 12604] write(3, "1000", 4 [pid 12603] <... bpf resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 12604] <... write resumed>) = 4 [pid 12603] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12604] close(3 [pid 5066] rmdir("./1456" [pid 12604] <... close resumed>) = 0 [pid 12604] symlink("/dev/binderfs", "./binderfs" [pid 12603] <... bpf resumed>) = 4 [pid 5066] <... rmdir resumed>) = 0 [pid 12604] <... symlink resumed>) = 0 [pid 12604] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12603] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] mkdir("./1457", 0777 [pid 12604] <... bpf resumed>) = 3 [pid 12603] <... bpf resumed>) = 5 [pid 12602] +++ exited with 0 +++ [pid 12601] +++ exited with 0 +++ [pid 5066] <... mkdir resumed>) = 0 [pid 12604] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12603] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12602, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12601, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12604] <... bpf resumed>) = 4 [pid 5071] umount2("./1538", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1483", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12604] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1483", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12604] <... bpf resumed>) = 5 [pid 5071] openat(AT_FDCWD, "./1538", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12605 attached [pid 5071] <... openat resumed>) = 3 [pid 12605] set_robust_list(0x5555686ec660, 24 [pid 12604] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(3, "", [pid 5067] newfstatat(3, "", [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12605 [pid 12605] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1483/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1483/binderfs", [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12605] chdir("./1457" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1483/binderfs") = 0 [pid 12605] <... chdir resumed>) = 0 [pid 5071] umount2("./1538/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12605] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12605] <... prctl resumed>) = 0 [pid 5067] getdents64(3, [pid 12605] setpgid(0, 0 [pid 5071] newfstatat(AT_FDCWD, "./1538/binderfs", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12605] <... setpgid resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] close(3 [pid 12605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... close resumed>) = 0 [pid 5071] unlink("./1538/binderfs" [pid 5067] rmdir("./1483" [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5067] mkdir("./1484", 0777 [pid 12605] <... openat resumed>) = 3 [pid 5071] rmdir("./1538" [pid 12605] write(3, "1000", 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1539", 0777 [pid 12605] <... write resumed>) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12605] close(3./strace-static-x86_64: Process 12606 attached [pid 5071] <... mkdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12606] set_robust_list(0x5555686ec660, 24 [pid 12605] <... close resumed>) = 0 [pid 12603] <... bpf resumed>) = 6 [pid 12605] symlink("/dev/binderfs", "./binderfs" [pid 12603] exit_group(0./strace-static-x86_64: Process 12607 attached [pid 12606] <... set_robust_list resumed>) = 0 [pid 12605] <... symlink resumed>) = 0 [pid 12604] <... bpf resumed>) = 6 [pid 12603] <... exit_group resumed>) = ? [pid 12607] set_robust_list(0x5555686ec660, 24 [pid 12606] chdir("./1484" [pid 12604] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12607 [pid 12607] <... set_robust_list resumed>) = 0 [pid 12606] <... chdir resumed>) = 0 [pid 12605] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12604] <... exit_group resumed>) = ? [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12606 [pid 12607] chdir("./1539" [pid 12606] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12605] <... bpf resumed>) = 3 [pid 12605] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12607] <... chdir resumed>) = 0 [pid 12606] <... prctl resumed>) = 0 [pid 12605] <... bpf resumed>) = 4 [pid 12606] setpgid(0, 0 [pid 12605] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12606] <... setpgid resumed>) = 0 [pid 12607] <... prctl resumed>) = 0 [pid 12606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12607] setpgid(0, 0 [pid 12606] <... openat resumed>) = 3 [pid 12607] <... setpgid resumed>) = 0 [pid 12607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12605] <... bpf resumed>) = 5 [pid 12607] <... openat resumed>) = 3 [pid 12606] write(3, "1000", 4 [pid 12605] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12606] <... write resumed>) = 4 [pid 12607] write(3, "1000", 4 [pid 12606] close(3 [pid 12607] <... write resumed>) = 4 [pid 12606] <... close resumed>) = 0 [pid 12607] close(3 [pid 12606] symlink("/dev/binderfs", "./binderfs" [pid 12607] <... close resumed>) = 0 [pid 12606] <... symlink resumed>) = 0 [pid 12607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12606] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12607] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12606] <... bpf resumed>) = 3 [pid 12607] <... bpf resumed>) = 3 [pid 12603] +++ exited with 0 +++ [pid 12607] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12606] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12604] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12604, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12603, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12607] <... bpf resumed>) = 4 [pid 12606] <... bpf resumed>) = 4 [pid 12606] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12607] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12605] <... bpf resumed>) = 6 [pid 12607] <... bpf resumed>) = 5 [pid 12606] <... bpf resumed>) = 5 [pid 12606] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12607] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12605] exit_group(0 [pid 5068] umount2("./1502", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12607] <... bpf resumed>) = 6 [pid 12606] <... bpf resumed>) = 6 [pid 12605] <... exit_group resumed>) = ? [pid 12607] exit_group(0 [pid 12606] exit_group(0 [pid 12607] <... exit_group resumed>) = ? [pid 12606] <... exit_group resumed>) = ? [pid 12605] +++ exited with 0 +++ [pid 5069] umount2("./1525", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1502", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12605, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] openat(AT_FDCWD, "./1525", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] umount2("./1502/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(AT_FDCWD, "./1502/binderfs", [pid 5066] umount2("./1457", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1525/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1525/binderfs", [pid 5068] unlink("./1502/binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1525/binderfs" [pid 5068] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1457", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5068] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5069] close(3 [pid 5066] newfstatat(3, "", [pid 5069] <... close resumed>) = 0 [pid 5068] rmdir("./1502" [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12607] +++ exited with 0 +++ [pid 12606] +++ exited with 0 +++ [pid 5069] rmdir("./1525" [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12607, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] mkdir("./1503", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12606, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] umount2("./1457/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./1539", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1526", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12608 attached [pid 5069] <... mkdir resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1457/binderfs", [pid 12608] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12608 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12608] <... set_robust_list resumed>) = 0 [pid 12608] chdir("./1503" [pid 5066] unlink("./1457/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12608] <... chdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1539", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... unlink resumed>) = 0 [pid 12608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5067] umount2("./1484", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12608] setpgid(0, 0 [pid 5066] getdents64(3, [pid 12608] <... setpgid resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", [pid 5067] openat(AT_FDCWD, "./1484", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12608] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 12609 attached [pid 12608] write(3, "1000", 4 [pid 5067] newfstatat(3, "", [pid 5066] rmdir("./1457" [pid 12609] set_robust_list(0x5555686ec660, 24 [pid 12608] <... write resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12609 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12609] <... set_robust_list resumed>) = 0 [pid 12608] close(3 [pid 5071] umount2("./1539/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5066] mkdir("./1458", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12609] chdir("./1526" [pid 12608] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1539/binderfs", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12609] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1484/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12609] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12608] symlink("/dev/binderfs", "./binderfs" [pid 5071] unlink("./1539/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12609] <... prctl resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1484/binderfs", [pid 12609] setpgid(0, 0 [pid 12608] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12609] <... setpgid resumed>) = 0 [pid 12608] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./1484/binderfs" [pid 12609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3 [pid 12608] <... bpf resumed>) = 3 [pid 5067] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12610 attached [pid 12609] <... openat resumed>) = 3 [pid 12608] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12610 [pid 12610] set_robust_list(0x5555686ec660, 24 [pid 12609] write(3, "1000", 4 [pid 12608] <... bpf resumed>) = 4 [pid 5067] getdents64(3, [pid 12609] <... write resumed>) = 4 [pid 5071] rmdir("./1539" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12610] <... set_robust_list resumed>) = 0 [pid 12609] close(3 [pid 12608] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12609] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] close(3 [pid 12609] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./1540", 0777 [pid 5067] <... close resumed>) = 0 [pid 12610] chdir("./1458" [pid 12609] <... symlink resumed>) = 0 [pid 12608] <... bpf resumed>) = 5 [pid 5067] rmdir("./1484" [pid 12610] <... chdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12610] setpgid(0, 0) = 0 [pid 12610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... rmdir resumed>) = 0 [pid 12609] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12610] <... openat resumed>) = 3 [pid 12608] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12610] write(3, "1000", 4 [pid 12608] <... bpf resumed>) = 6 [pid 12610] <... write resumed>) = 4 ./strace-static-x86_64: Process 12611 attached [pid 12610] close(3 [pid 12609] <... bpf resumed>) = 3 [pid 12608] exit_group(0 [pid 5067] mkdir("./1485", 0777 [pid 12611] set_robust_list(0x5555686ec660, 24 [pid 12610] <... close resumed>) = 0 [pid 12609] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12610] symlink("/dev/binderfs", "./binderfs" [pid 12608] <... exit_group resumed>) = ? [pid 12611] <... set_robust_list resumed>) = 0 [pid 12609] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12611 [pid 5067] <... mkdir resumed>) = 0 [pid 12611] chdir("./1540" [pid 12608] +++ exited with 0 +++ [pid 12610] <... symlink resumed>) = 0 [pid 12609] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12611] <... chdir resumed>) = 0 [pid 12610] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12608, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12610] <... bpf resumed>) = 3 [pid 12609] <... bpf resumed>) = 5 [pid 12610] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5068] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12612 attached [pid 12611] <... prctl resumed>) = 0 [pid 12610] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12609] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12612] set_robust_list(0x5555686ec660, 24 [pid 12611] setpgid(0, 0 [pid 12610] <... bpf resumed>) = 5 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12612 [pid 12612] <... set_robust_list resumed>) = 0 [pid 12611] <... setpgid resumed>) = 0 [pid 12610] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12609] <... bpf resumed>) = 6 [pid 5068] umount2("./1503", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12612] chdir("./1485" [pid 12611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12610] <... bpf resumed>) = 6 [pid 12609] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12612] <... chdir resumed>) = 0 [pid 12611] <... openat resumed>) = 3 [pid 12610] exit_group(0 [pid 12609] <... exit_group resumed>) = ? [pid 5068] openat(AT_FDCWD, "./1503", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... openat resumed>) = 3 [pid 12612] <... prctl resumed>) = 0 [pid 12612] setpgid(0, 0 [pid 5068] newfstatat(3, "", [pid 12612] <... setpgid resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] getdents64(3, [pid 12611] write(3, "1000", 4 [pid 12610] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12612] <... openat resumed>) = 3 [pid 12611] <... write resumed>) = 4 [pid 5068] umount2("./1503/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1503/binderfs", [pid 12612] write(3, "1000", 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12612] <... write resumed>) = 4 [pid 12612] close(3 [pid 12611] close(3 [pid 5068] unlink("./1503/binderfs" [pid 12612] <... close resumed>) = 0 [pid 12611] <... close resumed>) = 0 [pid 12612] symlink("/dev/binderfs", "./binderfs" [pid 12611] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... unlink resumed>) = 0 [pid 12612] <... symlink resumed>) = 0 [pid 12611] <... symlink resumed>) = 0 [pid 12611] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 12612] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12611] <... bpf resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12612] <... bpf resumed>) = 3 [pid 12611] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] close(3 [pid 12611] <... bpf resumed>) = 4 [pid 12612] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... close resumed>) = 0 [pid 12611] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12612] <... bpf resumed>) = 4 [pid 12611] <... bpf resumed>) = 5 [pid 5068] rmdir("./1503" [pid 12611] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12612] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12610] +++ exited with 0 +++ [pid 12609] +++ exited with 0 +++ [pid 5068] <... rmdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12610, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12612] <... bpf resumed>) = 5 [pid 5068] mkdir("./1504", 0777 [pid 12612] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12609, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1458", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1458", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... restart_syscall resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./1526", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] openat(AT_FDCWD, "./1526", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12613 ./strace-static-x86_64: Process 12613 attached [pid 5066] umount2("./1458/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12613] set_robust_list(0x5555686ec660, 24 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12613] <... set_robust_list resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1458/binderfs", [pid 12613] chdir("./1504" [pid 5069] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12613] <... chdir resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5066] unlink("./1458/binderfs" [pid 12613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12613] <... prctl resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12613] setpgid(0, 0) = 0 [pid 5069] umount2("./1526/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 5069] newfstatat(AT_FDCWD, "./1526/binderfs", [pid 12613] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... close resumed>) = 0 [pid 5069] unlink("./1526/binderfs" [pid 12613] write(3, "1000", 4 [pid 5069] <... unlink resumed>) = 0 [pid 5066] rmdir("./1458" [pid 5069] getdents64(3, [pid 12613] <... write resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12613] close(3 [pid 12611] <... bpf resumed>) = 6 [pid 12612] <... bpf resumed>) = 6 [pid 12613] <... close resumed>) = 0 [pid 12613] symlink("/dev/binderfs", "./binderfs" [pid 12611] exit_group(0 [pid 5069] close(3 [pid 12612] exit_group(0 [pid 12611] <... exit_group resumed>) = ? [pid 5069] <... close resumed>) = 0 [pid 12613] <... symlink resumed>) = 0 [pid 5066] mkdir("./1459", 0777 [pid 12613] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... mkdir resumed>) = 0 [pid 12612] <... exit_group resumed>) = ? [pid 5069] rmdir("./1526" [pid 12613] <... bpf resumed>) = 3 [pid 12613] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12613] <... bpf resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12614 attached [pid 12613] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12614] set_robust_list(0x5555686ec660, 24 [pid 5069] mkdir("./1527", 0777 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12614 [pid 12614] <... set_robust_list resumed>) = 0 [pid 12613] <... bpf resumed>) = 5 [pid 12613] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... mkdir resumed>) = 0 [pid 12614] chdir("./1459" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12614] <... chdir resumed>) = 0 [pid 12614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12614] setpgid(0, 0./strace-static-x86_64: Process 12615 attached ) = 0 [pid 12612] +++ exited with 0 +++ [pid 12611] +++ exited with 0 +++ [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12615 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12612, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12615] set_robust_list(0x5555686ec660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12611, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12615] <... set_robust_list resumed>) = 0 [pid 12614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] umount2("./1485", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12614] write(3, "1000", 4) = 4 [pid 12614] close(3) = 0 [pid 12614] symlink("/dev/binderfs", "./binderfs" [pid 12615] chdir("./1527" [pid 12613] <... bpf resumed>) = 6 [pid 5071] umount2("./1540", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1485", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12615] <... chdir resumed>) = 0 [pid 12614] <... symlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1540", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12613] exit_group(0 [pid 5067] <... openat resumed>) = 3 [pid 12614] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12615] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12613] <... exit_group resumed>) = ? [pid 5071] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12615] <... prctl resumed>) = 0 [pid 12614] <... bpf resumed>) = 3 [pid 12614] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12614] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12615] setpgid(0, 0 [pid 12613] +++ exited with 0 +++ [pid 5071] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12615] <... setpgid resumed>) = 0 [pid 12614] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12613, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12614] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] getdents64(3, [pid 5071] getdents64(3, [pid 12615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1485/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12615] <... openat resumed>) = 3 [pid 5071] umount2("./1540/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1504", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1485/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1485/binderfs" [pid 12615] write(3, "1000", 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1504", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./1540/binderfs", [pid 5067] <... unlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12615] <... write resumed>) = 4 [pid 12614] <... bpf resumed>) = 6 [pid 5071] unlink("./1540/binderfs" [pid 5068] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 12615] close(3 [pid 12614] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 12615] <... close resumed>) = 0 [pid 12614] <... exit_group resumed>) = ? [pid 5068] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12615] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12615] <... symlink resumed>) = 0 [pid 12614] +++ exited with 0 +++ [pid 5071] close(3 [pid 5068] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 12615] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] rmdir("./1485" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12614, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] rmdir("./1540" [pid 12615] <... bpf resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] umount2("./1504/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 12615] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12615] <... bpf resumed>) = 4 [pid 5071] mkdir("./1541", 0777 [pid 5068] newfstatat(AT_FDCWD, "./1504/binderfs", [pid 5067] mkdir("./1486", 0777 [pid 12615] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] umount2("./1459", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12615] <... bpf resumed>) = 5 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] unlink("./1504/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12615] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... unlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] openat(AT_FDCWD, "./1459", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12617 attached ./strace-static-x86_64: Process 12616 attached [pid 12615] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 12617] set_robust_list(0x5555686ec660, 24 [pid 12616] set_robust_list(0x5555686ec660, 24 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(3, "", [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12616 [pid 12617] <... set_robust_list resumed>) = 0 [pid 5068] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12617 [pid 12617] chdir("./1486" [pid 12616] <... set_robust_list resumed>) = 0 [pid 12615] exit_group(0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12617] <... chdir resumed>) = 0 [pid 12616] chdir("./1541" [pid 12615] <... exit_group resumed>) = ? [pid 5068] rmdir("./1504" [pid 5066] getdents64(3, [pid 12617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... rmdir resumed>) = 0 [pid 12617] <... prctl resumed>) = 0 [pid 12617] setpgid(0, 0) = 0 [pid 12617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] mkdir("./1505", 0777 [pid 12615] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12616] <... chdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12615, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1459/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12617] <... openat resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12617] write(3, "1000", 4 [pid 12616] <... prctl resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1459/binderfs", [pid 12617] <... write resumed>) = 4 [pid 12616] setpgid(0, 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12618 attached [pid 12617] close(3 [pid 12616] <... setpgid resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12618 [pid 5066] unlink("./1459/binderfs" [pid 12618] set_robust_list(0x5555686ec660, 24 [pid 12617] <... close resumed>) = 0 [pid 12616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... unlink resumed>) = 0 [pid 12618] <... set_robust_list resumed>) = 0 [pid 12617] symlink("/dev/binderfs", "./binderfs" [pid 12618] chdir("./1505" [pid 12616] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 12617] <... symlink resumed>) = 0 [pid 5069] umount2("./1527", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12618] <... chdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12616] write(3, "1000", 4 [pid 5069] openat(AT_FDCWD, "./1527", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12616] <... write resumed>) = 4 [pid 5066] close(3 [pid 12616] close(3 [pid 5066] <... close resumed>) = 0 [pid 12618] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12617] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12616] <... close resumed>) = 0 [pid 5066] rmdir("./1459" [pid 12618] <... prctl resumed>) = 0 [pid 12617] <... bpf resumed>) = 3 [pid 12616] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... openat resumed>) = 3 [pid 12618] setpgid(0, 0 [pid 12617] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(3, "", [pid 5066] <... rmdir resumed>) = 0 [pid 12618] <... setpgid resumed>) = 0 [pid 12617] <... bpf resumed>) = 4 [pid 12616] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12616] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5066] mkdir("./1460", 0777 [pid 12618] <... openat resumed>) = 3 [pid 12617] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12616] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12618] write(3, "1000", 4 [pid 12617] <... bpf resumed>) = 5 [pid 12616] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1527/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12618] <... write resumed>) = 4 [pid 12618] close(3 [pid 12617] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12618] <... close resumed>) = 0 [pid 12616] <... bpf resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1527/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12618] symlink("/dev/binderfs", "./binderfs" [pid 12617] <... bpf resumed>) = 6 [pid 12616] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12618] <... symlink resumed>) = 0 [pid 12617] exit_group(0./strace-static-x86_64: Process 12619 attached [pid 12618] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12617] <... exit_group resumed>) = ? [pid 5069] unlink("./1527/binderfs" [pid 12619] set_robust_list(0x5555686ec660, 24 [pid 12618] <... bpf resumed>) = 3 [pid 12617] +++ exited with 0 +++ [pid 12616] <... bpf resumed>) = 5 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12619 [pid 12619] <... set_robust_list resumed>) = 0 [pid 12618] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 12619] chdir("./1460" [pid 12618] <... bpf resumed>) = 4 [pid 12616] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12619] <... chdir resumed>) = 0 [pid 12618] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12617, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12619] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12618] <... bpf resumed>) = 5 [pid 5069] <... close resumed>) = 0 [pid 5067] umount2("./1486", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12619] <... prctl resumed>) = 0 [pid 5069] rmdir("./1527" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12619] setpgid(0, 0 [pid 5067] openat(AT_FDCWD, "./1486", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12618] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] newfstatat(3, "", [pid 12619] <... setpgid resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] mkdir("./1528", 0777 [pid 5067] getdents64(3, [pid 12619] write(3, "1000", 4 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12619] <... write resumed>) = 4 [pid 12619] close(3 [pid 12618] <... bpf resumed>) = 6 [pid 12616] <... bpf resumed>) = 6 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./1486/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12619] <... close resumed>) = 0 [pid 12616] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12618] exit_group(0 [pid 12619] symlink("/dev/binderfs", "./binderfs" [pid 5067] newfstatat(AT_FDCWD, "./1486/binderfs", [pid 12616] <... exit_group resumed>) = ? [pid 12619] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12620 attached [pid 12618] <... exit_group resumed>) = ? [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12619] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12620 [pid 12620] set_robust_list(0x5555686ec660, 24 [pid 12619] <... bpf resumed>) = 3 [pid 12618] +++ exited with 0 +++ [pid 12616] +++ exited with 0 +++ [pid 5067] unlink("./1486/binderfs" [pid 12620] <... set_robust_list resumed>) = 0 [pid 12619] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12616, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12618, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12620] chdir("./1528" [pid 12619] <... bpf resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [pid 12620] <... chdir resumed>) = 0 [pid 12619] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1541", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1505", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12620] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 12620] <... prctl resumed>) = 0 [pid 12619] <... bpf resumed>) = 5 [pid 5071] openat(AT_FDCWD, "./1541", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./1505", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12620] setpgid(0, 0 [pid 5071] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] close(3 [pid 12620] <... setpgid resumed>) = 0 [pid 12619] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(3, "", [pid 5068] newfstatat(3, "", [pid 5067] <... close resumed>) = 0 [pid 12620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5067] rmdir("./1486" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] getdents64(3, [pid 12620] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 12620] write(3, "1000", 4 [pid 5071] umount2("./1541/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./1487", 0777 [pid 5071] newfstatat(AT_FDCWD, "./1541/binderfs", [pid 5068] umount2("./1505/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12620] <... write resumed>) = 4 [pid 12620] close(3) = 0 [pid 12620] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12620] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./1541/binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1505/binderfs", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12620] <... bpf resumed>) = 3 [pid 12620] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12620] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12621 attached ) = 5 [pid 5071] <... unlink resumed>) = 0 [pid 5068] unlink("./1505/binderfs" [pid 5071] getdents64(3, [pid 12621] set_robust_list(0x5555686ec660, 24) = 0 [pid 12621] chdir("./1487") = 0 [pid 12621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12620] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12621] setpgid(0, 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12621] <... setpgid resumed>) = 0 [pid 12621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] close(3) = 0 [pid 12621] <... openat resumed>) = 3 [pid 12620] <... bpf resumed>) = 6 [pid 12619] <... bpf resumed>) = 6 [pid 5071] rmdir("./1541" [pid 12621] write(3, "1000", 4 [pid 12620] exit_group(0 [pid 12621] <... write resumed>) = 4 [pid 12621] close(3 [pid 12620] <... exit_group resumed>) = ? [pid 12621] <... close resumed>) = 0 [pid 12619] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12621 [pid 12620] +++ exited with 0 +++ [pid 12621] symlink("/dev/binderfs", "./binderfs" [pid 12619] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12620, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12621] <... symlink resumed>) = 0 [pid 5071] mkdir("./1542", 0777 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] close(3 [pid 12621] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12619] +++ exited with 0 +++ [pid 12621] <... bpf resumed>) = 3 [pid 5068] rmdir("./1505" [pid 12621] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1528", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12619, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12621] <... bpf resumed>) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12621] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] openat(AT_FDCWD, "./1528", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./1506", 0777 [pid 5066] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12622 attached [pid 12622] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12622 [pid 5069] <... openat resumed>) = 3 [pid 12622] <... set_robust_list resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] <... mkdir resumed>) = 0 [pid 12621] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12622] chdir("./1542" [pid 12621] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] getdents64(3, [pid 5066] umount2("./1460", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12622] <... chdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12622] setpgid(0, 0) = 0 [pid 5069] umount2("./1528/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./1460", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12623 attached [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 12623] set_robust_list(0x5555686ec660, 24 [pid 12621] <... bpf resumed>) = 6 [pid 5069] newfstatat(AT_FDCWD, "./1528/binderfs", [pid 12622] <... openat resumed>) = 3 [pid 12621] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12623] <... set_robust_list resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 5069] unlink("./1528/binderfs" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12623 [pid 12623] chdir("./1506" [pid 12622] write(3, "1000", 4 [pid 12621] <... exit_group resumed>) = ? [pid 12623] <... chdir resumed>) = 0 [pid 12622] <... write resumed>) = 4 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12623] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12622] close(3 [pid 5069] getdents64(3, [pid 5066] getdents64(3, [pid 12623] <... prctl resumed>) = 0 [pid 12622] <... close resumed>) = 0 [pid 12621] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12623] setpgid(0, 0 [pid 12622] symlink("/dev/binderfs", "./binderfs" [pid 5069] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12621, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12623] <... setpgid resumed>) = 0 [pid 12622] <... symlink resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5066] umount2("./1460/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] rmdir("./1528" [pid 12623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12622] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 12622] <... bpf resumed>) = 3 [pid 12622] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12623] <... openat resumed>) = 3 [pid 12622] <... bpf resumed>) = 4 [pid 5066] newfstatat(AT_FDCWD, "./1460/binderfs", [pid 5067] umount2("./1487", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12622] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12623] write(3, "1000", 4 [pid 5069] mkdir("./1529", 0777 [pid 5067] openat(AT_FDCWD, "./1487", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12622] <... bpf resumed>) = 5 [pid 5067] <... openat resumed>) = 3 [pid 12623] <... write resumed>) = 4 [pid 5066] unlink("./1460/binderfs" [pid 12623] close(3 [pid 5067] newfstatat(3, "", [pid 5066] <... unlink resumed>) = 0 [pid 12623] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12622] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1487/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12623] symlink("/dev/binderfs", "./binderfs" [pid 12622] <... bpf resumed>) = 6 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12623] <... symlink resumed>) = 0 [pid 12622] exit_group(0 [pid 5067] newfstatat(AT_FDCWD, "./1487/binderfs", [pid 12622] <... exit_group resumed>) = ? [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12623] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12623] <... bpf resumed>) = 3 ./strace-static-x86_64: Process 12624 attached [pid 12622] +++ exited with 0 +++ [pid 5067] unlink("./1487/binderfs" [pid 5066] close(3 [pid 12624] set_robust_list(0x5555686ec660, 24 [pid 12623] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12622, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12624 [pid 5066] <... close resumed>) = 0 [pid 12624] <... set_robust_list resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12624] chdir("./1529" [pid 12623] <... bpf resumed>) = 4 [pid 5066] rmdir("./1460" [pid 12624] <... chdir resumed>) = 0 [pid 12623] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1542", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1542", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 5071] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5067] rmdir("./1487" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12624] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12623] <... bpf resumed>) = 5 [pid 12624] <... prctl resumed>) = 0 [pid 12623] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] mkdir("./1461", 0777 [pid 12624] setpgid(0, 0 [pid 5071] umount2("./1542/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1488", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12624] <... setpgid resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1542/binderfs", [pid 12623] <... bpf resumed>) = 6 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12623] exit_group(0 [pid 5071] unlink("./1542/binderfs" [pid 12623] <... exit_group resumed>) = ? [pid 5071] <... unlink resumed>) = 0 [pid 12624] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12624] write(3, "1000", 4 [pid 12623] +++ exited with 0 +++ [pid 5071] getdents64(3, ./strace-static-x86_64: Process 12625 attached 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12625] set_robust_list(0x5555686ec660, 24 [pid 5071] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12623, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12625] <... set_robust_list resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12625] chdir("./1461" [pid 5071] rmdir("./1542") = 0 [pid 12625] <... chdir resumed>) = 0 [pid 12625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12625] setpgid(0, 0) = 0 [pid 12625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12624] <... write resumed>) = 4 [pid 5071] mkdir("./1543", 0777./strace-static-x86_64: Process 12626 attached [pid 12624] close(3 [pid 5068] umount2("./1506", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12625 [pid 12626] set_robust_list(0x5555686ec660, 24 [pid 12624] <... close resumed>) = 0 [pid 12626] <... set_robust_list resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12624] symlink("/dev/binderfs", "./binderfs" [pid 12625] <... openat resumed>) = 3 [pid 12624] <... symlink resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1506", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12626] chdir("./1488" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12626 [pid 5068] <... openat resumed>) = 3 [pid 12626] <... chdir resumed>) = 0 [pid 12625] write(3, "1000", 4 [pid 5068] newfstatat(3, "", [pid 12625] <... write resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12626] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12625] close(3 [pid 12624] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12627 attached [pid 12626] <... prctl resumed>) = 0 [pid 12625] <... close resumed>) = 0 [pid 12624] <... bpf resumed>) = 3 [pid 5068] getdents64(3, [pid 12627] set_robust_list(0x5555686ec660, 24 [pid 12626] setpgid(0, 0 [pid 12625] symlink("/dev/binderfs", "./binderfs" [pid 12626] <... setpgid resumed>) = 0 [pid 12624] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12627 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12627] <... set_robust_list resumed>) = 0 [pid 12626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12625] <... symlink resumed>) = 0 [pid 5068] umount2("./1506/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12627] chdir("./1543" [pid 12624] <... bpf resumed>) = 4 [pid 12626] <... openat resumed>) = 3 [pid 12625] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12624] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12627] <... chdir resumed>) = 0 [pid 12626] write(3, "1000", 4 [pid 12625] <... bpf resumed>) = 3 [pid 12625] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12627] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12626] <... write resumed>) = 4 [pid 12625] <... bpf resumed>) = 4 [pid 5068] newfstatat(AT_FDCWD, "./1506/binderfs", [pid 12626] close(3 [pid 12627] <... prctl resumed>) = 0 [pid 12626] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12627] setpgid(0, 0 [pid 12626] symlink("/dev/binderfs", "./binderfs" [pid 12625] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12624] <... bpf resumed>) = 5 [pid 12627] <... setpgid resumed>) = 0 [pid 12626] <... symlink resumed>) = 0 [pid 12625] <... bpf resumed>) = 5 [pid 12624] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] unlink("./1506/binderfs" [pid 12626] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12625] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12624] <... bpf resumed>) = 6 [pid 5068] <... unlink resumed>) = 0 [pid 12626] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12625] <... bpf resumed>) = 6 [pid 12624] exit_group(0 [pid 12627] <... openat resumed>) = 3 [pid 12625] exit_group(0 [pid 5068] getdents64(3, [pid 12626] <... bpf resumed>) = 4 [pid 12625] <... exit_group resumed>) = ? [pid 12624] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12627] write(3, "1000", 4 [pid 12626] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1506" [pid 12627] <... write resumed>) = 4 [pid 12625] +++ exited with 0 +++ [pid 5068] <... rmdir resumed>) = 0 [pid 12627] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12625, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12627] <... close resumed>) = 0 [pid 12627] symlink("/dev/binderfs", "./binderfs" [pid 12626] <... bpf resumed>) = 5 [pid 5068] mkdir("./1507", 0777 [pid 12627] <... symlink resumed>) = 0 [pid 12626] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12624] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12624, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12627] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12627] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] umount2("./1461", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12628 attached [pid 12626] <... bpf resumed>) = 6 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12627] <... bpf resumed>) = 4 [pid 12626] exit_group(0 [pid 5066] openat(AT_FDCWD, "./1461", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12628] set_robust_list(0x5555686ec660, 24 [pid 12627] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12626] <... exit_group resumed>) = ? [pid 5069] umount2("./1529", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12628 [pid 5066] <... openat resumed>) = 3 [pid 12628] <... set_robust_list resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12628] chdir("./1507" [pid 5069] openat(AT_FDCWD, "./1529", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12628] <... chdir resumed>) = 0 [pid 12626] +++ exited with 0 +++ [pid 5069] <... openat resumed>) = 3 [pid 12628] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] newfstatat(3, "", [pid 12628] <... prctl resumed>) = 0 [pid 12627] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12626, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] newfstatat(3, "", [pid 12628] setpgid(0, 0 [pid 5069] getdents64(3, [pid 12628] <... setpgid resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12627] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] umount2("./1529/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12628] <... openat resumed>) = 3 [pid 12628] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 12628] <... write resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1529/binderfs", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12628] close(3 [pid 5066] umount2("./1461/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12628] <... close resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1461/binderfs", [pid 12628] symlink("/dev/binderfs", "./binderfs" [pid 5069] unlink("./1529/binderfs" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1488", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./1461/binderfs" [pid 12628] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1488", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 12628] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] close(3 [pid 5067] newfstatat(3, "", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] close(3 [pid 5069] rmdir("./1529" [pid 5067] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... rmdir resumed>) = 0 [pid 12628] <... bpf resumed>) = 3 [pid 5067] umount2("./1488/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1461" [pid 5069] mkdir("./1530", 0777 [pid 12628] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1488/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12628] <... bpf resumed>) = 4 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] unlink("./1488/binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 12628] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] mkdir("./1462", 0777 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12629 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12629 attached [pid 12628] <... bpf resumed>) = 5 [pid 12627] <... bpf resumed>) = 6 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12628] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12627] exit_group(0 [pid 12629] set_robust_list(0x5555686ec660, 24 [pid 12628] <... bpf resumed>) = 6 [pid 12627] <... exit_group resumed>) = ? [pid 5067] close(3 [pid 12629] <... set_robust_list resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12628] exit_group(0./strace-static-x86_64: Process 12630 attached [pid 12629] chdir("./1530" [pid 12628] <... exit_group resumed>) = ? [pid 5067] rmdir("./1488" [pid 12630] set_robust_list(0x5555686ec660, 24) = 0 [pid 12630] chdir("./1462" [pid 5067] <... rmdir resumed>) = 0 [pid 12630] <... chdir resumed>) = 0 [pid 12630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12630] setpgid(0, 0) = 0 [pid 12630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12629] <... chdir resumed>) = 0 [pid 5067] mkdir("./1489", 0777 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12630 [pid 12629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12630] write(3, "1000", 4 [pid 12629] setpgid(0, 0 [pid 12630] <... write resumed>) = 4 [pid 12630] close(3) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12630] symlink("/dev/binderfs", "./binderfs" [pid 12629] <... setpgid resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12630] <... symlink resumed>) = 0 [pid 12630] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12630] <... bpf resumed>) = 3 [pid 12629] <... openat resumed>) = 3 [pid 12629] write(3, "1000", 4./strace-static-x86_64: Process 12631 attached [pid 12630] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12628] +++ exited with 0 +++ [pid 12627] +++ exited with 0 +++ [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12631 [pid 12631] set_robust_list(0x5555686ec660, 24 [pid 12630] <... bpf resumed>) = 4 [pid 12629] <... write resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12627, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12631] <... set_robust_list resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12628, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12629] close(3 [pid 12630] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12629] <... close resumed>) = 0 [pid 12631] chdir("./1489" [pid 12629] symlink("/dev/binderfs", "./binderfs" [pid 12631] <... chdir resumed>) = 0 [pid 12629] <... symlink resumed>) = 0 [pid 5071] umount2("./1543", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1507", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12631] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12631] <... setpgid resumed>) = 0 [pid 12629] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] openat(AT_FDCWD, "./1543", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./1507", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12630] <... bpf resumed>) = 5 [pid 12631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12630] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12629] <... bpf resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 12630] <... bpf resumed>) = 6 [pid 12631] <... openat resumed>) = 3 [pid 12630] exit_group(0 [pid 12629] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(3, "", [pid 5068] newfstatat(3, "", [pid 12631] write(3, "1000", 4 [pid 12630] <... exit_group resumed>) = ? [pid 12629] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12631] <... write resumed>) = 4 [pid 12629] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 5068] getdents64(3, [pid 12631] close(3) = 0 [pid 12631] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12630] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12631] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12629] <... bpf resumed>) = 5 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1543/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12631] <... bpf resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12630, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12631] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12629] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] umount2("./1507/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12631] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1462", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12631] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(AT_FDCWD, "./1543/binderfs", [pid 5068] newfstatat(AT_FDCWD, "./1507/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12631] <... bpf resumed>) = 5 [pid 5066] openat(AT_FDCWD, "./1462", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] unlink("./1543/binderfs" [pid 5068] unlink("./1507/binderfs" [pid 5066] <... openat resumed>) = 3 [pid 12631] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1462/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5068] getdents64(3, [pid 5066] newfstatat(AT_FDCWD, "./1462/binderfs", [pid 12631] <... bpf resumed>) = 6 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12631] exit_group(0 [pid 5071] close(3 [pid 12629] <... bpf resumed>) = 6 [pid 5068] close(3 [pid 5066] unlink("./1462/binderfs" [pid 5071] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12631] <... exit_group resumed>) = ? [pid 12629] exit_group(0 [pid 5071] rmdir("./1543" [pid 5068] rmdir("./1507" [pid 5066] <... unlink resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12631] +++ exited with 0 +++ [pid 12629] <... exit_group resumed>) = ? [pid 5071] mkdir("./1544", 0777 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5071] <... mkdir resumed>) = 0 [pid 5068] mkdir("./1508", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12631, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12629] +++ exited with 0 +++ [pid 5066] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12629, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] umount2("./1489", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1462" [pid 5069] umount2("./1530", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1489", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] openat(AT_FDCWD, "./1530", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 5069] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1463", 0777 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12632 attached [pid 5069] newfstatat(3, "", [pid 5067] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] getdents64(3, ./strace-static-x86_64: Process 12633 attached [pid 12632] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12632 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1489/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12632] <... set_robust_list resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12633 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12633] set_robust_list(0x5555686ec660, 24 [pid 5067] newfstatat(AT_FDCWD, "./1489/binderfs", [pid 12632] chdir("./1544") = 0 [pid 12632] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 12634 attached ) = 0 [pid 12634] set_robust_list(0x5555686ec660, 24 [pid 12632] setpgid(0, 0 [pid 12634] <... set_robust_list resumed>) = 0 [pid 12634] chdir("./1463" [pid 12633] <... set_robust_list resumed>) = 0 [pid 12632] <... setpgid resumed>) = 0 [pid 5069] umount2("./1530/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12634 [pid 12633] chdir("./1508" [pid 5067] unlink("./1489/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12634] <... chdir resumed>) = 0 [pid 12633] <... chdir resumed>) = 0 [pid 12632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(AT_FDCWD, "./1530/binderfs", [pid 5067] <... unlink resumed>) = 0 [pid 12634] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12633] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12634] <... prctl resumed>) = 0 [pid 12633] <... prctl resumed>) = 0 [pid 12632] <... openat resumed>) = 3 [pid 5069] unlink("./1530/binderfs" [pid 5067] getdents64(3, [pid 12634] setpgid(0, 0 [pid 12633] setpgid(0, 0 [pid 12632] write(3, "1000", 4 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12634] <... setpgid resumed>) = 0 [pid 12633] <... setpgid resumed>) = 0 [pid 12632] <... write resumed>) = 4 [pid 5069] getdents64(3, [pid 5067] close(3 [pid 12634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12632] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12634] <... openat resumed>) = 3 [pid 12632] <... close resumed>) = 0 [pid 5069] close(3 [pid 5067] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] rmdir("./1489" [pid 5069] rmdir("./1530" [pid 12633] <... openat resumed>) = 3 [pid 12634] write(3, "1000", 4 [pid 12632] symlink("/dev/binderfs", "./binderfs" [pid 12634] <... write resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 12634] close(3 [pid 12632] <... symlink resumed>) = 0 [pid 12634] <... close resumed>) = 0 [pid 12632] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... rmdir resumed>) = 0 [pid 12634] symlink("/dev/binderfs", "./binderfs" [pid 12633] write(3, "1000", 4 [pid 5069] mkdir("./1531", 0777 [pid 12634] <... symlink resumed>) = 0 [pid 12633] <... write resumed>) = 4 [pid 12632] <... bpf resumed>) = 3 [pid 12633] close(3 [pid 12632] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12634] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12633] <... close resumed>) = 0 [pid 12632] <... bpf resumed>) = 4 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] mkdir("./1490", 0777 [pid 12633] symlink("/dev/binderfs", "./binderfs" [pid 12632] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12634] <... bpf resumed>) = 3 [pid 12633] <... symlink resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 12632] <... bpf resumed>) = 5 [pid 12634] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12633] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12632] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12634] <... bpf resumed>) = 4 [pid 12633] <... bpf resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12634] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12633] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12632] <... bpf resumed>) = 6 ./strace-static-x86_64: Process 12636 attached ./strace-static-x86_64: Process 12635 attached [pid 12633] <... bpf resumed>) = 4 [pid 12632] exit_group(0 [pid 12635] set_robust_list(0x5555686ec660, 24) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12636 [pid 12633] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12632] <... exit_group resumed>) = ? [pid 12636] set_robust_list(0x5555686ec660, 24 [pid 12635] chdir("./1531" [pid 12634] <... bpf resumed>) = 5 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12635 [pid 12636] <... set_robust_list resumed>) = 0 [pid 12634] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12636] chdir("./1490" [pid 12635] <... chdir resumed>) = 0 [pid 12634] <... bpf resumed>) = 6 [pid 12633] <... bpf resumed>) = 5 [pid 12636] <... chdir resumed>) = 0 [pid 12635] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12634] exit_group(0 [pid 12633] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12636] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12635] <... prctl resumed>) = 0 [pid 12634] <... exit_group resumed>) = ? [pid 12636] <... prctl resumed>) = 0 [pid 12635] setpgid(0, 0 [pid 12636] setpgid(0, 0) = 0 [pid 12635] <... setpgid resumed>) = 0 [pid 12633] <... bpf resumed>) = 6 [pid 12632] +++ exited with 0 +++ [pid 12635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12632, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12635] <... openat resumed>) = 3 [pid 12633] exit_group(0) = ? [pid 12635] write(3, "1000", 4 [pid 5071] umount2("./1544", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12636] <... openat resumed>) = 3 [pid 12635] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12635] close(3) = 0 [pid 5071] openat(AT_FDCWD, "./1544", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12635] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... openat resumed>) = 3 [pid 12635] <... symlink resumed>) = 0 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12635] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 12636] write(3, "1000", 4) = 4 [pid 12635] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12635] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1544/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12636] close(3 [pid 12635] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12635] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(AT_FDCWD, "./1544/binderfs", [pid 12636] <... close resumed>) = 0 [pid 12636] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12635] <... bpf resumed>) = 5 [pid 12636] <... symlink resumed>) = 0 [pid 12635] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] unlink("./1544/binderfs" [pid 12636] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 12636] <... bpf resumed>) = 3 [pid 5071] getdents64(3, [pid 12636] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12634] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12636] <... bpf resumed>) = 4 [pid 12633] +++ exited with 0 +++ [pid 5071] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12634, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12633, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1544" [pid 12636] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12636] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12636] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] umount2("./1508", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] mkdir("./1545", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1508", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./1463", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1463", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... openat resumed>) = 3 [pid 5068] umount2("./1508/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12637 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12637 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 12637] set_robust_list(0x5555686ec660, 24 [pid 12635] <... bpf resumed>) = 6 [pid 12637] <... set_robust_list resumed>) = 0 [pid 12635] exit_group(0 [pid 12636] <... bpf resumed>) = 6 [pid 5068] newfstatat(AT_FDCWD, "./1508/binderfs", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12637] chdir("./1545" [pid 12636] exit_group(0 [pid 12635] <... exit_group resumed>) = ? [pid 5066] getdents64(3, [pid 12637] <... chdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1508/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... unlink resumed>) = 0 [pid 12637] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12636] <... exit_group resumed>) = ? [pid 12637] <... prctl resumed>) = 0 [pid 5066] umount2("./1463/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1463/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12637] setpgid(0, 0 [pid 12636] +++ exited with 0 +++ [pid 12635] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 5066] unlink("./1463/binderfs" [pid 12637] <... setpgid resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12635, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12636, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... unlink resumed>) = 0 [pid 5068] close(3) = 0 [pid 5069] umount2("./1531", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./1508" [pid 5067] umount2("./1490", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12637] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1490", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12637] write(3, "1000", 4 [pid 5069] openat(AT_FDCWD, "./1531", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./1509", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5066] close(3 [pid 12637] <... write resumed>) = 4 [pid 5069] <... openat resumed>) = 3 [pid 12637] close(3 [pid 5069] newfstatat(3, "", [pid 12637] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12637] symlink("/dev/binderfs", "./binderfs" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] newfstatat(3, "", [pid 5066] <... close resumed>) = 0 [pid 12637] <... symlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] rmdir("./1463" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12638 attached [pid 12637] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1531/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12638] set_robust_list(0x5555686ec660, 24 [pid 5066] mkdir("./1464", 0777 [pid 12638] <... set_robust_list resumed>) = 0 [pid 12637] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12638 [pid 5067] umount2("./1490/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12637] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(AT_FDCWD, "./1531/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... mkdir resumed>) = 0 [pid 12638] chdir("./1509" [pid 12637] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1490/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12637] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] unlink("./1531/binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12638] <... chdir resumed>) = 0 [pid 12637] <... bpf resumed>) = 5 [pid 5069] <... unlink resumed>) = 0 [pid 5067] unlink("./1490/binderfs" [pid 12638] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 12639 attached ) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12639 [pid 12639] set_robust_list(0x5555686ec660, 24 [pid 12638] setpgid(0, 0 [pid 12637] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 12639] <... set_robust_list resumed>) = 0 [pid 12638] <... setpgid resumed>) = 0 [pid 12637] <... bpf resumed>) = 6 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 12638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12637] exit_group(0 [pid 5069] close(3 [pid 12639] chdir("./1464" [pid 12638] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./1490" [pid 12639] <... chdir resumed>) = 0 [pid 12639] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12638] write(3, "1000", 4 [pid 12637] <... exit_group resumed>) = ? [pid 5069] <... close resumed>) = 0 [pid 12639] <... prctl resumed>) = 0 [pid 12638] <... write resumed>) = 4 [pid 5069] rmdir("./1531" [pid 5067] <... rmdir resumed>) = 0 [pid 12639] setpgid(0, 0 [pid 12638] close(3) = 0 [pid 5067] mkdir("./1491", 0777 [pid 12639] <... setpgid resumed>) = 0 [pid 12638] symlink("/dev/binderfs", "./binderfs" [pid 12637] +++ exited with 0 +++ [pid 5069] <... rmdir resumed>) = 0 [pid 12639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... mkdir resumed>) = 0 [pid 12638] <... symlink resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12637, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] mkdir("./1532", 0777 [pid 12639] <... openat resumed>) = 3 [pid 12638] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5071] umount2("./1545", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12639] write(3, "1000", 4 [pid 12638] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12639] <... write resumed>) = 4 [pid 12638] <... bpf resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./1545", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12639] close(3./strace-static-x86_64: Process 12640 attached ) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12640] set_robust_list(0x5555686ec660, 24 [pid 5071] newfstatat(3, "", [pid 12640] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12640 [pid 12639] symlink("/dev/binderfs", "./binderfs" [pid 12638] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12641 attached [pid 12640] chdir("./1491" [pid 12639] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 12641] set_robust_list(0x5555686ec660, 24 [pid 12640] <... chdir resumed>) = 0 [pid 12638] <... bpf resumed>) = 5 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12641] <... set_robust_list resumed>) = 0 [pid 12640] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] umount2("./1545/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12641] chdir("./1532" [pid 12640] <... prctl resumed>) = 0 [pid 12639] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12638] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12641 [pid 12641] <... chdir resumed>) = 0 [pid 12640] setpgid(0, 0 [pid 12639] <... bpf resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./1545/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12640] <... setpgid resumed>) = 0 [pid 12639] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12641] setpgid(0, 0 [pid 5071] unlink("./1545/binderfs" [pid 12641] <... setpgid resumed>) = 0 [pid 12640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12639] <... bpf resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 12641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 12640] <... openat resumed>) = 3 [pid 12639] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12638] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12641] <... openat resumed>) = 3 [pid 12640] write(3, "1000", 4 [pid 5071] close(3 [pid 12640] <... write resumed>) = 4 [pid 12639] <... bpf resumed>) = 5 [pid 12641] write(3, "1000", 4 [pid 12638] exit_group(0 [pid 5071] <... close resumed>) = 0 [pid 12641] <... write resumed>) = 4 [pid 12640] close(3 [pid 12639] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12638] <... exit_group resumed>) = ? [pid 5071] rmdir("./1545" [pid 12640] <... close resumed>) = 0 [pid 12641] close(3) = 0 [pid 12640] symlink("/dev/binderfs", "./binderfs" [pid 12639] <... bpf resumed>) = 6 [pid 5071] <... rmdir resumed>) = 0 [pid 12641] symlink("/dev/binderfs", "./binderfs" [pid 12640] <... symlink resumed>) = 0 [pid 12639] exit_group(0 [pid 12641] <... symlink resumed>) = 0 [pid 12640] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12639] <... exit_group resumed>) = ? [pid 12641] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12640] <... bpf resumed>) = 3 [pid 5071] mkdir("./1546", 0777 [pid 12640] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12641] <... bpf resumed>) = 3 [pid 12640] <... bpf resumed>) = 4 [pid 12641] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12640] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12641] <... bpf resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 12641] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12640] <... bpf resumed>) = 5 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12640] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12642 attached [pid 12641] <... bpf resumed>) = 5 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12642 [pid 12642] set_robust_list(0x5555686ec660, 24) = 0 [pid 12641] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12642] chdir("./1546") = 0 [pid 12642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12642] setpgid(0, 0) = 0 [pid 12642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12638] +++ exited with 0 +++ [pid 12642] <... openat resumed>) = 3 [pid 12639] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12638, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12642] write(3, "1000", 4) = 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12639, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12642] close(3) = 0 [pid 5068] umount2("./1509", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12642] symlink("/dev/binderfs", "./binderfs" [pid 5066] umount2("./1464", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1464", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12642] <... symlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1509", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12642] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(3, "", [pid 5066] umount2("./1464/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12642] <... bpf resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12642] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5068] getdents64(3, [pid 5066] newfstatat(AT_FDCWD, "./1464/binderfs", [pid 12642] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./1509/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./1464/binderfs" [pid 12642] <... bpf resumed>) = 5 [pid 12641] <... bpf resumed>) = 6 [pid 12640] <... bpf resumed>) = 6 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12642] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... unlink resumed>) = 0 [pid 12641] exit_group(0 [pid 12640] exit_group(0 [pid 5068] newfstatat(AT_FDCWD, "./1509/binderfs", [pid 12642] <... bpf resumed>) = 6 [pid 12641] <... exit_group resumed>) = ? [pid 5066] getdents64(3, [pid 12642] exit_group(0 [pid 12640] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12641] +++ exited with 0 +++ [pid 5066] close(3 [pid 12642] <... exit_group resumed>) = ? [pid 5066] <... close resumed>) = 0 [pid 5068] unlink("./1509/binderfs" [pid 5066] rmdir("./1464" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12641, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] umount2("./1532", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] openat(AT_FDCWD, "./1532", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3) = 0 [pid 5068] rmdir("./1509" [pid 5069] <... openat resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1465", 0777 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] mkdir("./1510", 0777 [pid 5069] umount2("./1532/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1532/binderfs", [pid 5066] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] unlink("./1532/binderfs" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, ./strace-static-x86_64: Process 12644 attached ./strace-static-x86_64: Process 12643 attached [pid 12642] +++ exited with 0 +++ [pid 12640] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12644 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12640, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12643] set_robust_list(0x5555686ec660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12642, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12644] set_robust_list(0x5555686ec660, 24) = 0 [pid 12643] <... set_robust_list resumed>) = 0 [pid 5069] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12643 [pid 5069] <... close resumed>) = 0 [pid 12644] chdir("./1510" [pid 12643] chdir("./1465" [pid 5069] rmdir("./1532" [pid 5067] umount2("./1491", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12644] <... chdir resumed>) = 0 [pid 12643] <... chdir resumed>) = 0 [pid 5071] umount2("./1546", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12644] <... prctl resumed>) = 0 [pid 12643] <... prctl resumed>) = 0 [pid 12644] setpgid(0, 0 [pid 12643] setpgid(0, 0 [pid 5071] openat(AT_FDCWD, "./1546", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] mkdir("./1533", 0777 [pid 5067] openat(AT_FDCWD, "./1491", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12644] <... setpgid resumed>) = 0 [pid 12643] <... setpgid resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5067] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12643] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 12644] <... openat resumed>) = 3 [pid 12643] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12643] <... write resumed>) = 4 [pid 12644] write(3, "1000", 4 [pid 12643] close(3 [pid 12644] <... write resumed>) = 4 [pid 12643] <... close resumed>) = 0 [pid 12644] close(3 [pid 12643] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12645 attached [pid 12644] <... close resumed>) = 0 [pid 12643] <... symlink resumed>) = 0 [pid 5071] umount2("./1546/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1491/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12645] set_robust_list(0x5555686ec660, 24 [pid 12644] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1546/binderfs", [pid 12645] <... set_robust_list resumed>) = 0 [pid 12644] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./1546/binderfs" [pid 12645] chdir("./1533" [pid 5067] newfstatat(AT_FDCWD, "./1491/binderfs", [pid 12645] <... chdir resumed>) = 0 [pid 12644] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12643] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12644] <... bpf resumed>) = 3 [pid 12643] <... bpf resumed>) = 3 [pid 5071] getdents64(3, [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12645 [pid 5067] unlink("./1491/binderfs" [pid 12645] <... prctl resumed>) = 0 [pid 12644] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12643] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12645] setpgid(0, 0 [pid 12644] <... bpf resumed>) = 4 [pid 5071] close(3) = 0 [pid 5067] getdents64(3, [pid 5071] rmdir("./1546" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12645] <... setpgid resumed>) = 0 [pid 12644] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12643] <... bpf resumed>) = 4 [pid 5067] close(3 [pid 12645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1491" [pid 12645] <... openat resumed>) = 3 [pid 12644] <... bpf resumed>) = 5 [pid 12643] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1547", 0777 [pid 12645] write(3, "1000", 4) = 4 [pid 12644] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12643] <... bpf resumed>) = 5 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12645] close(3 [pid 12644] <... bpf resumed>) = 6 [pid 12645] <... close resumed>) = 0 [pid 12643] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1492", 0777 [pid 12645] symlink("/dev/binderfs", "./binderfs" [pid 12644] exit_group(0 [pid 12643] <... bpf resumed>) = 6 [pid 12645] <... symlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12646 attached [pid 12644] <... exit_group resumed>) = ? [pid 12643] exit_group(0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12645] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12646] set_robust_list(0x5555686ec660, 24 [pid 12643] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12647 attached [pid 12646] <... set_robust_list resumed>) = 0 [pid 12645] <... bpf resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12646 [pid 12647] set_robust_list(0x5555686ec660, 24 [pid 12645] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12647] <... set_robust_list resumed>) = 0 [pid 12646] chdir("./1547" [pid 12645] <... bpf resumed>) = 4 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12647 [pid 12647] chdir("./1492" [pid 12646] <... chdir resumed>) = 0 [pid 12645] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12644] +++ exited with 0 +++ [pid 12647] <... chdir resumed>) = 0 [pid 12646] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12643] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12644, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12646] <... prctl resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12643, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12646] setpgid(0, 0 [pid 12645] <... bpf resumed>) = 5 [pid 12647] <... prctl resumed>) = 0 [pid 12646] <... setpgid resumed>) = 0 [pid 12646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12647] setpgid(0, 0 [pid 12645] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] umount2("./1465", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12647] <... setpgid resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12646] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./1465", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12647] <... openat resumed>) = 3 [pid 12646] write(3, "1000", 4 [pid 5066] <... openat resumed>) = 3 [pid 12647] write(3, "1000", 4 [pid 12646] <... write resumed>) = 4 [pid 12647] <... write resumed>) = 4 [pid 12647] close(3 [pid 12646] close(3 [pid 5066] newfstatat(3, "", [pid 12646] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12647] <... close resumed>) = 0 [pid 12646] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./1510", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12647] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 12647] <... symlink resumed>) = 0 [pid 12646] <... symlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1510", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12647] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 12646] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12647] <... bpf resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5066] umount2("./1465/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12646] <... bpf resumed>) = 3 [pid 12647] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12645] <... bpf resumed>) = 6 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12646] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12647] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 5066] newfstatat(AT_FDCWD, "./1465/binderfs", [pid 12645] exit_group(0) = ? [pid 12647] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12646] <... bpf resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12645] +++ exited with 0 +++ [pid 12647] <... bpf resumed>) = 5 [pid 5068] umount2("./1510/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./1465/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12646] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12645, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] newfstatat(AT_FDCWD, "./1510/binderfs", [pid 5066] <... unlink resumed>) = 0 [pid 12647] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] umount2("./1533", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 12646] <... bpf resumed>) = 5 [pid 5069] openat(AT_FDCWD, "./1533", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] unlink("./1510/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12646] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 5069] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] rmdir("./1465" [pid 5069] getdents64(3, [pid 5068] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] mkdir("./1466", 0777 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1510" [pid 5069] umount2("./1533/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1533/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] mkdir("./1511", 0777 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] unlink("./1533/binderfs" [pid 5068] <... mkdir resumed>) = 0 [pid 12647] <... bpf resumed>) = 6 ./strace-static-x86_64: Process 12648 attached [pid 12647] exit_group(0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12648] set_robust_list(0x5555686ec660, 24 [pid 12647] <... exit_group resumed>) = ? [pid 12646] <... bpf resumed>) = 6 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12648 ./strace-static-x86_64: Process 12649 attached [pid 12648] <... set_robust_list resumed>) = 0 [pid 12646] exit_group(0 [pid 12648] chdir("./1466" [pid 12646] <... exit_group resumed>) = ? [pid 5069] getdents64(3, [pid 12649] set_robust_list(0x5555686ec660, 24 [pid 12648] <... chdir resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12649 [pid 12649] <... set_robust_list resumed>) = 0 [pid 12648] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12649] chdir("./1511" [pid 12648] <... prctl resumed>) = 0 [pid 12648] setpgid(0, 0 [pid 5069] close(3 [pid 12649] <... chdir resumed>) = 0 [pid 12648] <... setpgid resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1533" [pid 12649] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... rmdir resumed>) = 0 [pid 12649] <... prctl resumed>) = 0 [pid 12649] setpgid(0, 0) = 0 [pid 12649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] mkdir("./1534", 0777 [pid 12648] <... openat resumed>) = 3 [pid 12649] <... openat resumed>) = 3 [pid 12648] write(3, "1000", 4 [pid 5069] <... mkdir resumed>) = 0 [pid 12648] <... write resumed>) = 4 [pid 12649] write(3, "1000", 4) = 4 [pid 12649] close(3) = 0 [pid 12648] close(3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12649] symlink("/dev/binderfs", "./binderfs" [pid 12648] <... close resumed>) = 0 [pid 12648] symlink("/dev/binderfs", "./binderfs" [pid 12649] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 12650 attached [pid 12648] <... symlink resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12650 [pid 12650] set_robust_list(0x5555686ec660, 24 [pid 12649] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12648] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12650] <... set_robust_list resumed>) = 0 [pid 12649] <... bpf resumed>) = 3 [pid 12648] <... bpf resumed>) = 3 [pid 12650] chdir("./1534" [pid 12649] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12648] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12650] <... chdir resumed>) = 0 [pid 12649] <... bpf resumed>) = 4 [pid 12648] <... bpf resumed>) = 4 [pid 12647] +++ exited with 0 +++ [pid 12646] +++ exited with 0 +++ [pid 12650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12646, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12650] <... prctl resumed>) = 0 [pid 12649] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12648] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12647, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12650] setpgid(0, 0) = 0 [pid 5071] umount2("./1547", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1492", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1547", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1492", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12648] <... bpf resumed>) = 5 [pid 5071] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12650] <... openat resumed>) = 3 [pid 12649] <... bpf resumed>) = 5 [pid 12648] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] newfstatat(3, "", [pid 12650] write(3, "1000", 4 [pid 12649] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12650] <... write resumed>) = 4 [pid 12650] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12650] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] getdents64(3, [pid 12650] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1547/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1492/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12650] <... symlink resumed>) = 0 [pid 12649] <... bpf resumed>) = 6 [pid 12648] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12650] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1547/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1492/binderfs", [pid 12650] <... bpf resumed>) = 3 [pid 12648] exit_group(0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12650] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12649] exit_group(0 [pid 12648] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12650] <... bpf resumed>) = 4 [pid 5067] unlink("./1492/binderfs" [pid 5071] unlink("./1547/binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 12650] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12649] <... exit_group resumed>) = ? [pid 5071] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 12650] <... bpf resumed>) = 5 [pid 5071] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12650] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5067] close(3 [pid 5071] rmdir("./1547" [pid 5067] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] rmdir("./1492" [pid 5071] mkdir("./1548", 0777) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1493", 0777) = 0 ./strace-static-x86_64: Process 12651 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12651 [pid 12651] set_robust_list(0x5555686ec660, 24) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12651] chdir("./1548"./strace-static-x86_64: Process 12652 attached ) = 0 [pid 12651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12652] set_robust_list(0x5555686ec660, 24 [pid 12651] setpgid(0, 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12652 [pid 12652] <... set_robust_list resumed>) = 0 [pid 12651] <... setpgid resumed>) = 0 [pid 12652] chdir("./1493" [pid 12651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12652] <... chdir resumed>) = 0 [pid 12652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12651] <... openat resumed>) = 3 [pid 12649] +++ exited with 0 +++ [pid 12648] +++ exited with 0 +++ [pid 12652] setpgid(0, 0 [pid 12651] write(3, "1000", 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12648, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12652] <... setpgid resumed>) = 0 [pid 12651] <... write resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12649, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12651] close(3) = 0 [pid 12651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] umount2("./1466", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12651] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12652] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12652] write(3, "1000", 4 [pid 5068] umount2("./1511", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./1466", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12652] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12651] <... bpf resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 12652] close(3 [pid 12651] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] openat(AT_FDCWD, "./1511", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12652] <... close resumed>) = 0 [pid 12651] <... bpf resumed>) = 4 [pid 5066] newfstatat(3, "", [pid 12652] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12652] <... symlink resumed>) = 0 [pid 12651] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12652] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(3, "", [pid 5066] getdents64(3, [pid 12652] <... bpf resumed>) = 3 [pid 12651] <... bpf resumed>) = 5 [pid 12650] <... bpf resumed>) = 6 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12652] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 5066] umount2("./1466/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12651] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12650] exit_group(0 [pid 12652] <... bpf resumed>) = 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12652] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12651] <... bpf resumed>) = 6 [pid 12650] <... exit_group resumed>) = ? [pid 5068] umount2("./1511/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1466/binderfs", [pid 12652] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1511/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1466/binderfs" [pid 12651] exit_group(0 [pid 12652] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12651] <... exit_group resumed>) = ? [pid 5068] unlink("./1511/binderfs" [pid 5066] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5068] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] close(3 [pid 5068] rmdir("./1511" [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1466" [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1512", 0777 [pid 12652] <... bpf resumed>) = 6 [pid 12650] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 12652] exit_group(0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12650, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1467", 0777 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12652] <... exit_group resumed>) = ? [pid 5066] <... mkdir resumed>) = 0 [pid 5069] umount2("./1534", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1534", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12653 attached ) = 3 [pid 5069] newfstatat(3, "", [pid 12653] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12653 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12653] <... set_robust_list resumed>) = 0 [pid 12652] +++ exited with 0 +++ [pid 12651] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12654 attached [pid 12653] chdir("./1512" [pid 5069] getdents64(3, [pid 12654] set_robust_list(0x5555686ec660, 24 [pid 12653] <... chdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12651, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12652, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12654 [pid 12654] <... set_robust_list resumed>) = 0 [pid 12653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] umount2("./1548", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1493", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1548", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./1493", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12654] chdir("./1467" [pid 12653] <... prctl resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] umount2("./1534/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 12654] <... chdir resumed>) = 0 [pid 12653] setpgid(0, 0 [pid 5071] newfstatat(3, "", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12654] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12653] <... setpgid resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1534/binderfs", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12654] <... prctl resumed>) = 0 [pid 12653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] getdents64(3, [pid 12654] setpgid(0, 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] unlink("./1534/binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12654] <... setpgid resumed>) = 0 [pid 5071] umount2("./1548/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12653] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1493/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... unlink resumed>) = 0 [pid 12654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12653] write(3, "1000", 4 [pid 5071] newfstatat(AT_FDCWD, "./1548/binderfs", [pid 5069] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1493/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1493/binderfs" [pid 12653] <... write resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [pid 12654] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12654] write(3, "1000", 4 [pid 12653] close(3 [pid 5071] unlink("./1548/binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12654] <... write resumed>) = 4 [pid 12653] <... close resumed>) = 0 [pid 5069] close(3 [pid 12654] close(3 [pid 12653] symlink("/dev/binderfs", "./binderfs" [pid 12654] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12654] symlink("/dev/binderfs", "./binderfs" [pid 5067] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 12654] <... symlink resumed>) = 0 [pid 5069] rmdir("./1534" [pid 5067] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] rmdir("./1493" [pid 12653] <... symlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1494", 0777 [pid 12654] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12653] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5069] <... rmdir resumed>) = 0 [pid 12654] <... bpf resumed>) = 3 [pid 12653] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] mkdir("./1535", 0777 [pid 12654] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 12653] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 12654] <... bpf resumed>) = 4 [pid 12654] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12653] <... bpf resumed>) = 4 [pid 5071] rmdir("./1548" [pid 5069] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12654] <... bpf resumed>) = 5 ./strace-static-x86_64: Process 12655 attached [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12655 [pid 12655] set_robust_list(0x5555686ec660, 24) = 0 [pid 12655] chdir("./1535"./strace-static-x86_64: Process 12656 attached ) = 0 [pid 12656] set_robust_list(0x5555686ec660, 24 [pid 12655] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12653] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1549", 0777 [pid 12656] <... set_robust_list resumed>) = 0 [pid 12655] <... prctl resumed>) = 0 [pid 12654] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12656 [pid 12654] <... bpf resumed>) = 6 [pid 12656] chdir("./1494" [pid 12655] setpgid(0, 0 [pid 12653] <... bpf resumed>) = 5 [pid 5071] <... mkdir resumed>) = 0 [pid 12653] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12656] <... chdir resumed>) = 0 [pid 12655] <... setpgid resumed>) = 0 [pid 12654] exit_group(0 [pid 12653] <... bpf resumed>) = 6 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12654] <... exit_group resumed>) = ? [pid 12653] exit_group(0) = ? [pid 12656] setpgid(0, 0 [pid 12655] <... openat resumed>) = 3 [pid 12656] <... setpgid resumed>) = 0 [pid 12656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12655] write(3, "1000", 4./strace-static-x86_64: Process 12657 attached [pid 12656] <... openat resumed>) = 3 [pid 12655] <... write resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12657 [pid 12657] set_robust_list(0x5555686ec660, 24 [pid 12656] write(3, "1000", 4 [pid 12655] close(3 [pid 12657] <... set_robust_list resumed>) = 0 [pid 12656] <... write resumed>) = 4 [pid 12655] <... close resumed>) = 0 [pid 12657] chdir("./1549" [pid 12656] close(3 [pid 12655] symlink("/dev/binderfs", "./binderfs" [pid 12657] <... chdir resumed>) = 0 [pid 12656] <... close resumed>) = 0 [pid 12657] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12656] symlink("/dev/binderfs", "./binderfs" [pid 12655] <... symlink resumed>) = 0 [pid 12657] <... prctl resumed>) = 0 [pid 12656] <... symlink resumed>) = 0 [pid 12655] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12654] +++ exited with 0 +++ [pid 12653] +++ exited with 0 +++ [pid 12657] setpgid(0, 0 [pid 12656] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12655] <... bpf resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12653, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12654, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12657] <... setpgid resumed>) = 0 [pid 12656] <... bpf resumed>) = 3 [pid 12655] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] umount2("./1467", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12656] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12655] <... bpf resumed>) = 4 [pid 12657] <... openat resumed>) = 3 [pid 12656] <... bpf resumed>) = 4 [pid 12655] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12657] write(3, "1000", 4 [pid 12656] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] openat(AT_FDCWD, "./1467", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12655] <... bpf resumed>) = 5 [pid 12657] <... write resumed>) = 4 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12656] <... bpf resumed>) = 5 [pid 12657] close(3 [pid 5066] getdents64(3, [pid 12657] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12657] symlink("/dev/binderfs", "./binderfs" [pid 12656] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12655] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] umount2("./1512", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1467/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12657] <... symlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1467/binderfs", [pid 5068] openat(AT_FDCWD, "./1512", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12657] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 5066] unlink("./1467/binderfs" [pid 12657] <... bpf resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5066] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12657] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 5066] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12657] <... bpf resumed>) = 4 [pid 5068] umount2("./1512/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 12657] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] newfstatat(AT_FDCWD, "./1512/binderfs", [pid 5066] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1512/binderfs" [pid 5066] rmdir("./1467" [pid 12657] <... bpf resumed>) = 5 [pid 12657] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12657] <... bpf resumed>) = 6 [pid 12656] <... bpf resumed>) = 6 [pid 12655] <... bpf resumed>) = 6 [pid 12657] exit_group(0 [pid 12656] exit_group(0 [pid 5066] mkdir("./1468", 0777 [pid 12655] exit_group(0 [pid 12657] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 12656] <... exit_group resumed>) = ? [pid 12655] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12657] +++ exited with 0 +++ [pid 5068] close(3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1512"./strace-static-x86_64: Process 12658 attached [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12657, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12658] set_robust_list(0x5555686ec660, 24 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12658 [pid 12658] <... set_robust_list resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12658] chdir("./1468") = 0 [pid 5068] mkdir("./1513", 0777 [pid 12658] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12655] +++ exited with 0 +++ [pid 5071] umount2("./1549", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12655, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12658] <... prctl resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12658] setpgid(0, 0 [pid 12656] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1549", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12656, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12658] <... setpgid resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] umount2("./1535", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(3, "", [pid 5069] openat(AT_FDCWD, "./1535", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... restart_syscall resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1494", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12659 attached [pid 12658] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12659 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12659] set_robust_list(0x5555686ec660, 24 [pid 12658] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] openat(AT_FDCWD, "./1494", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12659] <... set_robust_list resumed>) = 0 [pid 12658] <... write resumed>) = 4 [pid 5069] umount2("./1535/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5071] umount2("./1549/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12659] chdir("./1513" [pid 5067] newfstatat(3, "", [pid 12659] <... chdir resumed>) = 0 [pid 12658] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12659] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12658] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1549/binderfs", [pid 5069] newfstatat(AT_FDCWD, "./1535/binderfs", [pid 5067] getdents64(3, [pid 12659] <... prctl resumed>) = 0 [pid 12658] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12659] setpgid(0, 0 [pid 12658] <... symlink resumed>) = 0 [pid 5071] unlink("./1549/binderfs" [pid 5069] unlink("./1535/binderfs" [pid 5067] umount2("./1494/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12659] <... setpgid resumed>) = 0 [pid 12658] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12658] <... bpf resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 12659] write(3, "1000", 4 [pid 12658] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1494/binderfs", [pid 12659] <... write resumed>) = 4 [pid 12658] <... bpf resumed>) = 4 [pid 5071] close(3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 5069] close(3 [pid 5071] rmdir("./1549" [pid 5069] <... close resumed>) = 0 [pid 12659] close(3 [pid 12658] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] rmdir("./1535" [pid 5067] unlink("./1494/binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 12659] <... close resumed>) = 0 [pid 5071] mkdir("./1550", 0777 [pid 12659] symlink("/dev/binderfs", "./binderfs" [pid 12658] <... bpf resumed>) = 5 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12659] <... symlink resumed>) = 0 [pid 12658] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] mkdir("./1536", 0777 [pid 5067] getdents64(3, [pid 12659] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12658] <... bpf resumed>) = 6 [pid 12659] <... bpf resumed>) = 3 [pid 5067] close(3 [pid 12659] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... close resumed>) = 0 [pid 12658] exit_group(0./strace-static-x86_64: Process 12660 attached [pid 12659] <... bpf resumed>) = 4 [pid 12658] <... exit_group resumed>) = ? [pid 5069] <... mkdir resumed>) = 0 [pid 5067] rmdir("./1494" [pid 12660] set_robust_list(0x5555686ec660, 24 [pid 12659] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12660] <... set_robust_list resumed>) = 0 [pid 12658] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12660 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 12659] <... bpf resumed>) = 5 ./strace-static-x86_64: Process 12661 attached [pid 12660] chdir("./1550" [pid 12659] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] mkdir("./1495", 0777 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12658, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12661] set_robust_list(0x5555686ec660, 24 [pid 12660] <... chdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12661 [pid 12661] <... set_robust_list resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12661] chdir("./1536" [pid 12660] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12659] <... bpf resumed>) = 6 [pid 12661] <... chdir resumed>) = 0 [pid 12661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12661] setpgid(0, 0 [pid 12660] <... prctl resumed>) = 0 [pid 12661] <... setpgid resumed>) = 0 [pid 12660] setpgid(0, 0 [pid 12661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12659] exit_group(0 [pid 12660] <... setpgid resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1468", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12661] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12661] write(3, "1000", 4) = 4 [pid 12661] close(3./strace-static-x86_64: Process 12662 attached [pid 12660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12659] <... exit_group resumed>) = ? [pid 5066] openat(AT_FDCWD, "./1468", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12662] set_robust_list(0x5555686ec660, 24) = 0 [pid 12661] <... close resumed>) = 0 [pid 12660] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12662 [pid 5066] <... openat resumed>) = 3 [pid 12662] chdir("./1495" [pid 12661] symlink("/dev/binderfs", "./binderfs" [pid 12660] write(3, "1000", 4 [pid 5066] newfstatat(3, "", [pid 12662] <... chdir resumed>) = 0 [pid 12660] <... write resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12662] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12660] close(3 [pid 12662] <... prctl resumed>) = 0 [pid 12660] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12662] setpgid(0, 0 [pid 12661] <... symlink resumed>) = 0 [pid 12660] symlink("/dev/binderfs", "./binderfs" [pid 12662] <... setpgid resumed>) = 0 [pid 12661] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12660] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12661] <... bpf resumed>) = 3 [pid 12662] <... openat resumed>) = 3 [pid 12661] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12660] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12659] +++ exited with 0 +++ [pid 5066] umount2("./1468/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12662] write(3, "1000", 4 [pid 12661] <... bpf resumed>) = 4 [pid 12660] <... bpf resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12659, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12662] <... write resumed>) = 4 [pid 12661] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12660] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12662] close(3 [pid 12661] <... bpf resumed>) = 5 [pid 12660] <... bpf resumed>) = 4 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1468/binderfs", [pid 12660] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12662] <... close resumed>) = 0 [pid 12661] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12662] symlink("/dev/binderfs", "./binderfs" [pid 5066] unlink("./1468/binderfs" [pid 12662] <... symlink resumed>) = 0 [pid 12661] <... bpf resumed>) = 6 [pid 12660] <... bpf resumed>) = 5 [pid 5068] umount2("./1513", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 12660] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 12662] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12661] exit_group(0 [pid 12660] <... bpf resumed>) = 6 [pid 5068] openat(AT_FDCWD, "./1513", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 12662] <... bpf resumed>) = 3 [pid 12661] <... exit_group resumed>) = ? [pid 12660] exit_group(0 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1468" [pid 12660] <... exit_group resumed>) = ? [pid 5068] newfstatat(3, "", [pid 5066] <... rmdir resumed>) = 0 [pid 12662] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1469", 0777 [pid 12662] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12662] <... bpf resumed>) = 5 [pid 12662] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12663 attached [pid 12661] +++ exited with 0 +++ [pid 12660] +++ exited with 0 +++ [pid 5068] umount2("./1513/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12663] set_robust_list(0x5555686ec660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12660, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12661, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12663] <... set_robust_list resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1513/binderfs", [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12663 [pid 12663] chdir("./1469" [pid 5071] umount2("./1550", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1536", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12663] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] unlink("./1513/binderfs" [pid 12663] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] openat(AT_FDCWD, "./1550", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./1536", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12663] <... prctl resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12663] setpgid(0, 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 12663] <... setpgid resumed>) = 0 [pid 12662] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 5071] newfstatat(3, "", [pid 12663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12662] exit_group(0 [pid 5069] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 12663] <... openat resumed>) = 3 [pid 12662] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... close resumed>) = 0 [pid 12663] write(3, "1000", 4 [pid 5069] getdents64(3, [pid 12663] <... write resumed>) = 4 [pid 12662] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] rmdir("./1513" [pid 12663] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1536/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 12663] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12662, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] umount2("./1550/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12663] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./1550/binderfs", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./1514", 0777 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12663] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1536/binderfs", [pid 5068] <... mkdir resumed>) = 0 [pid 5071] unlink("./1550/binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12663] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5069] unlink("./1536/binderfs" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./1495", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12663] <... bpf resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5069] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1495", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5071] close(3) = 0 [pid 5067] newfstatat(3, "", [pid 5071] rmdir("./1550" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12663] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12664 attached [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12664 [pid 5067] getdents64(3, [pid 12663] <... bpf resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1495/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1495/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1495/binderfs" [pid 12664] set_robust_list(0x5555686ec660, 24 [pid 12663] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 12664] <... set_robust_list resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12664] chdir("./1514" [pid 12663] <... bpf resumed>) = 5 [pid 5071] mkdir("./1551", 0777 [pid 5067] getdents64(3, [pid 5069] rmdir("./1536" [pid 12664] <... chdir resumed>) = 0 [pid 12663] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12664] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12664] <... prctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] mkdir("./1537", 0777 [pid 12663] <... bpf resumed>) = 6 [pid 5067] close(3 [pid 12663] exit_group(0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1495"./strace-static-x86_64: Process 12665 attached [pid 12664] setpgid(0, 0 [pid 12663] <... exit_group resumed>) = ? [pid 5067] <... rmdir resumed>) = 0 [pid 12664] <... setpgid resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 12664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12665] set_robust_list(0x5555686ec660, 24 [pid 12663] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12665 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1496", 0777) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12666 attached [pid 12665] <... set_robust_list resumed>) = 0 [pid 12664] <... openat resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12663, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- ./strace-static-x86_64: Process 12667 attached [pid 12666] set_robust_list(0x5555686ec660, 24 [pid 12665] chdir("./1551" [pid 12664] write(3, "1000", 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12666 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12667 [pid 12666] <... set_robust_list resumed>) = 0 [pid 12665] <... chdir resumed>) = 0 [pid 12666] chdir("./1537" [pid 12665] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12667] set_robust_list(0x5555686ec660, 24 [pid 12664] <... write resumed>) = 4 [pid 12667] <... set_robust_list resumed>) = 0 [pid 12666] <... chdir resumed>) = 0 [pid 12665] <... prctl resumed>) = 0 [pid 12664] close(3 [pid 12667] chdir("./1496" [pid 12666] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12665] setpgid(0, 0 [pid 12664] <... close resumed>) = 0 [pid 12667] <... chdir resumed>) = 0 [pid 12666] <... prctl resumed>) = 0 [pid 12665] <... setpgid resumed>) = 0 [pid 12664] symlink("/dev/binderfs", "./binderfs" [pid 12666] setpgid(0, 0 [pid 12665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] umount2("./1469", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12667] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12666] <... setpgid resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12667] <... prctl resumed>) = 0 [pid 12666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12665] <... openat resumed>) = 3 [pid 12664] <... symlink resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1469", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12667] setpgid(0, 0 [pid 12666] <... openat resumed>) = 3 [pid 12664] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... openat resumed>) = 3 [pid 12667] <... setpgid resumed>) = 0 [pid 12666] write(3, "1000", 4 [pid 12665] write(3, "1000", 4 [pid 5066] newfstatat(3, "", [pid 12667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12666] <... write resumed>) = 4 [pid 12665] <... write resumed>) = 4 [pid 12664] <... bpf resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12666] close(3 [pid 12665] close(3 [pid 12664] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, [pid 12667] <... openat resumed>) = 3 [pid 12666] <... close resumed>) = 0 [pid 12665] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12666] symlink("/dev/binderfs", "./binderfs" [pid 12665] symlink("/dev/binderfs", "./binderfs" [pid 12667] write(3, "1000", 4 [pid 12666] <... symlink resumed>) = 0 [pid 12664] <... bpf resumed>) = 4 [pid 5066] umount2("./1469/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12667] <... write resumed>) = 4 [pid 12666] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12665] <... symlink resumed>) = 0 [pid 12664] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12667] close(3 [pid 12666] <... bpf resumed>) = 3 [pid 12665] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12667] <... close resumed>) = 0 [pid 12666] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12665] <... bpf resumed>) = 3 [pid 12664] <... bpf resumed>) = 5 [pid 12667] symlink("/dev/binderfs", "./binderfs" [pid 12666] <... bpf resumed>) = 4 [pid 12665] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(AT_FDCWD, "./1469/binderfs", [pid 12667] <... symlink resumed>) = 0 [pid 12666] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12664] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12667] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12665] <... bpf resumed>) = 4 [pid 12666] <... bpf resumed>) = 5 [pid 5066] unlink("./1469/binderfs" [pid 12667] <... bpf resumed>) = 3 [pid 12666] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12665] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12664] <... bpf resumed>) = 6 [pid 5066] <... unlink resumed>) = 0 [pid 12667] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12666] <... bpf resumed>) = 6 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12665] <... bpf resumed>) = 5 [pid 5066] close(3 [pid 12667] <... bpf resumed>) = 4 [pid 12666] exit_group(0 [pid 12665] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12664] exit_group(0 [pid 12667] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12666] <... exit_group resumed>) = ? [pid 12665] <... bpf resumed>) = 6 [pid 12664] <... exit_group resumed>) = ? [pid 5066] <... close resumed>) = 0 [pid 12667] <... bpf resumed>) = 5 [pid 5066] rmdir("./1469" [pid 12666] +++ exited with 0 +++ [pid 12667] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12665] exit_group(0 [pid 5066] <... rmdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12666, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5069] umount2("./1537", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1537", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12667] <... bpf resumed>) = 6 [pid 12665] <... exit_group resumed>) = ? [pid 12664] +++ exited with 0 +++ [pid 5066] mkdir("./1470", 0777 [pid 12667] exit_group(0 [pid 5069] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12664, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... mkdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1537/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12667] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1537/binderfs", ./strace-static-x86_64: Process 12668 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./1514", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12668] set_robust_list(0x5555686ec660, 24 [pid 5069] unlink("./1537/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12668 [pid 12668] <... set_robust_list resumed>) = 0 [pid 12668] chdir("./1470" [pid 5069] <... unlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1514", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12668] <... chdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5068] newfstatat(3, "", [pid 12668] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12668] <... prctl resumed>) = 0 [pid 12668] setpgid(0, 0 [pid 5069] rmdir("./1537" [pid 5068] getdents64(3, [pid 12668] <... setpgid resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... rmdir resumed>) = 0 [pid 12668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] mkdir("./1538", 0777 [pid 5068] umount2("./1514/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12668] <... openat resumed>) = 3 [pid 12668] write(3, "1000", 4) = 4 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12668] close(3) = 0 [pid 12668] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(AT_FDCWD, "./1514/binderfs", [pid 12668] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12665] +++ exited with 0 +++ [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12665, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12668] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12667] +++ exited with 0 +++ [pid 5068] unlink("./1514/binderfs"./strace-static-x86_64: Process 12669 attached [pid 12669] set_robust_list(0x5555686ec660, 24 [pid 12668] <... bpf resumed>) = 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12669 [pid 5068] <... unlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12667, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12669] <... set_robust_list resumed>) = 0 [pid 12668] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1551", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 12669] chdir("./1538" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12669] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 5067] umount2("./1496", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12669] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12668] <... bpf resumed>) = 5 [pid 5071] openat(AT_FDCWD, "./1551", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12668] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12669] <... prctl resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 12669] setpgid(0, 0 [pid 12668] <... bpf resumed>) = 6 [pid 5068] rmdir("./1514" [pid 5067] openat(AT_FDCWD, "./1496", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12669] <... setpgid resumed>) = 0 [pid 12668] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12668] <... exit_group resumed>) = ? [pid 5071] umount2("./1551/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./1515", 0777 [pid 5067] newfstatat(3, "", [pid 12669] <... openat resumed>) = 3 [pid 12669] write(3, "1000", 4) = 4 [pid 12668] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12669] close(3 [pid 5071] newfstatat(AT_FDCWD, "./1551/binderfs", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12668, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12669] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12669] symlink("/dev/binderfs", "./binderfs" [pid 5071] unlink("./1551/binderfs" [pid 5067] umount2("./1496/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12670 attached ) = -1 EINVAL (Invalid argument) [pid 12670] set_robust_list(0x5555686ec660, 24 [pid 12669] <... symlink resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12670 [pid 12670] <... set_robust_list resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1496/binderfs", [pid 5066] umount2("./1470", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12669] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12669] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./1496/binderfs" [pid 5066] openat(AT_FDCWD, "./1470", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12669] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 5071] rmdir("./1551" [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12670] chdir("./1515" [pid 5066] getdents64(3, [pid 12670] <... chdir resumed>) = 0 [pid 12669] <... bpf resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12670] setpgid(0, 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12670] <... setpgid resumed>) = 0 [pid 12670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12669] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1552", 0777 [pid 5067] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12670] <... openat resumed>) = 3 [pid 12670] write(3, "1000", 4 [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./1470/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1496" [pid 12670] <... write resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12670] close(3) = 0 [pid 12670] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1470/binderfs", [pid 12670] <... symlink resumed>) = 0 [pid 12669] <... bpf resumed>) = 5 [pid 5071] <... mkdir resumed>) = 0 [pid 12670] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12669] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1497", 0777 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12670] <... bpf resumed>) = 3 [pid 5066] unlink("./1470/binderfs" [pid 12669] <... bpf resumed>) = 6 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12671 attached [pid 12670] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12669] exit_group(0 [pid 5067] <... mkdir resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12671 [pid 12671] set_robust_list(0x5555686ec660, 24 [pid 12670] <... bpf resumed>) = 4 [pid 12669] <... exit_group resumed>) = ? [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12671] <... set_robust_list resumed>) = 0 [pid 12670] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12671] chdir("./1552" [pid 5066] close(3) = 0 [pid 12670] <... bpf resumed>) = 5 [pid 5066] rmdir("./1470") = 0 [pid 5066] mkdir("./1471", 0777 [pid 12669] +++ exited with 0 +++ [pid 5066] <... mkdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12669, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12671] <... chdir resumed>) = 0 [pid 12671] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12670] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12672 [pid 12671] <... prctl resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12672 attached [pid 12672] set_robust_list(0x5555686ec660, 24) = 0 [pid 12671] setpgid(0, 0./strace-static-x86_64: Process 12673 attached [pid 12672] chdir("./1497" [pid 12671] <... setpgid resumed>) = 0 [pid 12673] set_robust_list(0x5555686ec660, 24 [pid 12671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12672] <... chdir resumed>) = 0 [pid 12672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12672] setpgid(0, 0) = 0 [pid 12673] <... set_robust_list resumed>) = 0 [pid 12671] <... openat resumed>) = 3 [pid 12670] <... bpf resumed>) = 6 [pid 5069] umount2("./1538", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12673 [pid 12673] chdir("./1471" [pid 12672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12671] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12671] <... write resumed>) = 4 [pid 12670] exit_group(0 [pid 5069] openat(AT_FDCWD, "./1538", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12673] <... chdir resumed>) = 0 [pid 12672] <... openat resumed>) = 3 [pid 12671] close(3 [pid 12672] write(3, "1000", 4 [pid 5069] <... openat resumed>) = 3 [pid 12671] <... close resumed>) = 0 [pid 12672] <... write resumed>) = 4 [pid 12673] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12670] <... exit_group resumed>) = ? [pid 12673] <... prctl resumed>) = 0 [pid 12672] close(3 [pid 12671] symlink("/dev/binderfs", "./binderfs" [pid 5069] newfstatat(3, "", [pid 12673] setpgid(0, 0) = 0 [pid 12672] <... close resumed>) = 0 [pid 12671] <... symlink resumed>) = 0 [pid 12672] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12672] <... symlink resumed>) = 0 [pid 12671] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12670] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 12673] <... openat resumed>) = 3 [pid 12672] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12670, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12673] write(3, "1000", 4 [pid 12671] <... bpf resumed>) = 3 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12673] <... write resumed>) = 4 [pid 12672] <... bpf resumed>) = 3 [pid 12671] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1538/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12673] close(3 [pid 12672] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... restart_syscall resumed>) = 0 [pid 12673] <... close resumed>) = 0 [pid 12671] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12673] symlink("/dev/binderfs", "./binderfs" [pid 12672] <... bpf resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1538/binderfs", [pid 12671] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12673] <... symlink resumed>) = 0 [pid 12672] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12671] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12673] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] unlink("./1538/binderfs" [pid 12671] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] umount2("./1515", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12673] <... bpf resumed>) = 3 [pid 12672] <... bpf resumed>) = 5 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12673] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12671] <... bpf resumed>) = 6 [pid 12672] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] openat(AT_FDCWD, "./1515", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12673] <... bpf resumed>) = 4 [pid 12671] exit_group(0 [pid 5069] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 12672] <... bpf resumed>) = 6 [pid 12671] <... exit_group resumed>) = ? [pid 12673] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12672] exit_group(0 [pid 5068] newfstatat(3, "", [pid 12673] <... bpf resumed>) = 5 [pid 12672] <... exit_group resumed>) = ? [pid 5069] close(3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... close resumed>) = 0 [pid 12673] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] getdents64(3, [pid 5069] rmdir("./1538") = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] mkdir("./1539", 0777 [pid 5068] umount2("./1515/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12673] <... bpf resumed>) = 6 [pid 12671] +++ exited with 0 +++ [pid 12673] exit_group(0) = ? [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12671, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1515/binderfs", [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1515/binderfs") = 0 [pid 5071] umount2("./1552", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12674 attached ) = -1 EINVAL (Invalid argument) [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12674 [pid 5068] getdents64(3, [pid 5071] openat(AT_FDCWD, "./1552", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12674] set_robust_list(0x5555686ec660, 24 [pid 12673] +++ exited with 0 +++ [pid 12672] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 3 [pid 12674] <... set_robust_list resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12674] chdir("./1539" [pid 5071] newfstatat(3, "", [pid 5068] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12673, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12672, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12674] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12674] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] rmdir("./1515" [pid 5067] <... restart_syscall resumed>) = 0 [pid 12674] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1471", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12674] setpgid(0, 0) = 0 [pid 5071] umount2("./1552/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1471", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(AT_FDCWD, "./1552/binderfs", [pid 5068] mkdir("./1516", 0777 [pid 5067] umount2("./1497", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12674] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] newfstatat(3, "", [pid 5071] unlink("./1552/binderfs" [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12674] write(3, "1000", 4) = 4 [pid 12674] close(3) = 0 [pid 12674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1497", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12674] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... openat resumed>) = 3 [pid 12674] <... bpf resumed>) = 3 [pid 12674] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12675 attached [pid 5071] close(3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12675 [pid 5067] newfstatat(3, "", [pid 5066] umount2("./1471/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12675] set_robust_list(0x5555686ec660, 24 [pid 12674] <... bpf resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12675] <... set_robust_list resumed>) = 0 [pid 5071] rmdir("./1552" [pid 12675] chdir("./1516" [pid 12674] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] getdents64(3, [pid 5066] newfstatat(AT_FDCWD, "./1471/binderfs", [pid 12675] <... chdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12675] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12674] <... bpf resumed>) = 5 [pid 5071] mkdir("./1553", 0777 [pid 5067] umount2("./1497/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./1471/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1497/binderfs", [pid 5066] getdents64(3, [pid 12675] <... prctl resumed>) = 0 [pid 12674] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12675] setpgid(0, 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12674] <... bpf resumed>) = 6 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12675] <... setpgid resumed>) = 0 [pid 5067] unlink("./1497/binderfs" [pid 5066] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1471"./strace-static-x86_64: Process 12676 attached [pid 12675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12674] exit_group(0 [pid 5067] getdents64(3, [pid 12676] set_robust_list(0x5555686ec660, 24 [pid 12675] <... openat resumed>) = 3 [pid 12674] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12676 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12676] <... set_robust_list resumed>) = 0 [pid 12675] write(3, "1000", 4 [pid 5067] close(3 [pid 12676] chdir("./1553" [pid 12675] <... write resumed>) = 4 [pid 12674] +++ exited with 0 +++ [pid 5067] <... close resumed>) = 0 [pid 12676] <... chdir resumed>) = 0 [pid 12675] close(3 [pid 5067] rmdir("./1497" [pid 5066] mkdir("./1472", 0777 [pid 12675] <... close resumed>) = 0 [pid 12675] symlink("/dev/binderfs", "./binderfs" [pid 12676] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12674, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12676] <... prctl resumed>) = 0 [pid 12675] <... symlink resumed>) = 0 [pid 5069] umount2("./1539", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12676] setpgid(0, 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./1498", 0777 [pid 12676] <... setpgid resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1539", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 12675] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12676] <... openat resumed>) = 3 [pid 12675] <... bpf resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12677 attached [pid 12676] write(3, "1000", 4 [pid 12675] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12677 ./strace-static-x86_64: Process 12678 attached [pid 12677] set_robust_list(0x5555686ec660, 24 [pid 12676] <... write resumed>) = 4 [pid 12678] set_robust_list(0x5555686ec660, 24 [pid 12677] <... set_robust_list resumed>) = 0 [pid 12676] close(3 [pid 12675] <... bpf resumed>) = 4 [pid 5069] getdents64(3, [pid 12678] <... set_robust_list resumed>) = 0 [pid 12677] chdir("./1472" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12676] <... close resumed>) = 0 [pid 12675] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12678 [pid 12678] chdir("./1498" [pid 12677] <... chdir resumed>) = 0 [pid 12676] symlink("/dev/binderfs", "./binderfs" [pid 5069] umount2("./1539/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12678] <... chdir resumed>) = 0 [pid 12677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12677] <... prctl resumed>) = 0 [pid 12676] <... symlink resumed>) = 0 [pid 12675] <... bpf resumed>) = 5 [pid 5069] newfstatat(AT_FDCWD, "./1539/binderfs", [pid 12678] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12677] setpgid(0, 0) = 0 [pid 12678] <... prctl resumed>) = 0 [pid 12677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12676] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12675] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12678] setpgid(0, 0 [pid 12677] <... openat resumed>) = 3 [pid 12676] <... bpf resumed>) = 3 [pid 12675] <... bpf resumed>) = 6 [pid 5069] unlink("./1539/binderfs" [pid 12678] <... setpgid resumed>) = 0 [pid 12677] write(3, "1000", 4 [pid 12676] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... unlink resumed>) = 0 [pid 12677] <... write resumed>) = 4 [pid 12676] <... bpf resumed>) = 4 [pid 12675] exit_group(0 [pid 12678] <... openat resumed>) = 3 [pid 12677] close(3 [pid 12676] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12675] <... exit_group resumed>) = ? [pid 5069] getdents64(3, [pid 12678] write(3, "1000", 4 [pid 12677] <... close resumed>) = 0 [pid 12677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12677] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12675] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12678] <... write resumed>) = 4 [pid 12677] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12678] close(3 [pid 12676] <... bpf resumed>) = 5 [pid 5069] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12675, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12677] <... bpf resumed>) = 4 [pid 12678] <... close resumed>) = 0 [pid 12677] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12676] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... close resumed>) = 0 [pid 5068] umount2("./1516", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12678] symlink("/dev/binderfs", "./binderfs" [pid 5069] rmdir("./1539" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12677] <... bpf resumed>) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1516", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12678] <... symlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5069] mkdir("./1540", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12678] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12677] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12678] <... bpf resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] getdents64(3, [pid 12678] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1516/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1516/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1516/binderfs" [pid 12678] <... bpf resumed>) = 4 [pid 5068] <... unlink resumed>) = 0 [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12679 attached 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12679] set_robust_list(0x5555686ec660, 24 [pid 12678] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12677] <... bpf resumed>) = 6 [pid 12676] <... bpf resumed>) = 6 [pid 5068] close(3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12679 [pid 12679] <... set_robust_list resumed>) = 0 [pid 12676] exit_group(0 [pid 5068] <... close resumed>) = 0 [pid 12679] chdir("./1540" [pid 12677] exit_group(0 [pid 12676] <... exit_group resumed>) = ? [pid 5068] rmdir("./1516" [pid 12679] <... chdir resumed>) = 0 [pid 12678] <... bpf resumed>) = 5 [pid 12677] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 12679] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12678] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12679] <... prctl resumed>) = 0 [pid 5068] mkdir("./1517", 0777 [pid 12679] setpgid(0, 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12679] <... setpgid resumed>) = 0 [pid 12679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12679] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12680 attached [pid 12679] write(3, "1000", 4 [pid 12680] set_robust_list(0x5555686ec660, 24 [pid 12679] <... write resumed>) = 4 [pid 12680] <... set_robust_list resumed>) = 0 [pid 12679] close(3 [pid 12680] chdir("./1517" [pid 12679] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12680 [pid 12680] <... chdir resumed>) = 0 [pid 12679] symlink("/dev/binderfs", "./binderfs" [pid 12680] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12679] <... symlink resumed>) = 0 [pid 12680] <... prctl resumed>) = 0 [pid 12680] setpgid(0, 0 [pid 12679] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12680] <... setpgid resumed>) = 0 [pid 12679] <... bpf resumed>) = 3 [pid 12680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12679] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12680] <... openat resumed>) = 3 [pid 12679] <... bpf resumed>) = 4 [pid 12680] write(3, "1000", 4 [pid 12679] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12680] <... write resumed>) = 4 [pid 12680] close(3) = 0 [pid 12680] symlink("/dev/binderfs", "./binderfs" [pid 12679] <... bpf resumed>) = 5 [pid 12680] <... symlink resumed>) = 0 [pid 12679] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12678] <... bpf resumed>) = 6 [pid 12676] +++ exited with 0 +++ [pid 12678] exit_group(0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12676, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12680] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12678] <... exit_group resumed>) = ? [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12680] <... bpf resumed>) = 3 [pid 5071] <... restart_syscall resumed>) = 0 [pid 12680] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1553", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12680] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12680] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] openat(AT_FDCWD, "./1553", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 12680] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12680] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1553/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1553/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12677] +++ exited with 0 +++ [pid 5071] unlink("./1553/binderfs" [pid 12679] <... bpf resumed>) = 6 [pid 12679] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12677, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12679] <... exit_group resumed>) = ? [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1553" [pid 5066] umount2("./1472", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1472", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] mkdir("./1554", 0777 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12681 attached [pid 12680] <... bpf resumed>) = 6 [pid 12678] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12681 [pid 5066] umount2("./1472/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12681] set_robust_list(0x5555686ec660, 24 [pid 12680] exit_group(0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12678, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12681] <... set_robust_list resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1472/binderfs", [pid 12681] chdir("./1554" [pid 12680] <... exit_group resumed>) = ? [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12681] <... chdir resumed>) = 0 [pid 5066] unlink("./1472/binderfs" [pid 12681] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] umount2("./1498", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12681] <... prctl resumed>) = 0 [pid 12680] +++ exited with 0 +++ [pid 12679] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12680, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12681] setpgid(0, 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12679, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] openat(AT_FDCWD, "./1498", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 12681] <... setpgid resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] newfstatat(3, "", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./1517", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1540", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] close(3 [pid 12681] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1517", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 12681] write(3, "1000", 4 [pid 5068] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1540", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] rmdir("./1472" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12681] <... write resumed>) = 4 [pid 12681] close(3) = 0 [pid 12681] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] <... openat resumed>) = 3 [pid 12681] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(3, "", [pid 5068] newfstatat(3, "", [pid 5067] umount2("./1498/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5067] newfstatat(AT_FDCWD, "./1498/binderfs", [pid 5066] mkdir("./1473", 0777 [pid 12681] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12681] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1540/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 5067] unlink("./1498/binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 12681] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... unlink resumed>) = 0 [pid 12681] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] umount2("./1517/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12681] <... bpf resumed>) = 5 [pid 5069] newfstatat(AT_FDCWD, "./1540/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12682 attached 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12682 [pid 5068] newfstatat(AT_FDCWD, "./1517/binderfs", [pid 5067] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12682] set_robust_list(0x5555686ec660, 24 [pid 12681] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] unlink("./1540/binderfs" [pid 5068] unlink("./1517/binderfs" [pid 5067] <... close resumed>) = 0 [pid 12682] <... set_robust_list resumed>) = 0 [pid 12681] <... bpf resumed>) = 6 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 12682] chdir("./1473" [pid 12681] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./1498" [pid 12682] <... chdir resumed>) = 0 [pid 5069] close(3 [pid 5068] close(3 [pid 5069] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5069] rmdir("./1540" [pid 5068] rmdir("./1517" [pid 12682] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12681] <... exit_group resumed>) = ? [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12682] <... prctl resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1518", 0777 [pid 12682] setpgid(0, 0 [pid 12681] +++ exited with 0 +++ [pid 5069] mkdir("./1541", 0777 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] mkdir("./1499", 0777 [pid 12682] <... setpgid resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12681, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12682] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12682] write(3, "1000", 4 [pid 5071] umount2("./1554", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12684 attached [pid 12682] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1554", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12683 attached [pid 12682] close(3 [pid 12683] set_robust_list(0x5555686ec660, 24 [pid 5071] <... openat resumed>) = 3 [pid 12684] set_robust_list(0x5555686ec660, 24 [pid 12682] <... close resumed>) = 0 [pid 12683] <... set_robust_list resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 12684] <... set_robust_list resumed>) = 0 [pid 12682] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12685 attached [pid 12684] chdir("./1499" [pid 12683] chdir("./1518" [pid 12682] <... symlink resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12685 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12683 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12684 [pid 12685] set_robust_list(0x5555686ec660, 24 [pid 12684] <... chdir resumed>) = 0 [pid 12683] <... chdir resumed>) = 0 [pid 12682] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 12685] <... set_robust_list resumed>) = 0 [pid 12684] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12685] chdir("./1541" [pid 12684] <... prctl resumed>) = 0 [pid 12683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12682] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12685] <... chdir resumed>) = 0 [pid 12684] setpgid(0, 0 [pid 12683] <... prctl resumed>) = 0 [pid 12682] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1554/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12685] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12684] <... setpgid resumed>) = 0 [pid 12683] setpgid(0, 0 [pid 12682] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12685] <... prctl resumed>) = 0 [pid 12683] <... setpgid resumed>) = 0 [pid 12685] setpgid(0, 0 [pid 5071] newfstatat(AT_FDCWD, "./1554/binderfs", [pid 12685] <... setpgid resumed>) = 0 [pid 12684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12682] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12683] <... openat resumed>) = 3 [pid 5071] unlink("./1554/binderfs" [pid 12685] <... openat resumed>) = 3 [pid 12684] <... openat resumed>) = 3 [pid 12683] write(3, "1000", 4 [pid 12682] <... bpf resumed>) = 5 [pid 5071] <... unlink resumed>) = 0 [pid 12685] write(3, "1000", 4 [pid 12684] write(3, "1000", 4 [pid 12683] <... write resumed>) = 4 [pid 12682] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 12685] <... write resumed>) = 4 [pid 12684] <... write resumed>) = 4 [pid 12683] close(3 [pid 12684] close(3) = 0 [pid 12683] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12685] close(3 [pid 12684] symlink("/dev/binderfs", "./binderfs" [pid 12683] symlink("/dev/binderfs", "./binderfs" [pid 12682] <... bpf resumed>) = 6 [pid 12685] <... close resumed>) = 0 [pid 5071] close(3 [pid 12685] symlink("/dev/binderfs", "./binderfs" [pid 12684] <... symlink resumed>) = 0 [pid 12683] <... symlink resumed>) = 0 [pid 12682] exit_group(0 [pid 5071] <... close resumed>) = 0 [pid 12685] <... symlink resumed>) = 0 [pid 12684] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12683] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12682] <... exit_group resumed>) = ? [pid 5071] rmdir("./1554" [pid 12685] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12684] <... bpf resumed>) = 3 [pid 12683] <... bpf resumed>) = 3 [pid 12683] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12685] <... bpf resumed>) = 3 [pid 12684] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12683] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12682] +++ exited with 0 +++ [pid 5071] <... rmdir resumed>) = 0 [pid 12685] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12684] <... bpf resumed>) = 4 [pid 12685] <... bpf resumed>) = 4 [pid 12684] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12683] <... bpf resumed>) = 5 [pid 5071] mkdir("./1555", 0777 [pid 12685] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12682, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12685] <... bpf resumed>) = 5 [pid 12683] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 12684] <... bpf resumed>) = 5 [pid 12685] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12683] <... bpf resumed>) = 6 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1473", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12684] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1473", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12685] <... bpf resumed>) = 6 [pid 12683] exit_group(0 [pid 12684] <... bpf resumed>) = 6 [pid 5066] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12686 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12686 [pid 5066] newfstatat(3, "", [pid 12686] set_robust_list(0x5555686ec660, 24 [pid 12685] exit_group(0 [pid 12684] exit_group(0 [pid 12683] <... exit_group resumed>) = ? [pid 12686] <... set_robust_list resumed>) = 0 [pid 12685] <... exit_group resumed>) = ? [pid 12684] <... exit_group resumed>) = ? [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12686] chdir("./1555") = 0 [pid 12686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12683] +++ exited with 0 +++ [pid 5066] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12683, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12686] setpgid(0, 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1473/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12686] <... setpgid resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] newfstatat(AT_FDCWD, "./1473/binderfs", [pid 12686] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12684] +++ exited with 0 +++ [pid 5068] umount2("./1518", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./1473/binderfs" [pid 12686] write(3, "1000", 4) = 4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12684, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12686] close(3 [pid 12685] +++ exited with 0 +++ [pid 12686] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12685, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12686] symlink("/dev/binderfs", "./binderfs" [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] openat(AT_FDCWD, "./1518", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1499", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... restart_syscall resumed>) = 0 [pid 5066] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12686] <... symlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1499", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] umount2("./1541", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 12686] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] close(3 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12686] <... bpf resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1541", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 5066] <... close resumed>) = 0 [pid 12686] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./1518/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] rmdir("./1473" [pid 12686] <... bpf resumed>) = 4 [pid 5069] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 12686] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] newfstatat(AT_FDCWD, "./1518/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] mkdir("./1474", 0777 [pid 5067] umount2("./1499/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5068] unlink("./1518/binderfs" [pid 12686] <... bpf resumed>) = 5 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(AT_FDCWD, "./1499/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12686] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] umount2("./1541/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1541/binderfs", [pid 5067] unlink("./1499/binderfs" [pid 12686] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] getdents64(3, [pid 5067] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12687 attached [pid 12686] exit_group(0 [pid 5069] unlink("./1541/binderfs" [pid 12687] set_robust_list(0x5555686ec660, 24 [pid 12686] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12687 [pid 5069] <... unlink resumed>) = 0 [pid 5068] close(3 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 12687] <... set_robust_list resumed>) = 0 [pid 12686] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12687] chdir("./1474" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12686, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] <... close resumed>) = 0 [pid 5068] rmdir("./1518" [pid 12687] <... chdir resumed>) = 0 [pid 5069] rmdir("./1541" [pid 5068] <... rmdir resumed>) = 0 [pid 5067] close(3 [pid 12687] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] umount2("./1555", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12687] <... prctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./1499" [pid 12687] setpgid(0, 0 [pid 5071] openat(AT_FDCWD, "./1555", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./1519", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 12687] <... setpgid resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5069] mkdir("./1542", 0777 [pid 5068] <... mkdir resumed>) = 0 [pid 12687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(3, "", [pid 5069] <... mkdir resumed>) = 0 [pid 12687] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1500", 0777 [pid 12687] write(3, "1000", 4 [pid 5071] getdents64(3, [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 12687] <... write resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1555/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12688 attached [pid 12687] close(3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12688 ./strace-static-x86_64: Process 12690 attached [pid 12688] set_robust_list(0x5555686ec660, 24 [pid 12687] <... close resumed>) = 0 ./strace-static-x86_64: Process 12689 attached [pid 12688] <... set_robust_list resumed>) = 0 [pid 12687] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./1555/binderfs", [pid 12689] set_robust_list(0x5555686ec660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12689] <... set_robust_list resumed>) = 0 [pid 12690] set_robust_list(0x5555686ec660, 24 [pid 12688] chdir("./1519" [pid 12687] <... symlink resumed>) = 0 [pid 5071] unlink("./1555/binderfs" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12689 [pid 12690] <... set_robust_list resumed>) = 0 [pid 12689] chdir("./1542" [pid 12688] <... chdir resumed>) = 0 [pid 12687] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12690 [pid 12690] chdir("./1500" [pid 12689] <... chdir resumed>) = 0 [pid 12688] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12687] <... bpf resumed>) = 3 [pid 12689] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12688] <... prctl resumed>) = 0 [pid 5071] getdents64(3, [pid 12689] <... prctl resumed>) = 0 [pid 12690] <... chdir resumed>) = 0 [pid 12689] setpgid(0, 0 [pid 12688] setpgid(0, 0 [pid 12687] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12690] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12689] <... setpgid resumed>) = 0 [pid 12688] <... setpgid resumed>) = 0 [pid 12687] <... bpf resumed>) = 4 [pid 5071] close(3 [pid 12690] <... prctl resumed>) = 0 [pid 12690] setpgid(0, 0 [pid 12689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12687] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... close resumed>) = 0 [pid 12690] <... setpgid resumed>) = 0 [pid 12689] <... openat resumed>) = 3 [pid 12688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] rmdir("./1555" [pid 12690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12687] <... bpf resumed>) = 5 [pid 12690] <... openat resumed>) = 3 [pid 12689] write(3, "1000", 4 [pid 12688] <... openat resumed>) = 3 [pid 12689] <... write resumed>) = 4 [pid 12688] write(3, "1000", 4 [pid 5071] <... rmdir resumed>) = 0 [pid 12689] close(3 [pid 12688] <... write resumed>) = 4 [pid 5071] mkdir("./1556", 0777 [pid 12689] <... close resumed>) = 0 [pid 12688] close(3 [pid 12689] symlink("/dev/binderfs", "./binderfs" [pid 12688] <... close resumed>) = 0 [pid 12690] write(3, "1000", 4 [pid 12687] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12690] <... write resumed>) = 4 [pid 12687] <... bpf resumed>) = 6 [pid 12690] close(3 [pid 12688] symlink("/dev/binderfs", "./binderfs" [pid 12687] exit_group(0 [pid 12690] <... close resumed>) = 0 [pid 12689] <... symlink resumed>) = 0 [pid 12687] <... exit_group resumed>) = ? [pid 12690] symlink("/dev/binderfs", "./binderfs" [pid 12689] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12688] <... symlink resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12690] <... symlink resumed>) = 0 [pid 12689] <... bpf resumed>) = 3 [pid 12688] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12687] +++ exited with 0 +++ [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12690] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12689] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12690] <... bpf resumed>) = 3 [pid 12690] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12687, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12688] <... bpf resumed>) = 3 [pid 12690] <... bpf resumed>) = 4 [pid 12689] <... bpf resumed>) = 4 [pid 12688] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12691 attached [pid 12690] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12689] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] umount2("./1474", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12691] set_robust_list(0x5555686ec660, 24 [pid 12690] <... bpf resumed>) = 5 [pid 12689] <... bpf resumed>) = 5 [pid 12688] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12691 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12690] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12691] <... set_robust_list resumed>) = 0 [pid 12688] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12691] chdir("./1556" [pid 12689] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] openat(AT_FDCWD, "./1474", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12691] <... chdir resumed>) = 0 [pid 12690] exit_group(0 [pid 12689] <... bpf resumed>) = 6 [pid 5066] <... openat resumed>) = 3 [pid 12691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12690] <... exit_group resumed>) = ? [pid 5066] newfstatat(3, "", [pid 12691] <... prctl resumed>) = 0 [pid 12689] exit_group(0 [pid 12688] <... bpf resumed>) = 5 [pid 12691] setpgid(0, 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12689] <... exit_group resumed>) = ? [pid 12691] <... setpgid resumed>) = 0 [pid 12688] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] getdents64(3, [pid 12691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12690] +++ exited with 0 +++ [pid 12688] <... bpf resumed>) = 6 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12691] <... openat resumed>) = 3 [pid 12688] exit_group(0 [pid 5066] umount2("./1474/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12690, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1500", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1474/binderfs", [pid 12691] write(3, "1000", 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12691] <... write resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./1500", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12691] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5066] unlink("./1474/binderfs" [pid 12691] <... close resumed>) = 0 [pid 12688] <... exit_group resumed>) = ? [pid 12691] symlink("/dev/binderfs", "./binderfs" [pid 5067] newfstatat(3, "", [pid 5066] <... unlink resumed>) = 0 [pid 12691] <... symlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12691] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12691] <... bpf resumed>) = 3 [pid 12691] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] close(3 [pid 12691] <... bpf resumed>) = 4 [pid 5067] umount2("./1500/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1500/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12691] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] rmdir("./1474" [pid 5067] unlink("./1500/binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12689] +++ exited with 0 +++ [pid 5066] mkdir("./1475", 0777 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12689, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12691] <... bpf resumed>) = 5 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12691] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] close(3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12688] +++ exited with 0 +++ [pid 5069] umount2("./1542", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1500" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12692 attached [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12688, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... rmdir resumed>) = 0 [pid 12692] set_robust_list(0x5555686ec660, 24 [pid 5069] openat(AT_FDCWD, "./1542", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] mkdir("./1501", 0777 [pid 12692] <... set_robust_list resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12692 [pid 12692] chdir("./1475" [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12692] <... chdir resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 12692] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12692] <... prctl resumed>) = 0 [pid 5069] getdents64(3, [pid 12692] setpgid(0, 0 [pid 5068] umount2("./1519", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12693 attached [pid 12692] <... setpgid resumed>) = 0 [pid 12691] <... bpf resumed>) = 6 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12693 [pid 12693] set_robust_list(0x5555686ec660, 24 [pid 12692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12693] <... set_robust_list resumed>) = 0 [pid 12693] chdir("./1501" [pid 12692] <... openat resumed>) = 3 [pid 12691] exit_group(0 [pid 5069] umount2("./1542/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./1519", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12693] <... chdir resumed>) = 0 [pid 12693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12691] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 12693] <... prctl resumed>) = 0 [pid 12692] write(3, "1000", 4 [pid 5069] newfstatat(AT_FDCWD, "./1542/binderfs", [pid 5068] newfstatat(3, "", [pid 12693] setpgid(0, 0 [pid 12692] <... write resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12693] <... setpgid resumed>) = 0 [pid 12692] close(3 [pid 12691] +++ exited with 0 +++ [pid 5069] unlink("./1542/binderfs" [pid 12692] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12691, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 12692] symlink("/dev/binderfs", "./binderfs" [pid 12693] <... openat resumed>) = 3 [pid 12693] write(3, "1000", 4) = 4 [pid 12693] close(3) = 0 [pid 12693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12693] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12692] <... symlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] umount2("./1519/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1556", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12693] <... bpf resumed>) = 3 [pid 12692] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1519/binderfs", [pid 12693] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12692] <... bpf resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1556", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] close(3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12692] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12693] <... bpf resumed>) = 4 [pid 12693] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 5068] unlink("./1519/binderfs" [pid 12692] <... bpf resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 12692] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12693] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12693] exit_group(0) = ? [pid 12692] <... bpf resumed>) = 5 [pid 5071] getdents64(3, [pid 5069] rmdir("./1542" [pid 5068] <... unlink resumed>) = 0 [pid 12693] +++ exited with 0 +++ [pid 12692] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5071] umount2("./1556/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] mkdir("./1543", 0777 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1556/binderfs", [pid 5069] <... mkdir resumed>) = 0 [pid 5068] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12693, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... close resumed>) = 0 [pid 5071] unlink("./1556/binderfs" [pid 5068] rmdir("./1519" [pid 5067] umount2("./1501", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1501", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", ./strace-static-x86_64: Process 12694 attached [pid 12692] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 5068] mkdir("./1520", 0777 [pid 12694] set_robust_list(0x5555686ec660, 24 [pid 12692] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12694 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12694] <... set_robust_list resumed>) = 0 [pid 5071] close(3 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12694] chdir("./1543" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12694] <... chdir resumed>) = 0 [pid 12692] <... exit_group resumed>) = ? [pid 5071] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] umount2("./1501/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1501/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1501/binderfs"./strace-static-x86_64: Process 12695 attached [pid 12694] <... prctl resumed>) = 0 [pid 12692] +++ exited with 0 +++ [pid 5071] rmdir("./1556" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12695 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12692, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12695] set_robust_list(0x5555686ec660, 24 [pid 5067] <... unlink resumed>) = 0 [pid 12695] <... set_robust_list resumed>) = 0 [pid 12694] setpgid(0, 0 [pid 12695] chdir("./1520") = 0 [pid 12695] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12694] <... setpgid resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12695] <... prctl resumed>) = 0 [pid 12694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] mkdir("./1557", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1475", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12695] setpgid(0, 0 [pid 12694] <... openat resumed>) = 3 [pid 12694] write(3, "1000", 4 [pid 5067] close(3 [pid 12694] <... write resumed>) = 4 [pid 12695] <... setpgid resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12694] close(3) = 0 [pid 5067] <... close resumed>) = 0 [pid 12695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12694] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... mkdir resumed>) = 0 [pid 5067] rmdir("./1501" [pid 5066] openat(AT_FDCWD, "./1475", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12695] <... openat resumed>) = 3 [pid 12694] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12695] write(3, "1000", 4 [pid 12694] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] mkdir("./1502", 0777 [pid 5066] newfstatat(3, "", ./strace-static-x86_64: Process 12696 attached [pid 12695] <... write resumed>) = 4 [pid 12694] <... bpf resumed>) = 3 [pid 12696] set_robust_list(0x5555686ec660, 24 [pid 12695] close(3 [pid 12694] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12696 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12696] <... set_robust_list resumed>) = 0 [pid 12695] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12694] <... bpf resumed>) = 4 [pid 12695] symlink("/dev/binderfs", "./binderfs" [pid 5066] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12696] chdir("./1557" [pid 12695] <... symlink resumed>) = 0 [pid 12694] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12696] <... chdir resumed>) = 0 [pid 12695] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12696] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] umount2("./1475/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12696] <... prctl resumed>) = 0 [pid 12695] <... bpf resumed>) = 3 ./strace-static-x86_64: Process 12697 attached [pid 12696] setpgid(0, 0 [pid 12695] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12694] <... bpf resumed>) = 5 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12697] set_robust_list(0x5555686ec660, 24 [pid 12696] <... setpgid resumed>) = 0 [pid 12695] <... bpf resumed>) = 4 [pid 5066] newfstatat(AT_FDCWD, "./1475/binderfs", [pid 12696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12697] <... set_robust_list resumed>) = 0 [pid 12694] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12697 [pid 12697] chdir("./1502" [pid 12696] <... openat resumed>) = 3 [pid 12695] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12694] <... bpf resumed>) = 6 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12697] <... chdir resumed>) = 0 [pid 12696] write(3, "1000", 4 [pid 12694] exit_group(0 [pid 12696] <... write resumed>) = 4 [pid 12696] close(3 [pid 12695] <... bpf resumed>) = 5 [pid 12697] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12694] <... exit_group resumed>) = ? [pid 5066] unlink("./1475/binderfs" [pid 12697] <... prctl resumed>) = 0 [pid 12696] <... close resumed>) = 0 [pid 12695] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... unlink resumed>) = 0 [pid 12697] setpgid(0, 0 [pid 12696] symlink("/dev/binderfs", "./binderfs" [pid 12697] <... setpgid resumed>) = 0 [pid 12695] <... bpf resumed>) = 6 [pid 5066] getdents64(3, [pid 12697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12696] <... symlink resumed>) = 0 [pid 12697] <... openat resumed>) = 3 [pid 12695] exit_group(0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 12697] write(3, "1000", 4 [pid 5066] rmdir("./1475" [pid 12697] <... write resumed>) = 4 [pid 12696] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12695] <... exit_group resumed>) = ? [pid 5066] <... rmdir resumed>) = 0 [pid 12697] close(3 [pid 12696] <... bpf resumed>) = 3 [pid 12697] <... close resumed>) = 0 [pid 12696] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] mkdir("./1476", 0777 [pid 12697] symlink("/dev/binderfs", "./binderfs" [pid 12696] <... bpf resumed>) = 4 [pid 5066] <... mkdir resumed>) = 0 [pid 12697] <... symlink resumed>) = 0 [pid 12696] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12697] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12696] <... bpf resumed>) = 5 [pid 12697] <... bpf resumed>) = 3 [pid 12697] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12698 attached ) = 4 [pid 12696] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12698 [pid 12698] set_robust_list(0x5555686ec660, 24 [pid 12697] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12698] <... set_robust_list resumed>) = 0 [pid 12698] chdir("./1476" [pid 12694] +++ exited with 0 +++ [pid 12698] <... chdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12694, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12698] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12697] <... bpf resumed>) = 5 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12698] <... prctl resumed>) = 0 [pid 12695] +++ exited with 0 +++ [pid 5069] <... restart_syscall resumed>) = 0 [pid 12698] setpgid(0, 0) = 0 [pid 12697] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12695, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1543", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1543", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12698] <... openat resumed>) = 3 [pid 5069] getdents64(3, [pid 12698] write(3, "1000", 4) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1520", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12698] close(3 [pid 5069] umount2("./1543/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1543/binderfs", [pid 12698] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] openat(AT_FDCWD, "./1520", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12698] symlink("/dev/binderfs", "./binderfs" [pid 5069] unlink("./1543/binderfs" [pid 5068] <... openat resumed>) = 3 [pid 12698] <... symlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./1543" [pid 12698] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 5069] mkdir("./1544", 0777 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12698] <... bpf resumed>) = 3 [pid 12697] <... bpf resumed>) = 6 [pid 12696] <... bpf resumed>) = 6 [pid 12698] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12697] exit_group(0 [pid 12696] exit_group(0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] umount2("./1520/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12697] <... exit_group resumed>) = ? [pid 12698] <... bpf resumed>) = 4 [pid 12696] <... exit_group resumed>) = ? [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12698] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12697] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12697, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 12699 attached [pid 12696] +++ exited with 0 +++ [pid 5067] <... restart_syscall resumed>) = 0 [pid 12699] set_robust_list(0x5555686ec660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12696, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12699] <... set_robust_list resumed>) = 0 [pid 12698] <... bpf resumed>) = 5 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] newfstatat(AT_FDCWD, "./1520/binderfs", [pid 12699] chdir("./1544" [pid 12698] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12699 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12699] <... chdir resumed>) = 0 [pid 5068] unlink("./1520/binderfs" [pid 5067] umount2("./1502", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12699] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12699] <... prctl resumed>) = 0 [pid 5071] umount2("./1557", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1502", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12699] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5067] <... openat resumed>) = 3 [pid 12699] <... setpgid resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1557", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(3, "", [pid 5068] close(3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12699] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5068] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] rmdir("./1520" [pid 12699] write(3, "1000", 4 [pid 5071] getdents64(3, [pid 5068] <... rmdir resumed>) = 0 [pid 12699] <... write resumed>) = 4 [pid 12698] <... bpf resumed>) = 6 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12699] close(3 [pid 5067] umount2("./1502/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12699] <... close resumed>) = 0 [pid 12699] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12698] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] mkdir("./1521", 0777 [pid 5067] newfstatat(AT_FDCWD, "./1502/binderfs", [pid 12699] <... symlink resumed>) = 0 [pid 12698] <... exit_group resumed>) = ? [pid 5071] umount2("./1557/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 12699] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12698] +++ exited with 0 +++ [pid 12699] <... bpf resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./1557/binderfs", [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12699] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1502/binderfs" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12698, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12700 attached [pid 5071] unlink("./1557/binderfs" [pid 12699] <... bpf resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12700 [pid 5067] <... unlink resumed>) = 0 [pid 12700] set_robust_list(0x5555686ec660, 24 [pid 5067] getdents64(3, [pid 12699] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12700] <... set_robust_list resumed>) = 0 [pid 5071] getdents64(3, [pid 12700] chdir("./1521" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12700] <... chdir resumed>) = 0 [pid 12699] <... bpf resumed>) = 5 [pid 5071] close(3 [pid 5067] close(3 [pid 12700] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12699] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12700] <... prctl resumed>) = 0 [pid 5071] rmdir("./1557" [pid 5067] rmdir("./1502" [pid 5066] umount2("./1476", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12700] setpgid(0, 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12700] <... setpgid resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1476", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] mkdir("./1558", 0777 [pid 5067] mkdir("./1503", 0777 [pid 5066] <... openat resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12700] <... openat resumed>) = 3 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12701 attached ./strace-static-x86_64: Process 12702 attached [pid 12700] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12701] set_robust_list(0x5555686ec660, 24 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12702 [pid 12702] set_robust_list(0x5555686ec660, 24 [pid 12700] <... write resumed>) = 4 [pid 12702] <... set_robust_list resumed>) = 0 [pid 12700] close(3 [pid 12702] chdir("./1503" [pid 12700] <... close resumed>) = 0 [pid 12702] <... chdir resumed>) = 0 [pid 12700] symlink("/dev/binderfs", "./binderfs" [pid 12702] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12701] <... set_robust_list resumed>) = 0 [pid 12700] <... symlink resumed>) = 0 [pid 12699] <... bpf resumed>) = 6 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12701 [pid 5066] umount2("./1476/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12702] <... prctl resumed>) = 0 [pid 12701] chdir("./1558" [pid 12700] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12702] setpgid(0, 0 [pid 12701] <... chdir resumed>) = 0 [pid 12699] exit_group(0 [pid 5066] newfstatat(AT_FDCWD, "./1476/binderfs", [pid 12702] <... setpgid resumed>) = 0 [pid 12701] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12700] <... bpf resumed>) = 3 [pid 12699] <... exit_group resumed>) = ? [pid 12702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12701] <... prctl resumed>) = 0 [pid 12700] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12702] <... openat resumed>) = 3 [pid 12701] setpgid(0, 0 [pid 12700] <... bpf resumed>) = 4 [pid 5066] unlink("./1476/binderfs" [pid 12699] +++ exited with 0 +++ [pid 12701] <... setpgid resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12699, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... unlink resumed>) = 0 [pid 12702] write(3, "1000", 4 [pid 12701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12700] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12702] <... write resumed>) = 4 [pid 5066] getdents64(3, [pid 12702] close(3 [pid 12701] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12702] <... close resumed>) = 0 [pid 12701] write(3, "1000", 4 [pid 12700] <... bpf resumed>) = 5 [pid 5069] umount2("./1544", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 12702] symlink("/dev/binderfs", "./binderfs" [pid 12701] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 12702] <... symlink resumed>) = 0 [pid 12701] close(3 [pid 12700] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] openat(AT_FDCWD, "./1544", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] rmdir("./1476" [pid 12702] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12701] <... close resumed>) = 0 [pid 12700] <... bpf resumed>) = 6 [pid 5069] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 12702] <... bpf resumed>) = 3 [pid 12701] symlink("/dev/binderfs", "./binderfs" [pid 12700] exit_group(0 [pid 12702] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12701] <... symlink resumed>) = 0 [pid 12700] <... exit_group resumed>) = ? [pid 5069] newfstatat(3, "", [pid 5066] mkdir("./1477", 0777 [pid 12702] <... bpf resumed>) = 4 [pid 12701] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12702] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12701] <... bpf resumed>) = 3 [pid 12701] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12700] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12702] <... bpf resumed>) = 5 [pid 12702] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12703 attached [pid 12701] <... bpf resumed>) = 4 [pid 5069] umount2("./1544/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12703 [pid 12703] set_robust_list(0x5555686ec660, 24 [pid 12701] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12700, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12703] <... set_robust_list resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1544/binderfs", [pid 5068] umount2("./1521", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] unlink("./1544/binderfs" [pid 12702] <... bpf resumed>) = 6 [pid 12701] <... bpf resumed>) = 5 [pid 5068] openat(AT_FDCWD, "./1521", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12703] chdir("./1477" [pid 5068] <... openat resumed>) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 12703] <... chdir resumed>) = 0 [pid 12702] exit_group(0 [pid 12701] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] newfstatat(3, "", [pid 12703] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12702] <... exit_group resumed>) = ? [pid 12701] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 12703] <... prctl resumed>) = 0 [pid 12703] setpgid(0, 0) = 0 [pid 12703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12701] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12703] write(3, "1000", 4 [pid 12701] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 5069] close(3) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12703] <... write resumed>) = 4 [pid 5069] rmdir("./1544") = 0 [pid 12703] close(3 [pid 5069] mkdir("./1545", 0777 [pid 5068] umount2("./1521/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12703] <... close resumed>) = 0 [pid 12703] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12703] <... symlink resumed>) = 0 [pid 12702] +++ exited with 0 +++ [pid 12701] +++ exited with 0 +++ [pid 5069] <... mkdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1521/binderfs", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12702, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12703] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12701, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- ./strace-static-x86_64: Process 12704 attached [pid 5068] unlink("./1521/binderfs" [pid 5067] umount2("./1503", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12703] <... bpf resumed>) = 3 [pid 5071] umount2("./1558", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12703] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1503", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12703] <... bpf resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./1558", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 12704] set_robust_list(0x5555686ec660, 24 [pid 5067] newfstatat(3, "", [pid 12704] <... set_robust_list resumed>) = 0 [pid 12703] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12704 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12704] chdir("./1545" [pid 5068] getdents64(3, [pid 12703] <... bpf resumed>) = 5 [pid 5071] newfstatat(3, "", [pid 5067] getdents64(3, [pid 12704] <... chdir resumed>) = 0 [pid 12703] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12704] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 5068] close(3 [pid 5067] umount2("./1503/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12704] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./1558/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./1521" [pid 5067] newfstatat(AT_FDCWD, "./1503/binderfs", [pid 12704] setpgid(0, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1558/binderfs", [pid 5067] unlink("./1503/binderfs" [pid 12704] <... setpgid resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5071] unlink("./1558/binderfs" [pid 12704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... unlink resumed>) = 0 [pid 5068] mkdir("./1522", 0777 [pid 5071] getdents64(3, [pid 5067] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5067] close(3 [pid 5071] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5071] rmdir("./1558" [pid 5067] rmdir("./1503" [pid 12704] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1504", 0777 [pid 5071] mkdir("./1559", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12705 attached [pid 12703] <... bpf resumed>) = 6 [pid 12705] set_robust_list(0x5555686ec660, 24 [pid 12703] exit_group(0 [pid 12704] write(3, "1000", 4) = 4 [pid 12704] close(3 [pid 12705] <... set_robust_list resumed>) = 0 [pid 12704] <... close resumed>) = 0 [pid 12703] <... exit_group resumed>) = ? [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12705] chdir("./1522" [pid 12704] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12705 ./strace-static-x86_64: Process 12706 attached [pid 12704] <... symlink resumed>) = 0 [pid 12706] set_robust_list(0x5555686ec660, 24 [pid 12704] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12706] <... set_robust_list resumed>) = 0 [pid 12704] <... bpf resumed>) = 3 ./strace-static-x86_64: Process 12707 attached [pid 12705] <... chdir resumed>) = 0 [pid 12704] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12703] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12706 [pid 12706] chdir("./1559" [pid 12707] set_robust_list(0x5555686ec660, 24 [pid 12705] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12707 [pid 12707] <... set_robust_list resumed>) = 0 [pid 12705] <... prctl resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12703, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12707] chdir("./1504" [pid 12706] <... chdir resumed>) = 0 [pid 12705] setpgid(0, 0 [pid 12704] <... bpf resumed>) = 4 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12707] <... chdir resumed>) = 0 [pid 12706] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12705] <... setpgid resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12707] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12706] <... prctl resumed>) = 0 [pid 12705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12704] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12707] <... prctl resumed>) = 0 [pid 12706] setpgid(0, 0 [pid 12705] <... openat resumed>) = 3 [pid 12707] setpgid(0, 0 [pid 12706] <... setpgid resumed>) = 0 [pid 12705] write(3, "1000", 4 [pid 12707] <... setpgid resumed>) = 0 [pid 12705] <... write resumed>) = 4 [pid 12707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12705] close(3) = 0 [pid 12707] <... openat resumed>) = 3 [pid 12705] symlink("/dev/binderfs", "./binderfs" [pid 12704] <... bpf resumed>) = 5 [pid 5066] umount2("./1477", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12706] <... openat resumed>) = 3 [pid 12705] <... symlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12704] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] openat(AT_FDCWD, "./1477", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12706] write(3, "1000", 4 [pid 12707] write(3, "1000", 4 [pid 12706] <... write resumed>) = 4 [pid 12705] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... openat resumed>) = 3 [pid 12707] <... write resumed>) = 4 [pid 12705] <... bpf resumed>) = 3 [pid 12707] close(3 [pid 12705] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12706] close(3 [pid 5066] newfstatat(3, "", [pid 12707] <... close resumed>) = 0 [pid 12706] <... close resumed>) = 0 [pid 12705] <... bpf resumed>) = 4 [pid 12704] <... bpf resumed>) = 6 [pid 12707] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12706] symlink("/dev/binderfs", "./binderfs" [pid 12705] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12707] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12706] <... symlink resumed>) = 0 [pid 12705] <... bpf resumed>) = 5 [pid 12704] exit_group(0 [pid 12707] <... bpf resumed>) = 3 [pid 12704] <... exit_group resumed>) = ? [pid 5066] getdents64(3, [pid 12707] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12705] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12707] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12705] <... bpf resumed>) = 6 [pid 12706] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12707] <... bpf resumed>) = 5 [pid 12706] <... bpf resumed>) = 3 [pid 12705] exit_group(0 [pid 5066] umount2("./1477/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12706] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12706] <... bpf resumed>) = 4 [pid 12705] <... exit_group resumed>) = ? [pid 5066] newfstatat(AT_FDCWD, "./1477/binderfs", [pid 12707] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12706] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1477/binderfs") = 0 [pid 12706] <... bpf resumed>) = 5 [pid 12706] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1477" [pid 12705] +++ exited with 0 +++ [pid 12704] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12705, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] mkdir("./1478", 0777 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12704, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... mkdir resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12707] <... bpf resumed>) = 6 [pid 12706] <... bpf resumed>) = 6 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1522", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12706] exit_group(0) = ? ./strace-static-x86_64: Process 12708 attached [pid 12707] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12708] set_robust_list(0x5555686ec660, 24 [pid 12707] <... exit_group resumed>) = ? [pid 12706] +++ exited with 0 +++ [pid 5069] umount2("./1545", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./1522", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12708 [pid 12708] <... set_robust_list resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12708] chdir("./1478" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12706, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] newfstatat(3, "", [pid 12707] +++ exited with 0 +++ [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1545", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12708] <... chdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12707, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12708] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 12708] <... prctl resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5071] umount2("./1559", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... restart_syscall resumed>) = 0 [pid 12708] setpgid(0, 0) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1545/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1504", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1559", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1545/binderfs", [pid 5068] umount2("./1522/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12708] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1504", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12708] write(3, "1000", 4 [pid 5071] newfstatat(3, "", [pid 5069] unlink("./1545/binderfs" [pid 5068] newfstatat(AT_FDCWD, "./1522/binderfs", [pid 5067] <... openat resumed>) = 3 [pid 12708] <... write resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] newfstatat(3, "", [pid 12708] close(3 [pid 5071] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12708] <... close resumed>) = 0 [pid 5068] unlink("./1522/binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12708] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./1559/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12708] <... symlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12708] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1559/binderfs", [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 5067] umount2("./1504/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12708] <... bpf resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12708] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] unlink("./1559/binderfs" [pid 5069] close(3 [pid 5068] close(3 [pid 5067] newfstatat(AT_FDCWD, "./1504/binderfs", [pid 12708] <... bpf resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12708] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... unlink resumed>) = 0 [pid 5068] rmdir("./1522" [pid 5069] rmdir("./1545" [pid 5067] unlink("./1504/binderfs" [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12708] <... bpf resumed>) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12708] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] mkdir("./1546", 0777 [pid 5067] getdents64(3, [pid 5071] close(3 [pid 5068] mkdir("./1523", 0777 [pid 12708] <... bpf resumed>) = 6 [pid 5071] <... close resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./1559" [pid 12708] exit_group(0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] close(3 [pid 12708] <... exit_group resumed>) = ? [pid 5071] <... rmdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1504" [pid 5071] mkdir("./1560", 0777) = 0 ./strace-static-x86_64: Process 12710 attached [pid 12710] set_robust_list(0x5555686ec660, 24 [pid 5067] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12709 attached [pid 12710] <... set_robust_list resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12710 [pid 5067] mkdir("./1505", 0777 [pid 12709] set_robust_list(0x5555686ec660, 24 [pid 12710] chdir("./1546" [pid 12709] <... set_robust_list resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 12709] chdir("./1523" [pid 12708] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12709 [pid 12709] <... chdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12708, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12711 attached [pid 12710] <... chdir resumed>) = 0 [pid 12709] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] umount2("./1478", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12710] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12709] <... prctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12712 attached [pid 12711] set_robust_list(0x5555686ec660, 24 [pid 12710] <... prctl resumed>) = 0 [pid 12709] setpgid(0, 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12711 [pid 12710] setpgid(0, 0) = 0 [pid 12709] <... setpgid resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1478", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12712] set_robust_list(0x5555686ec660, 24 [pid 12711] <... set_robust_list resumed>) = 0 [pid 12710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... openat resumed>) = 3 [pid 12710] <... openat resumed>) = 3 [pid 12709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12711] chdir("./1560" [pid 5066] newfstatat(3, "", [pid 12712] <... set_robust_list resumed>) = 0 [pid 12710] write(3, "1000", 4 [pid 12709] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12712 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12710] <... write resumed>) = 4 [pid 5066] getdents64(3, [pid 12712] chdir("./1505" [pid 12710] close(3 [pid 12709] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12712] <... chdir resumed>) = 0 [pid 12711] <... chdir resumed>) = 0 [pid 12710] <... close resumed>) = 0 [pid 12709] <... write resumed>) = 4 [pid 5066] umount2("./1478/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12712] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12711] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12710] symlink("/dev/binderfs", "./binderfs" [pid 12709] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12712] <... prctl resumed>) = 0 [pid 12711] <... prctl resumed>) = 0 [pid 12709] <... close resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1478/binderfs", [pid 12712] setpgid(0, 0 [pid 12711] setpgid(0, 0 [pid 12710] <... symlink resumed>) = 0 [pid 12709] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12712] <... setpgid resumed>) = 0 [pid 12711] <... setpgid resumed>) = 0 [pid 12710] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12709] <... symlink resumed>) = 0 [pid 12711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] unlink("./1478/binderfs" [pid 12712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12710] <... bpf resumed>) = 3 [pid 12709] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... unlink resumed>) = 0 [pid 12711] <... openat resumed>) = 3 [pid 12710] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12709] <... bpf resumed>) = 3 [pid 5066] getdents64(3, [pid 12712] <... openat resumed>) = 3 [pid 12711] write(3, "1000", 4 [pid 12709] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12710] <... bpf resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12709] <... bpf resumed>) = 4 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1478" [pid 12712] write(3, "1000", 4 [pid 12711] <... write resumed>) = 4 [pid 12710] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12709] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... rmdir resumed>) = 0 [pid 12712] <... write resumed>) = 4 [pid 12711] close(3) = 0 [pid 12712] close(3 [pid 12711] symlink("/dev/binderfs", "./binderfs" [pid 5066] mkdir("./1479", 0777 [pid 12712] <... close resumed>) = 0 [pid 12711] <... symlink resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12709] <... bpf resumed>) = 5 [pid 12710] <... bpf resumed>) = 5 [pid 12712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12711] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12712] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12711] <... bpf resumed>) = 3 [pid 12710] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12709] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12713 attached [pid 12712] <... bpf resumed>) = 3 [pid 12711] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12710] <... bpf resumed>) = 6 [pid 12709] <... bpf resumed>) = 6 [pid 12712] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12711] <... bpf resumed>) = 4 [pid 12710] exit_group(0 [pid 12712] <... bpf resumed>) = 4 [pid 12710] <... exit_group resumed>) = ? [pid 12709] exit_group(0 [pid 12711] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12713 [pid 12713] set_robust_list(0x5555686ec660, 24 [pid 12712] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12713] <... set_robust_list resumed>) = 0 [pid 12711] <... bpf resumed>) = 5 [pid 12709] <... exit_group resumed>) = ? [pid 12713] chdir("./1479" [pid 12712] <... bpf resumed>) = 5 [pid 12712] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12713] <... chdir resumed>) = 0 [pid 12711] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12713] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12710] +++ exited with 0 +++ [pid 12713] <... prctl resumed>) = 0 [pid 12709] +++ exited with 0 +++ [pid 12713] setpgid(0, 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12709, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12710, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12713] <... setpgid resumed>) = 0 [pid 5069] umount2("./1546", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12712] <... bpf resumed>) = 6 [pid 12711] <... bpf resumed>) = 6 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12712] exit_group(0 [pid 12711] exit_group(0 [pid 5069] openat(AT_FDCWD, "./1546", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12712] <... exit_group resumed>) = ? [pid 12713] <... openat resumed>) = 3 [pid 12711] <... exit_group resumed>) = ? [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./1523", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12712] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12713] write(3, "1000", 4) = 4 [pid 12713] close(3) = 0 [pid 12713] symlink("/dev/binderfs", "./binderfs" [pid 12711] +++ exited with 0 +++ [pid 5069] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./1523", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12713] <... symlink resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12711, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12712, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 12713] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5067] umount2("./1505", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12713] <... bpf resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12713] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1560", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1523/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./1505", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12713] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1546/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 12713] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] openat(AT_FDCWD, "./1560", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1523/binderfs", [pid 5067] newfstatat(3, "", [pid 12713] <... bpf resumed>) = 5 [pid 5071] <... openat resumed>) = 3 [pid 5069] newfstatat(AT_FDCWD, "./1546/binderfs", [pid 12713] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12713] <... bpf resumed>) = 6 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] unlink("./1546/binderfs" [pid 12713] exit_group(0 [pid 5071] getdents64(3, [pid 5068] unlink("./1523/binderfs" [pid 5067] getdents64(3, [pid 5069] <... unlink resumed>) = 0 [pid 12713] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1560/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1560/binderfs", [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12713] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] getdents64(3, [pid 5067] umount2("./1505/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./1560/binderfs" [pid 5069] close(3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12713, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] close(3 [pid 5067] newfstatat(AT_FDCWD, "./1505/binderfs", [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] rmdir("./1523") = 0 [pid 5067] unlink("./1505/binderfs" [pid 5066] umount2("./1479", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] rmdir("./1546" [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5068] mkdir("./1524", 0777 [pid 5066] openat(AT_FDCWD, "./1479", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 5071] close(3 [pid 5066] newfstatat(3, "", [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1560" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] rmdir("./1505" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] mkdir("./1561", 0777 [pid 5069] mkdir("./1547", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12714 attached [pid 5069] <... mkdir resumed>) = 0 [pid 5067] mkdir("./1506", 0777 [pid 5066] umount2("./1479/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12714] set_robust_list(0x5555686ec660, 24 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12714 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1479/binderfs", ./strace-static-x86_64: Process 12715 attached [pid 12714] <... set_robust_list resumed>) = 0 [pid 12715] set_robust_list(0x5555686ec660, 24 [pid 12714] chdir("./1524" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12715 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12716 attached [pid 12715] <... set_robust_list resumed>) = 0 [pid 12714] <... chdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] unlink("./1479/binderfs" [pid 12716] set_robust_list(0x5555686ec660, 24 [pid 12715] chdir("./1561" [pid 12714] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12716 [pid 5066] <... unlink resumed>) = 0 [pid 12716] <... set_robust_list resumed>) = 0 [pid 12714] <... prctl resumed>) = 0 [pid 12716] chdir("./1547" [pid 12715] <... chdir resumed>) = 0 [pid 12716] <... chdir resumed>) = 0 [pid 12714] setpgid(0, 0 [pid 5066] getdents64(3, [pid 12716] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12715] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12714] <... setpgid resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12716] <... prctl resumed>) = 0 [pid 12715] <... prctl resumed>) = 0 [pid 12716] setpgid(0, 0 [pid 12714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] close(3./strace-static-x86_64: Process 12717 attached [pid 12716] <... setpgid resumed>) = 0 [pid 12715] setpgid(0, 0 [pid 12714] <... openat resumed>) = 3 [pid 12716] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12717] set_robust_list(0x5555686ec660, 24 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12717 [pid 5066] <... close resumed>) = 0 [pid 12715] <... setpgid resumed>) = 0 [pid 12715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12714] write(3, "1000", 4 [pid 12717] <... set_robust_list resumed>) = 0 [pid 5066] rmdir("./1479" [pid 12716] <... openat resumed>) = 3 [pid 12715] <... openat resumed>) = 3 [pid 12714] <... write resumed>) = 4 [pid 12716] write(3, "1000", 4) = 4 [pid 12717] chdir("./1506" [pid 12716] close(3 [pid 12715] write(3, "1000", 4 [pid 12714] close(3 [pid 12715] <... write resumed>) = 4 [pid 12715] close(3) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12716] <... close resumed>) = 0 [pid 12714] <... close resumed>) = 0 [pid 12717] <... chdir resumed>) = 0 [pid 12715] symlink("/dev/binderfs", "./binderfs" [pid 5066] mkdir("./1480", 0777 [pid 12717] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12716] symlink("/dev/binderfs", "./binderfs" [pid 12715] <... symlink resumed>) = 0 [pid 12714] symlink("/dev/binderfs", "./binderfs" [pid 12717] <... prctl resumed>) = 0 [pid 12716] <... symlink resumed>) = 0 [pid 12715] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12714] <... symlink resumed>) = 0 [pid 12717] setpgid(0, 0 [pid 12716] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12715] <... bpf resumed>) = 3 [pid 12714] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... mkdir resumed>) = 0 [pid 12717] <... setpgid resumed>) = 0 [pid 12716] <... bpf resumed>) = 3 [pid 12715] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12714] <... bpf resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12717] <... openat resumed>) = 3 [pid 12716] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12715] <... bpf resumed>) = 4 [pid 12714] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12718 attached [pid 12717] write(3, "1000", 4 [pid 12714] <... bpf resumed>) = 4 [pid 12716] <... bpf resumed>) = 4 [pid 12715] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12718] set_robust_list(0x5555686ec660, 24 [pid 12717] <... write resumed>) = 4 [pid 12716] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12714] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12718 [pid 12718] <... set_robust_list resumed>) = 0 [pid 12717] close(3 [pid 12718] chdir("./1480" [pid 12717] <... close resumed>) = 0 [pid 12717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12716] <... bpf resumed>) = 5 [pid 12718] <... chdir resumed>) = 0 [pid 12718] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12717] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12714] <... bpf resumed>) = 5 [pid 12718] <... prctl resumed>) = 0 [pid 12717] <... bpf resumed>) = 3 [pid 12718] setpgid(0, 0 [pid 12717] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12718] <... setpgid resumed>) = 0 [pid 12717] <... bpf resumed>) = 4 [pid 12715] <... bpf resumed>) = 5 [pid 12714] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12717] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12716] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12718] <... openat resumed>) = 3 [pid 12715] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12714] <... bpf resumed>) = 6 [pid 12716] <... bpf resumed>) = 6 [pid 12718] write(3, "1000", 4) = 4 [pid 12716] exit_group(0 [pid 12714] exit_group(0 [pid 12718] close(3 [pid 12717] <... bpf resumed>) = 5 [pid 12716] <... exit_group resumed>) = ? [pid 12715] <... bpf resumed>) = 6 [pid 12714] <... exit_group resumed>) = ? [pid 12718] <... close resumed>) = 0 [pid 12718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12718] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12715] exit_group(0 [pid 12717] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12718] <... bpf resumed>) = 3 [pid 12718] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12717] exit_group(0 [pid 12718] <... bpf resumed>) = 4 [pid 12715] <... exit_group resumed>) = ? [pid 12718] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 12716] +++ exited with 0 +++ [pid 12718] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12717] <... exit_group resumed>) = ? [pid 12714] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12716, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12714, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] umount2("./1547", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1547", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12718] <... bpf resumed>) = 6 [pid 12715] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12715, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12718] exit_group(0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./1524", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12718] <... exit_group resumed>) = ? [pid 5069] newfstatat(3, "", [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] openat(AT_FDCWD, "./1524", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1561", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1547/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "./1561", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] newfstatat(AT_FDCWD, "./1547/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 5069] unlink("./1547/binderfs" [pid 5071] newfstatat(3, "", [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] umount2("./1524/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1524/binderfs", [pid 5069] close(3) = 0 [pid 5069] rmdir("./1547" [pid 5071] umount2("./1561/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1561/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12718] +++ exited with 0 +++ [pid 12717] +++ exited with 0 +++ [pid 5071] unlink("./1561/binderfs" [pid 5069] mkdir("./1548", 0777 [pid 5068] unlink("./1524/binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5068] getdents64(3, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12717, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... mkdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./1506", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12718, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] rmdir("./1561" [pid 5068] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1480", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1506", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12719 attached [pid 5071] mkdir("./1562", 0777 [pid 5068] rmdir("./1524" [pid 5067] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./1480", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12719] set_robust_list(0x5555686ec660, 24 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12719 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12719] <... set_robust_list resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] mkdir("./1525", 0777 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 12719] chdir("./1548" [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12720 attached [pid 12719] <... chdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 12720] set_robust_list(0x5555686ec660, 24 [pid 12719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12720] <... set_robust_list resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12720] chdir("./1562" [pid 12719] setpgid(0, 0 [pid 5067] umount2("./1506/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1480/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12719] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1480/binderfs", ./strace-static-x86_64: Process 12721 attached [pid 12720] <... chdir resumed>) = 0 [pid 12719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12720 [pid 5067] newfstatat(AT_FDCWD, "./1506/binderfs", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12721] set_robust_list(0x5555686ec660, 24 [pid 12720] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12721 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12720] <... prctl resumed>) = 0 [pid 5067] unlink("./1506/binderfs" [pid 12721] <... set_robust_list resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] unlink("./1480/binderfs" [pid 12721] chdir("./1525" [pid 12720] setpgid(0, 0 [pid 12719] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 12721] <... chdir resumed>) = 0 [pid 12720] <... setpgid resumed>) = 0 [pid 12719] write(3, "1000", 4 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12721] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12719] <... write resumed>) = 4 [pid 5067] close(3 [pid 12721] <... prctl resumed>) = 0 [pid 12720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12719] close(3 [pid 5067] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12721] setpgid(0, 0 [pid 12720] <... openat resumed>) = 3 [pid 12719] <... close resumed>) = 0 [pid 5067] rmdir("./1506" [pid 12721] <... setpgid resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12719] symlink("/dev/binderfs", "./binderfs" [pid 5066] close(3 [pid 12720] write(3, "1000", 4 [pid 5066] <... close resumed>) = 0 [pid 12720] <... write resumed>) = 4 [pid 12721] <... openat resumed>) = 3 [pid 12720] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] rmdir("./1480" [pid 12721] write(3, "1000", 4 [pid 12720] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12720] symlink("/dev/binderfs", "./binderfs" [pid 12719] <... symlink resumed>) = 0 [pid 5067] mkdir("./1507", 0777 [pid 12721] <... write resumed>) = 4 [pid 12721] close(3 [pid 12720] <... symlink resumed>) = 0 [pid 5066] mkdir("./1481", 0777 [pid 12721] <... close resumed>) = 0 [pid 12721] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 12721] <... symlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12719] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12720] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12721] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12721] <... bpf resumed>) = 3 [pid 12720] <... bpf resumed>) = 3 [pid 12719] <... bpf resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12722 attached [pid 12721] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12720] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12719] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12723 attached [pid 12722] set_robust_list(0x5555686ec660, 24 [pid 12721] <... bpf resumed>) = 4 [pid 12723] set_robust_list(0x5555686ec660, 24 [pid 12722] <... set_robust_list resumed>) = 0 [pid 12721] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12720] <... bpf resumed>) = 4 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12722 [pid 12723] <... set_robust_list resumed>) = 0 [pid 12722] chdir("./1481" [pid 12721] <... bpf resumed>) = 5 [pid 12720] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12719] <... bpf resumed>) = 4 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12723 [pid 12719] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12723] chdir("./1507" [pid 12722] <... chdir resumed>) = 0 [pid 12721] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12720] <... bpf resumed>) = 5 [pid 12719] <... bpf resumed>) = 5 [pid 12722] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12721] <... bpf resumed>) = 6 [pid 12722] <... prctl resumed>) = 0 [pid 12723] <... chdir resumed>) = 0 [pid 12719] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12723] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12722] setpgid(0, 0 [pid 12721] exit_group(0 [pid 12720] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12719] <... bpf resumed>) = 6 [pid 12723] <... prctl resumed>) = 0 [pid 12722] <... setpgid resumed>) = 0 [pid 12721] <... exit_group resumed>) = ? [pid 12720] <... bpf resumed>) = 6 [pid 12723] setpgid(0, 0 [pid 12722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12719] exit_group(0 [pid 12720] exit_group(0 [pid 12719] <... exit_group resumed>) = ? [pid 12723] <... setpgid resumed>) = 0 [pid 12723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12722] <... openat resumed>) = 3 [pid 12720] <... exit_group resumed>) = ? [pid 12719] +++ exited with 0 +++ [pid 12723] <... openat resumed>) = 3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12719, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12722] write(3, "1000", 4) = 4 [pid 12723] write(3, "1000", 4 [pid 12722] close(3 [pid 12723] <... write resumed>) = 4 [pid 12722] <... close resumed>) = 0 [pid 12722] symlink("/dev/binderfs", "./binderfs" [pid 12723] close(3) = 0 [pid 12722] <... symlink resumed>) = 0 [pid 5069] umount2("./1548", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12723] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12723] <... symlink resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1548", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12722] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5069] <... openat resumed>) = 3 [pid 12723] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12722] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(3, "", [pid 12721] +++ exited with 0 +++ [pid 12720] +++ exited with 0 +++ [pid 12722] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12721, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1548/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1548/binderfs", [pid 12723] <... bpf resumed>) = 3 [pid 12722] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12720, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./1525", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] unlink("./1548/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12723] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... unlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1525", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12723] <... bpf resumed>) = 4 [pid 12722] <... bpf resumed>) = 5 [pid 12723] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1562", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12722] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 12723] <... bpf resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] newfstatat(3, "", [pid 5069] close(3 [pid 5071] openat(AT_FDCWD, "./1562", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] rmdir("./1548" [pid 12723] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5071] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1562/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12723] <... bpf resumed>) = 6 [pid 12722] <... bpf resumed>) = 6 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] umount2("./1525/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12723] exit_group(0 [pid 12722] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12723] <... exit_group resumed>) = ? [pid 5071] newfstatat(AT_FDCWD, "./1562/binderfs", [pid 5069] mkdir("./1549", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12722] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12723] +++ exited with 0 +++ [pid 5071] unlink("./1562/binderfs" [pid 5069] <... mkdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1525/binderfs", [pid 12722] +++ exited with 0 +++ [pid 5071] <... unlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12723, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(3, [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] unlink("./1525/binderfs" [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5071] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12722, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1562" [pid 5068] <... unlink resumed>) = 0 [pid 5066] umount2("./1481", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5067] umount2("./1507", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12724 attached [pid 5068] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1507", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] openat(AT_FDCWD, "./1481", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12724] set_robust_list(0x5555686ec660, 24 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12724] <... set_robust_list resumed>) = 0 [pid 5071] mkdir("./1563", 0777 [pid 5068] close(3 [pid 5067] newfstatat(3, "", [pid 5066] <... openat resumed>) = 3 [pid 12724] chdir("./1549" [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12724 [pid 5068] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 12724] <... chdir resumed>) = 0 [pid 5068] rmdir("./1525" [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] getdents64(3, [pid 12724] <... prctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12725 attached [pid 12724] setpgid(0, 0 [pid 5067] umount2("./1507/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./1526", 0777 [pid 12724] <... setpgid resumed>) = 0 [pid 5066] umount2("./1481/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12725] set_robust_list(0x5555686ec660, 24 [pid 12724] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12725 [pid 5067] newfstatat(AT_FDCWD, "./1507/binderfs", [pid 5066] newfstatat(AT_FDCWD, "./1481/binderfs", [pid 12725] <... set_robust_list resumed>) = 0 [pid 12724] write(3, "1000", 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12724] <... write resumed>) = 4 [pid 5066] unlink("./1481/binderfs" [pid 12724] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 12724] <... close resumed>) = 0 [pid 12724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] close(3 [pid 12725] chdir("./1563" [pid 12724] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] unlink("./1507/binderfs" [pid 12725] <... chdir resumed>) = 0 [pid 12724] <... bpf resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12724] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, [pid 5066] rmdir("./1481" [pid 12725] setpgid(0, 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12726 attached [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12726 [pid 12725] <... setpgid resumed>) = 0 [pid 5067] close(3 [pid 12726] set_robust_list(0x5555686ec660, 24 [pid 12725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12726] <... set_robust_list resumed>) = 0 [pid 12724] <... bpf resumed>) = 4 [pid 5066] mkdir("./1482", 0777) = 0 [pid 12726] chdir("./1526" [pid 5067] rmdir("./1507" [pid 12724] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12725] <... openat resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12726] <... chdir resumed>) = 0 [pid 12725] write(3, "1000", 4 [pid 12724] <... bpf resumed>) = 5 [pid 5067] <... rmdir resumed>) = 0 [pid 12725] <... write resumed>) = 4 [pid 12724] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12727 attached [pid 12725] close(3 [pid 12726] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12724] <... bpf resumed>) = 6 [pid 5067] mkdir("./1508", 0777 [pid 12725] <... close resumed>) = 0 [pid 12727] set_robust_list(0x5555686ec660, 24 [pid 12726] <... prctl resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12727 [pid 12727] <... set_robust_list resumed>) = 0 [pid 12726] setpgid(0, 0 [pid 12725] symlink("/dev/binderfs", "./binderfs" [pid 12724] exit_group(0 [pid 12727] chdir("./1482" [pid 12726] <... setpgid resumed>) = 0 [pid 12725] <... symlink resumed>) = 0 [pid 12724] <... exit_group resumed>) = ? [pid 5067] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12727] <... chdir resumed>) = 0 [pid 12726] <... openat resumed>) = 3 [pid 12725] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12727] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12725] <... bpf resumed>) = 3 [pid 12727] <... prctl resumed>) = 0 [pid 12726] write(3, "1000", 4 [pid 12725] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12727] setpgid(0, 0 [pid 12726] <... write resumed>) = 4 [pid 12724] +++ exited with 0 +++ [pid 12727] <... setpgid resumed>) = 0 [pid 12726] close(3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12724, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12728 attached [pid 12727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12726] <... close resumed>) = 0 [pid 12725] <... bpf resumed>) = 4 [pid 12728] set_robust_list(0x5555686ec660, 24 [pid 12725] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12728 [pid 12728] <... set_robust_list resumed>) = 0 [pid 12726] symlink("/dev/binderfs", "./binderfs" [pid 5069] umount2("./1549", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12728] chdir("./1508" [pid 12727] <... openat resumed>) = 3 [pid 12726] <... symlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12726] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] openat(AT_FDCWD, "./1549", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12726] <... bpf resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 12726] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12726] <... bpf resumed>) = 4 [pid 5069] getdents64(3, [pid 12725] <... bpf resumed>) = 5 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12727] write(3, "1000", 4 [pid 12728] <... chdir resumed>) = 0 [pid 12726] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] umount2("./1549/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12728] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12727] <... write resumed>) = 4 [pid 12726] <... bpf resumed>) = 5 [pid 12725] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1549/binderfs", [pid 12725] <... bpf resumed>) = 6 [pid 12727] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12728] <... prctl resumed>) = 0 [pid 12727] <... close resumed>) = 0 [pid 12728] setpgid(0, 0 [pid 12727] symlink("/dev/binderfs", "./binderfs" [pid 12726] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] unlink("./1549/binderfs" [pid 12728] <... setpgid resumed>) = 0 [pid 12727] <... symlink resumed>) = 0 [pid 12726] <... bpf resumed>) = 6 [pid 5069] <... unlink resumed>) = 0 [pid 12728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12727] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12726] exit_group(0) = ? [pid 12725] exit_group(0 [pid 5069] getdents64(3, [pid 12728] <... openat resumed>) = 3 [pid 12727] <... bpf resumed>) = 3 [pid 12728] write(3, "1000", 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12728] <... write resumed>) = 4 [pid 12727] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12725] <... exit_group resumed>) = ? [pid 5069] close(3 [pid 12728] close(3 [pid 5069] <... close resumed>) = 0 [pid 12728] <... close resumed>) = 0 [pid 12727] <... bpf resumed>) = 4 [pid 12726] +++ exited with 0 +++ [pid 5069] rmdir("./1549" [pid 12728] symlink("/dev/binderfs", "./binderfs" [pid 12727] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 12728] <... symlink resumed>) = 0 [pid 5069] mkdir("./1550", 0777 [pid 12728] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12726, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12728] <... bpf resumed>) = 3 [pid 12728] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1526", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12728] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12727] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12728] <... bpf resumed>) = 5 [pid 5068] openat(AT_FDCWD, "./1526", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12729 attached [pid 12725] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 12729] set_robust_list(0x5555686ec660, 24 [pid 12727] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] newfstatat(3, "", [pid 12729] <... set_robust_list resumed>) = 0 [pid 12728] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12729 [pid 12729] chdir("./1550" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12725, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12729] <... chdir resumed>) = 0 [pid 12729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12729] setpgid(0, 0) = 0 [pid 5071] umount2("./1563", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 12729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12728] <... bpf resumed>) = 6 [pid 12727] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12729] <... openat resumed>) = 3 [pid 12728] exit_group(0 [pid 12727] exit_group(0 [pid 5071] openat(AT_FDCWD, "./1563", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./1526/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12729] write(3, "1000", 4 [pid 12728] <... exit_group resumed>) = ? [pid 5071] newfstatat(3, "", [pid 5068] newfstatat(AT_FDCWD, "./1526/binderfs", [pid 12729] <... write resumed>) = 4 [pid 12728] +++ exited with 0 +++ [pid 12727] <... exit_group resumed>) = ? [pid 12729] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12728, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12729] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 12729] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] unlink("./1526/binderfs" [pid 12729] <... symlink resumed>) = 0 [pid 5071] umount2("./1563/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5067] umount2("./1508", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12729] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12727] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12729] <... bpf resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./1563/binderfs", [pid 5068] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12729] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./1508", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12727, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12729] <... bpf resumed>) = 4 [pid 5071] unlink("./1563/binderfs" [pid 5068] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 12729] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] rmdir("./1526" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12729] <... bpf resumed>) = 5 [pid 5071] getdents64(3, [pid 5066] umount2("./1482", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1482", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5071] rmdir("./1563" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(3, "", [pid 12729] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1527", 0777 [pid 5067] umount2("./1508/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] mkdir("./1564", 0777 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1482/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(AT_FDCWD, "./1508/binderfs", [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./1508/binderfs" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(AT_FDCWD, "./1482/binderfs", [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] unlink("./1482/binderfs" [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12730 attached 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12730] set_robust_list(0x5555686ec660, 24 [pid 5067] rmdir("./1508"./strace-static-x86_64: Process 12731 attached [pid 12730] <... set_robust_list resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12730 [pid 5066] getdents64(3, [pid 12731] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12731 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12731] <... set_robust_list resumed>) = 0 [pid 12730] chdir("./1527" [pid 12731] chdir("./1564" [pid 12729] <... bpf resumed>) = 6 [pid 5067] mkdir("./1509", 0777 [pid 5066] close(3 [pid 12730] <... chdir resumed>) = 0 [pid 12731] <... chdir resumed>) = 0 [pid 12730] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12729] exit_group(0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12731] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12730] <... prctl resumed>) = 0 [pid 12729] <... exit_group resumed>) = ? [pid 12731] <... prctl resumed>) = 0 [pid 12730] setpgid(0, 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] rmdir("./1482" [pid 12731] setpgid(0, 0 [pid 12730] <... setpgid resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12732 attached [pid 12731] <... setpgid resumed>) = 0 [pid 12730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12732 [pid 12732] set_robust_list(0x5555686ec660, 24 [pid 12731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12730] <... openat resumed>) = 3 [pid 12729] +++ exited with 0 +++ [pid 5066] mkdir("./1483", 0777 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12729, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 12732] <... set_robust_list resumed>) = 0 [pid 12731] <... openat resumed>) = 3 [pid 12730] write(3, "1000", 4 [pid 12731] write(3, "1000", 4) = 4 [pid 5069] umount2("./1550", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12731] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 12732] chdir("./1509" [pid 12731] <... close resumed>) = 0 [pid 12730] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12731] symlink("/dev/binderfs", "./binderfs" [pid 5069] openat(AT_FDCWD, "./1550", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12731] <... symlink resumed>) = 0 [pid 12730] close(3 [pid 5069] <... openat resumed>) = 3 [pid 12732] <... chdir resumed>) = 0 [pid 12730] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12732] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12730] symlink("/dev/binderfs", "./binderfs" [pid 12732] <... prctl resumed>) = 0 [pid 12731] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(3, "", [pid 12731] <... bpf resumed>) = 3 [pid 12730] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12732] setpgid(0, 0 [pid 12731] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 12732] <... setpgid resumed>) = 0 [pid 12731] <... bpf resumed>) = 4 [pid 12730] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12730] <... bpf resumed>) = 3 ./strace-static-x86_64: Process 12733 attached [pid 12732] <... openat resumed>) = 3 [pid 12731] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] umount2("./1550/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12733] set_robust_list(0x5555686ec660, 24 [pid 12732] write(3, "1000", 4 [pid 12730] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12733 [pid 12733] <... set_robust_list resumed>) = 0 [pid 12732] <... write resumed>) = 4 [pid 12731] <... bpf resumed>) = 5 [pid 12730] <... bpf resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1550/binderfs", [pid 12733] chdir("./1483" [pid 12732] close(3 [pid 12731] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12730] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12733] <... chdir resumed>) = 0 [pid 12731] <... bpf resumed>) = 6 [pid 5069] unlink("./1550/binderfs" [pid 12733] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12732] <... close resumed>) = 0 [pid 12731] exit_group(0 [pid 12730] <... bpf resumed>) = 5 [pid 5069] <... unlink resumed>) = 0 [pid 12733] <... prctl resumed>) = 0 [pid 12732] symlink("/dev/binderfs", "./binderfs" [pid 12733] setpgid(0, 0 [pid 12731] <... exit_group resumed>) = ? [pid 12732] <... symlink resumed>) = 0 [pid 12730] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] getdents64(3, [pid 12733] <... setpgid resumed>) = 0 [pid 12732] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12730] <... bpf resumed>) = 6 [pid 12733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12733] <... openat resumed>) = 3 [pid 12732] <... bpf resumed>) = 3 [pid 12730] exit_group(0 [pid 5069] close(3 [pid 12730] <... exit_group resumed>) = ? [pid 5069] <... close resumed>) = 0 [pid 12733] write(3, "1000", 4 [pid 5069] rmdir("./1550" [pid 12733] <... write resumed>) = 4 [pid 12733] close(3) = 0 [pid 12733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12733] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12732] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... rmdir resumed>) = 0 [pid 12732] <... bpf resumed>) = 4 [pid 12733] <... bpf resumed>) = 3 [pid 12733] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12732] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] mkdir("./1551", 0777 [pid 12733] <... bpf resumed>) = 4 [pid 12733] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 12732] <... bpf resumed>) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 12733] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12732] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12731] +++ exited with 0 +++ ./strace-static-x86_64: Process 12734 attached [pid 12730] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12731, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12734] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12734 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12730, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12734] <... set_robust_list resumed>) = 0 [pid 5071] umount2("./1564", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12734] chdir("./1551" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12734] <... chdir resumed>) = 0 [pid 12734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] openat(AT_FDCWD, "./1564", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12734] <... prctl resumed>) = 0 [pid 12734] setpgid(0, 0 [pid 5071] <... openat resumed>) = 3 [pid 12734] <... setpgid resumed>) = 0 [pid 12734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(3, "", [pid 12734] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12734] write(3, "1000", 4 [pid 5071] getdents64(3, [pid 12734] <... write resumed>) = 4 [pid 12734] close(3) = 0 [pid 5068] umount2("./1527", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12734] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12734] <... symlink resumed>) = 0 [pid 5071] umount2("./1564/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1527", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./1564/binderfs", [pid 12734] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12733] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12734] <... bpf resumed>) = 3 [pid 12733] exit_group(0 [pid 12732] <... bpf resumed>) = 6 [pid 12734] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12732] exit_group(0 [pid 5071] unlink("./1564/binderfs" [pid 5068] newfstatat(3, "", [pid 12734] <... bpf resumed>) = 4 [pid 12733] <... exit_group resumed>) = ? [pid 5071] <... unlink resumed>) = 0 [pid 12732] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12734] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 12732] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 5068] getdents64(3, [pid 12734] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12733] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] close(3 [pid 5068] umount2("./1527/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12732, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12733, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5071] rmdir("./1564" [pid 5068] newfstatat(AT_FDCWD, "./1527/binderfs", [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] mkdir("./1565", 0777 [pid 5068] unlink("./1527/binderfs" [pid 5071] <... mkdir resumed>) = 0 [pid 5066] umount2("./1483", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5067] umount2("./1509", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1483", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./1509", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1483/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12735 attached [pid 12734] <... bpf resumed>) = 6 [pid 5068] close(3 [pid 5067] <... openat resumed>) = 3 [pid 12735] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12735 [pid 12735] <... set_robust_list resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./1527" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1483/binderfs", [pid 12735] chdir("./1565" [pid 12734] exit_group(0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12735] <... chdir resumed>) = 0 [pid 12734] <... exit_group resumed>) = ? [pid 5067] getdents64(3, [pid 12735] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] unlink("./1483/binderfs" [pid 12735] <... prctl resumed>) = 0 [pid 5068] mkdir("./1528", 0777 [pid 5067] umount2("./1509/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 12735] setpgid(0, 0 [pid 12734] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12735] <... setpgid resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12734, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] newfstatat(AT_FDCWD, "./1509/binderfs", [pid 5066] getdents64(3, [pid 12735] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12736 attached [pid 12735] write(3, "1000", 4 [pid 5067] unlink("./1509/binderfs" [pid 5066] close(3 [pid 12736] set_robust_list(0x5555686ec660, 24 [pid 12735] <... write resumed>) = 4 [pid 5069] umount2("./1551", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12736] <... set_robust_list resumed>) = 0 [pid 12735] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12736 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12736] chdir("./1528" [pid 12735] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1551", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5066] rmdir("./1483" [pid 12736] <... chdir resumed>) = 0 [pid 12735] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 12736] setpgid(0, 0 [pid 5067] <... close resumed>) = 0 [pid 12736] <... setpgid resumed>) = 0 [pid 12735] <... symlink resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5067] rmdir("./1509" [pid 5066] mkdir("./1484", 0777 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12735] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12735] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12735] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] mkdir("./1510", 0777 [pid 12736] <... openat resumed>) = 3 [pid 5069] umount2("./1551/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12736] write(3, "1000", 4 [pid 12735] <... bpf resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12737 attached [pid 12736] <... write resumed>) = 4 [pid 12735] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12736] close(3 [pid 12737] set_robust_list(0x5555686ec660, 24 [pid 12736] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1551/binderfs", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12737 [pid 12737] <... set_robust_list resumed>) = 0 [pid 12736] symlink("/dev/binderfs", "./binderfs" [pid 12735] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12737] chdir("./1484" [pid 12735] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12736] <... symlink resumed>) = 0 [pid 5069] unlink("./1551/binderfs" [pid 12737] <... chdir resumed>) = 0 [pid 12735] <... bpf resumed>) = 6 [pid 12737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12737] setpgid(0, 0 [pid 12735] exit_group(0 [pid 12737] <... setpgid resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12738 attached [pid 12737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12736] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12735] <... exit_group resumed>) = ? [pid 5069] getdents64(3, [pid 12736] <... bpf resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12738 [pid 12738] set_robust_list(0x5555686ec660, 24 [pid 12737] <... openat resumed>) = 3 [pid 12736] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12735] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12738] <... set_robust_list resumed>) = 0 [pid 12737] write(3, "1000", 4 [pid 12738] chdir("./1510" [pid 12736] <... bpf resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12735, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] close(3 [pid 12737] <... write resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 12738] <... chdir resumed>) = 0 [pid 12737] close(3 [pid 12738] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12737] <... close resumed>) = 0 [pid 12736] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] rmdir("./1551" [pid 12738] <... prctl resumed>) = 0 [pid 12737] symlink("/dev/binderfs", "./binderfs" [pid 12738] setpgid(0, 0 [pid 12737] <... symlink resumed>) = 0 [pid 12738] <... setpgid resumed>) = 0 [pid 12737] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... rmdir resumed>) = 0 [pid 12737] <... bpf resumed>) = 3 [pid 12737] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12736] <... bpf resumed>) = 5 [pid 12738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12737] <... bpf resumed>) = 4 [pid 5071] umount2("./1565", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1552", 0777 [pid 12737] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 12738] <... openat resumed>) = 3 [pid 12737] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12738] write(3, "1000", 4 [pid 12736] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] openat(AT_FDCWD, "./1565", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12737] <... bpf resumed>) = 6 [pid 5071] <... openat resumed>) = 3 [pid 12737] exit_group(0) = ? [pid 12736] <... bpf resumed>) = 6 [pid 5071] newfstatat(3, "", [pid 12738] <... write resumed>) = 4 [pid 12738] close(3) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12738] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12736] exit_group(0 [pid 5071] getdents64(3, ./strace-static-x86_64: Process 12739 attached [pid 12738] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12736] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12739 [pid 12739] set_robust_list(0x5555686ec660, 24 [pid 12738] <... bpf resumed>) = 3 [pid 5071] umount2("./1565/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12739] <... set_robust_list resumed>) = 0 [pid 12738] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12739] chdir("./1552" [pid 5071] newfstatat(AT_FDCWD, "./1565/binderfs", [pid 12738] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12739] <... chdir resumed>) = 0 [pid 12738] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] unlink("./1565/binderfs" [pid 12739] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... unlink resumed>) = 0 [pid 12739] <... prctl resumed>) = 0 [pid 5071] getdents64(3, [pid 12739] setpgid(0, 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12739] <... setpgid resumed>) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1565" [pid 12739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12738] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1566", 0777 [pid 12739] <... openat resumed>) = 3 [pid 12738] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12736] +++ exited with 0 +++ [pid 5071] <... mkdir resumed>) = 0 [pid 12737] +++ exited with 0 +++ [pid 12739] write(3, "1000", 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12739] <... write resumed>) = 4 [pid 12739] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12736, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12739] <... close resumed>) = 0 [pid 12739] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./1528", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12737, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12739] <... symlink resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12740 attached [pid 12739] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] openat(AT_FDCWD, "./1528", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12740] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12740 [pid 5068] <... openat resumed>) = 3 [pid 12739] <... bpf resumed>) = 3 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12740] <... set_robust_list resumed>) = 0 [pid 12739] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12740] chdir("./1566" [pid 5066] umount2("./1484", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1528/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12740] <... chdir resumed>) = 0 [pid 12739] <... bpf resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1484", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12740] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] newfstatat(AT_FDCWD, "./1528/binderfs", [pid 12740] <... prctl resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12740] setpgid(0, 0 [pid 12739] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] unlink("./1528/binderfs" [pid 5066] newfstatat(3, "", [pid 5068] <... unlink resumed>) = 0 [pid 12740] <... setpgid resumed>) = 0 [pid 12739] <... bpf resumed>) = 5 [pid 5068] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1528" [pid 12740] <... openat resumed>) = 3 [pid 12739] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12740] write(3, "1000", 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12740] <... write resumed>) = 4 [pid 12740] close(3 [pid 5068] mkdir("./1529", 0777 [pid 5066] umount2("./1484/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12740] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12740] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... mkdir resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1484/binderfs", [pid 12740] <... symlink resumed>) = 0 [pid 12740] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12740] <... bpf resumed>) = 3 [pid 5066] unlink("./1484/binderfs" [pid 12740] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12741 attached [pid 12740] <... bpf resumed>) = 4 [pid 12738] <... bpf resumed>) = 6 [pid 12739] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12741 [pid 5066] getdents64(3, [pid 12741] set_robust_list(0x5555686ec660, 24 [pid 12740] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12739] exit_group(0 [pid 12738] exit_group(0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12741] <... set_robust_list resumed>) = 0 [pid 12739] <... exit_group resumed>) = ? [pid 12738] <... exit_group resumed>) = ? [pid 5066] close(3 [pid 12740] <... bpf resumed>) = 5 [pid 5066] <... close resumed>) = 0 [pid 12740] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12741] chdir("./1529" [pid 12740] <... bpf resumed>) = 6 [pid 5066] rmdir("./1484" [pid 12740] exit_group(0 [pid 5066] <... rmdir resumed>) = 0 [pid 12740] <... exit_group resumed>) = ? [pid 12738] +++ exited with 0 +++ [pid 5066] mkdir("./1485", 0777 [pid 12741] <... chdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12738, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12741] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12741] setpgid(0, 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12741] <... setpgid resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 12742 attached [pid 5067] umount2("./1510", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12742] set_robust_list(0x5555686ec660, 24 [pid 12741] <... openat resumed>) = 3 [pid 12742] <... set_robust_list resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12742 [pid 12741] write(3, "1000", 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12742] chdir("./1485" [pid 12741] <... write resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./1510", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12742] <... chdir resumed>) = 0 [pid 12741] close(3 [pid 5067] <... openat resumed>) = 3 [pid 12742] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12741] <... close resumed>) = 0 [pid 12742] <... prctl resumed>) = 0 [pid 12741] symlink("/dev/binderfs", "./binderfs" [pid 5067] newfstatat(3, "", [pid 12742] setpgid(0, 0 [pid 12741] <... symlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12742] <... setpgid resumed>) = 0 [pid 5067] getdents64(3, [pid 12741] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12740] +++ exited with 0 +++ [pid 12741] <... bpf resumed>) = 3 [pid 12739] +++ exited with 0 +++ [pid 5067] umount2("./1510/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12742] <... openat resumed>) = 3 [pid 12741] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12740, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12742] write(3, "1000", 4 [pid 12741] <... bpf resumed>) = 4 [pid 5071] umount2("./1566", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12739, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] newfstatat(AT_FDCWD, "./1510/binderfs", [pid 12742] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12742] close(3 [pid 5071] openat(AT_FDCWD, "./1566", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12742] <... close resumed>) = 0 [pid 12741] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... openat resumed>) = 3 [pid 5069] umount2("./1552", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12742] symlink("/dev/binderfs", "./binderfs" [pid 12741] <... bpf resumed>) = 5 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./1510/binderfs" [pid 5069] openat(AT_FDCWD, "./1552", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(3, "", [pid 5069] <... openat resumed>) = 3 [pid 5067] <... unlink resumed>) = 0 [pid 12742] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12741] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] newfstatat(3, "", [pid 5067] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] getdents64(3, [pid 5067] close(3 [pid 12742] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... close resumed>) = 0 [pid 12742] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1552/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1510" [pid 12742] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1566/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1552/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1566/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] mkdir("./1511", 0777 [pid 5069] unlink("./1552/binderfs" [pid 5067] <... mkdir resumed>) = 0 [pid 12742] <... bpf resumed>) = 4 [pid 5071] unlink("./1566/binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 12742] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12742] <... bpf resumed>) = 5 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12743 attached [pid 5069] close(3) = 0 [pid 12743] set_robust_list(0x5555686ec660, 24 [pid 12742] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12741] <... bpf resumed>) = 6 [pid 5071] getdents64(3, [pid 5069] rmdir("./1552" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12743 [pid 12743] <... set_robust_list resumed>) = 0 [pid 12742] <... bpf resumed>) = 6 [pid 12741] exit_group(0 [pid 12743] chdir("./1511" [pid 5069] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12741] <... exit_group resumed>) = ? [pid 12743] <... chdir resumed>) = 0 [pid 12742] exit_group(0 [pid 12743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12743] setpgid(0, 0) = 0 [pid 12742] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 5069] mkdir("./1553", 0777 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1566" [pid 12743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 12743] <... openat resumed>) = 3 [pid 5071] mkdir("./1567", 0777 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12744 attached [pid 12743] write(3, "1000", 4 [pid 12742] +++ exited with 0 +++ [pid 12741] +++ exited with 0 +++ [pid 5071] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12741, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12744 [pid 12744] set_robust_list(0x5555686ec660, 24 [pid 12743] <... write resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12742, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12744] <... set_robust_list resumed>) = 0 [pid 12743] close(3 [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 12745 attached [pid 5068] umount2("./1529", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1485", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12745] set_robust_list(0x5555686ec660, 24 [pid 12744] chdir("./1553" [pid 12743] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12745 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12745] <... set_robust_list resumed>) = 0 [pid 12744] <... chdir resumed>) = 0 [pid 12743] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12743] <... symlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1529", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1485", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12745] chdir("./1567" [pid 12744] setpgid(0, 0 [pid 12743] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 12745] <... chdir resumed>) = 0 [pid 12744] <... setpgid resumed>) = 0 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] newfstatat(3, "", [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1485/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12745] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12743] <... bpf resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12745] <... prctl resumed>) = 0 [pid 12743] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12745] setpgid(0, 0 [pid 12744] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 12745] <... setpgid resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1485/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12743] <... bpf resumed>) = 4 [pid 5066] unlink("./1485/binderfs" [pid 12745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12744] write(3, "1000", 4 [pid 12743] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... unlink resumed>) = 0 [pid 12744] <... write resumed>) = 4 [pid 5066] getdents64(3, [pid 12745] <... openat resumed>) = 3 [pid 12744] close(3 [pid 5068] umount2("./1529/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 12744] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 12744] symlink("/dev/binderfs", "./binderfs" [pid 5066] rmdir("./1485" [pid 12745] write(3, "1000", 4 [pid 12744] <... symlink resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1529/binderfs", [pid 5066] <... rmdir resumed>) = 0 [pid 12745] <... write resumed>) = 4 [pid 12743] <... bpf resumed>) = 5 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12745] close(3 [pid 5066] mkdir("./1486", 0777 [pid 12745] <... close resumed>) = 0 [pid 12744] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12743] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] unlink("./1529/binderfs" [pid 12745] symlink("/dev/binderfs", "./binderfs" [pid 12743] <... bpf resumed>) = 6 [pid 5066] <... mkdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12745] <... symlink resumed>) = 0 [pid 12744] <... bpf resumed>) = 3 [pid 12743] exit_group(0 [pid 5068] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12745] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12744] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12743] <... exit_group resumed>) = ? [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12746 attached [pid 12746] set_robust_list(0x5555686ec660, 24 [pid 12745] <... bpf resumed>) = 3 [pid 12744] <... bpf resumed>) = 4 [pid 5068] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12746 [pid 12746] <... set_robust_list resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12746] chdir("./1486" [pid 12743] +++ exited with 0 +++ [pid 12745] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12744] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] rmdir("./1529" [pid 12746] <... chdir resumed>) = 0 [pid 12745] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12746] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12744] <... bpf resumed>) = 5 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12743, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12745] <... bpf resumed>) = 5 [pid 12744] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12746] <... prctl resumed>) = 0 [pid 12745] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] mkdir("./1530", 0777 [pid 5067] umount2("./1511", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12746] setpgid(0, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12746] <... setpgid resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1511", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 [pid 12746] <... openat resumed>) = 3 [pid 12745] <... bpf resumed>) = 6 [pid 12744] <... bpf resumed>) = 6 [pid 12746] write(3, "1000", 4 [pid 12745] exit_group(0 [pid 12746] <... write resumed>) = 4 [pid 12745] <... exit_group resumed>) = ? [pid 12744] exit_group(0./strace-static-x86_64: Process 12747 attached [pid 12746] close(3 [pid 5067] newfstatat(3, "", [pid 12746] <... close resumed>) = 0 [pid 12744] <... exit_group resumed>) = ? [pid 12746] symlink("/dev/binderfs", "./binderfs" [pid 12747] set_robust_list(0x5555686ec660, 24 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12747] <... set_robust_list resumed>) = 0 [pid 5067] getdents64(3, [pid 12747] chdir("./1530" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12747] <... chdir resumed>) = 0 [pid 5067] umount2("./1511/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12747] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12746] <... symlink resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12747 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12747] <... prctl resumed>) = 0 [pid 12746] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(AT_FDCWD, "./1511/binderfs", [pid 12747] setpgid(0, 0 [pid 12746] <... bpf resumed>) = 3 [pid 12747] <... setpgid resumed>) = 0 [pid 12746] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1511/binderfs" [pid 12747] <... openat resumed>) = 3 [pid 12746] <... bpf resumed>) = 4 [pid 12746] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12747] write(3, "1000", 4 [pid 5067] <... unlink resumed>) = 0 [pid 12747] <... write resumed>) = 4 [pid 5067] getdents64(3, [pid 12747] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12747] <... close resumed>) = 0 [pid 12746] <... bpf resumed>) = 5 [pid 5067] close(3 [pid 12747] symlink("/dev/binderfs", "./binderfs" [pid 12746] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12747] <... symlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1511" [pid 12747] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12745] +++ exited with 0 +++ [pid 12744] +++ exited with 0 +++ [pid 12747] <... bpf resumed>) = 3 [pid 12747] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12745, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12744, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] mkdir("./1512", 0777 [pid 12747] <... bpf resumed>) = 4 [pid 12747] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5071] umount2("./1567", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 12747] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1553", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./1567", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1553", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(3, "", [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12748 attached [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12748] set_robust_list(0x5555686ec660, 24 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] getdents64(3, [pid 12748] <... set_robust_list resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12748] chdir("./1512" [pid 5071] umount2("./1567/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12748 [pid 12748] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1553/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./1567/binderfs", [pid 12748] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12748] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1553/binderfs", [pid 12748] setpgid(0, 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12748] <... setpgid resumed>) = 0 [pid 5071] unlink("./1567/binderfs" [pid 5069] unlink("./1553/binderfs" [pid 12748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... unlink resumed>) = 0 [pid 12748] <... openat resumed>) = 3 [pid 12747] <... bpf resumed>) = 6 [pid 12746] <... bpf resumed>) = 6 [pid 5071] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 12748] write(3, "1000", 4 [pid 12747] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12748] <... write resumed>) = 4 [pid 12746] exit_group(0 [pid 5071] getdents64(3, [pid 5069] close(3 [pid 12747] <... exit_group resumed>) = ? [pid 12748] close(3 [pid 12746] <... exit_group resumed>) = ? [pid 5069] <... close resumed>) = 0 [pid 12748] <... close resumed>) = 0 [pid 5069] rmdir("./1553" [pid 12748] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... rmdir resumed>) = 0 [pid 12748] <... symlink resumed>) = 0 [pid 5069] mkdir("./1554", 0777 [pid 12748] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12747] +++ exited with 0 +++ [pid 12746] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12748] <... bpf resumed>) = 3 [pid 5071] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12747, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... close resumed>) = 0 [pid 12748] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12746, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1486", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1486", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 12749 attached [pid 5071] rmdir("./1567" [pid 5068] umount2("./1530", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 12749] set_robust_list(0x5555686ec660, 24 [pid 12748] <... bpf resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12749] <... set_robust_list resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12749] chdir("./1554" [pid 12748] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1568", 0777 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12749 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12749] <... chdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12749] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12748] <... bpf resumed>) = 5 [pid 5068] openat(AT_FDCWD, "./1530", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./1486/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12749] <... prctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12749] setpgid(0, 0 [pid 12748] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 12749] <... setpgid resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1486/binderfs", [pid 12749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1486/binderfs"./strace-static-x86_64: Process 12750 attached [pid 12749] <... openat resumed>) = 3 [pid 12748] <... bpf resumed>) = 6 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... unlink resumed>) = 0 [pid 12750] set_robust_list(0x5555686ec660, 24 [pid 12749] write(3, "1000", 4 [pid 5068] umount2("./1530/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12748] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12750 [pid 12750] <... set_robust_list resumed>) = 0 [pid 12749] <... write resumed>) = 4 [pid 12748] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12750] chdir("./1568" [pid 12749] close(3 [pid 5066] close(3 [pid 12750] <... chdir resumed>) = 0 [pid 12749] <... close resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1530/binderfs", [pid 5066] <... close resumed>) = 0 [pid 12750] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12749] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] rmdir("./1486" [pid 12750] <... prctl resumed>) = 0 [pid 12749] <... symlink resumed>) = 0 [pid 12748] +++ exited with 0 +++ [pid 5068] unlink("./1530/binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 12750] setpgid(0, 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12748, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12750] <... setpgid resumed>) = 0 [pid 5068] getdents64(3, [pid 12750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12749] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] mkdir("./1487", 0777 [pid 12750] <... openat resumed>) = 3 [pid 5068] close(3 [pid 5067] umount2("./1512", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12750] write(3, "1000", 4 [pid 12749] <... bpf resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 12750] <... write resumed>) = 4 [pid 5068] rmdir("./1530" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12750] close(3 [pid 12749] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1512", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... mkdir resumed>) = 0 [pid 12750] <... close resumed>) = 0 [pid 12750] symlink("/dev/binderfs", "./binderfs" [pid 12749] <... bpf resumed>) = 4 [pid 5068] mkdir("./1531", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12749] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] newfstatat(3, "", [pid 12750] <... symlink resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12749] <... bpf resumed>) = 5 [pid 12750] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12749] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 12750] <... bpf resumed>) = 3 ./strace-static-x86_64: Process 12751 attached [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12750] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] umount2("./1512/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12751 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12751] set_robust_list(0x5555686ec660, 24 [pid 12750] <... bpf resumed>) = 4 [pid 5067] newfstatat(AT_FDCWD, "./1512/binderfs", [pid 12751] <... set_robust_list resumed>) = 0 [pid 12749] <... bpf resumed>) = 6 ./strace-static-x86_64: Process 12752 attached [pid 12751] chdir("./1487" [pid 12750] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12752 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12752] set_robust_list(0x5555686ec660, 24 [pid 12751] <... chdir resumed>) = 0 [pid 12749] exit_group(0 [pid 12752] <... set_robust_list resumed>) = 0 [pid 12752] chdir("./1531") = 0 [pid 12751] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12750] <... bpf resumed>) = 5 [pid 12749] <... exit_group resumed>) = ? [pid 5067] unlink("./1512/binderfs" [pid 12750] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12752] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12751] <... prctl resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12752] <... prctl resumed>) = 0 [pid 12751] setpgid(0, 0 [pid 5067] getdents64(3, [pid 12752] setpgid(0, 0 [pid 12751] <... setpgid resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12752] <... setpgid resumed>) = 0 [pid 12749] +++ exited with 0 +++ [pid 12751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] close(3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12749, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... close resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5067] rmdir("./1512" [pid 5069] <... restart_syscall resumed>) = 0 [pid 12751] <... openat resumed>) = 3 [pid 12752] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 12752] write(3, "1000", 4 [pid 12751] write(3, "1000", 4 [pid 5067] mkdir("./1513", 0777 [pid 12751] <... write resumed>) = 4 [pid 12752] <... write resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5069] umount2("./1554", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12752] close(3) = 0 [pid 12752] symlink("/dev/binderfs", "./binderfs" [pid 12751] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12752] <... symlink resumed>) = 0 [pid 12752] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12751] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1554", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12753 attached [pid 12752] <... bpf resumed>) = 3 [pid 12751] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... openat resumed>) = 3 [pid 12753] set_robust_list(0x5555686ec660, 24 [pid 12752] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12751] <... symlink resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12753 [pid 12753] <... set_robust_list resumed>) = 0 [pid 12751] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12752] <... bpf resumed>) = 4 [pid 5069] getdents64(3, [pid 12751] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12753] chdir("./1513" [pid 12752] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12751] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1554/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12753] <... chdir resumed>) = 0 [pid 12752] <... bpf resumed>) = 5 [pid 12751] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12753] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12751] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] newfstatat(AT_FDCWD, "./1554/binderfs", [pid 12753] <... prctl resumed>) = 0 [pid 12752] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12751] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12753] setpgid(0, 0 [pid 12752] <... bpf resumed>) = 6 [pid 12751] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12750] <... bpf resumed>) = 6 [pid 5069] unlink("./1554/binderfs" [pid 12753] <... setpgid resumed>) = 0 [pid 12752] exit_group(0 [pid 12751] <... bpf resumed>) = 6 [pid 12753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12752] <... exit_group resumed>) = ? [pid 12750] exit_group(0 [pid 5069] <... unlink resumed>) = 0 [pid 12751] exit_group(0 [pid 12753] <... openat resumed>) = 3 [pid 12750] <... exit_group resumed>) = ? [pid 12753] write(3, "1000", 4 [pid 12752] +++ exited with 0 +++ [pid 12751] <... exit_group resumed>) = ? [pid 5069] getdents64(3, [pid 12753] <... write resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12752, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12753] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12753] <... close resumed>) = 0 [pid 5069] close(3 [pid 12753] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1554" [pid 5068] umount2("./1531", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1531", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12753] <... symlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12753] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12750] +++ exited with 0 +++ [pid 12751] +++ exited with 0 +++ [pid 5069] <... rmdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12753] <... bpf resumed>) = 3 [pid 5069] mkdir("./1555", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12753] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12750, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] getdents64(3, [pid 5071] umount2("./1568", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12751, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12753] <... bpf resumed>) = 4 [pid 5066] umount2("./1487", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12753] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] openat(AT_FDCWD, "./1568", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1487", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1531/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1531/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1531/binderfs") = 0 [pid 5071] <... openat resumed>) = 3 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./1531" [pid 12753] <... bpf resumed>) = 5 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1532", 0777./strace-static-x86_64: Process 12754 attached [pid 12753] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(3, "", [pid 5066] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12754 [pid 5068] <... mkdir resumed>) = 0 [pid 12754] set_robust_list(0x5555686ec660, 24 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12754] <... set_robust_list resumed>) = 0 [pid 12753] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12755 attached [pid 12754] chdir("./1555" [pid 12753] exit_group(0 [pid 5071] umount2("./1568/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1487/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12755] set_robust_list(0x5555686ec660, 24 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12754] <... chdir resumed>) = 0 [pid 12755] <... set_robust_list resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1568/binderfs", [pid 12754] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12753] <... exit_group resumed>) = ? [pid 12754] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1487/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1487/binderfs") = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12755 [pid 5066] getdents64(3, [pid 12753] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1487" [pid 12755] chdir("./1532" [pid 12754] setpgid(0, 0 [pid 5071] unlink("./1568/binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1488", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12753, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12755] <... chdir resumed>) = 0 [pid 12754] <... setpgid resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12755] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 5067] umount2("./1513", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12755] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12756 attached [pid 12755] setpgid(0, 0 [pid 12754] <... openat resumed>) = 3 [pid 5071] close(3 [pid 5067] openat(AT_FDCWD, "./1513", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 12756] set_robust_list(0x5555686ec660, 24 [pid 12755] <... setpgid resumed>) = 0 [pid 12754] write(3, "1000", 4 [pid 5067] <... openat resumed>) = 3 [pid 12756] <... set_robust_list resumed>) = 0 [pid 12755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12754] <... write resumed>) = 4 [pid 5071] rmdir("./1568" [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12756 [pid 12756] chdir("./1488" [pid 12755] <... openat resumed>) = 3 [pid 12754] close(3 [pid 5067] newfstatat(3, "", [pid 12756] <... chdir resumed>) = 0 [pid 12755] write(3, "1000", 4 [pid 12754] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12756] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12755] <... write resumed>) = 4 [pid 12754] symlink("/dev/binderfs", "./binderfs" [pid 5067] getdents64(3, [pid 12756] <... prctl resumed>) = 0 [pid 12755] close(3 [pid 5071] mkdir("./1569", 0777 [pid 12756] setpgid(0, 0 [pid 12755] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12755] symlink("/dev/binderfs", "./binderfs" [pid 12754] <... symlink resumed>) = 0 [pid 5067] umount2("./1513/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12756] <... setpgid resumed>) = 0 [pid 12755] <... symlink resumed>) = 0 [pid 12754] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12755] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12754] <... bpf resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1513/binderfs", [pid 12756] <... openat resumed>) = 3 [pid 12755] <... bpf resumed>) = 3 [pid 12754] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12756] write(3, "1000", 4 [pid 12755] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12754] <... bpf resumed>) = 4 [pid 5067] unlink("./1513/binderfs" [pid 12756] <... write resumed>) = 4 [pid 12756] close(3) = 0 ./strace-static-x86_64: Process 12757 attached [pid 12756] symlink("/dev/binderfs", "./binderfs" [pid 12755] <... bpf resumed>) = 4 [pid 12754] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... unlink resumed>) = 0 [pid 12757] set_robust_list(0x5555686ec660, 24 [pid 12755] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12757 [pid 12757] <... set_robust_list resumed>) = 0 [pid 12756] <... symlink resumed>) = 0 [pid 12755] <... bpf resumed>) = 5 [pid 12754] <... bpf resumed>) = 5 [pid 5067] getdents64(3, [pid 12757] chdir("./1569" [pid 12756] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12755] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12757] <... chdir resumed>) = 0 [pid 12756] <... bpf resumed>) = 3 [pid 12754] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] close(3 [pid 12757] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12756] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12755] <... bpf resumed>) = 6 [pid 12754] <... bpf resumed>) = 6 [pid 5067] <... close resumed>) = 0 [pid 12757] <... prctl resumed>) = 0 [pid 12756] <... bpf resumed>) = 4 [pid 12755] exit_group(0 [pid 12754] exit_group(0 [pid 5067] rmdir("./1513" [pid 12757] setpgid(0, 0 [pid 12756] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12755] <... exit_group resumed>) = ? [pid 12754] <... exit_group resumed>) = ? [pid 12757] <... setpgid resumed>) = 0 [pid 12756] <... bpf resumed>) = 5 [pid 5067] <... rmdir resumed>) = 0 [pid 12757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12756] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] mkdir("./1514", 0777 [pid 12757] write(3, "1000", 4 [pid 5067] <... mkdir resumed>) = 0 [pid 12757] <... write resumed>) = 4 [pid 12757] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12757] <... close resumed>) = 0 [pid 12757] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12758 attached ) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12758 [pid 12758] set_robust_list(0x5555686ec660, 24 [pid 12757] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12758] <... set_robust_list resumed>) = 0 [pid 12757] <... bpf resumed>) = 3 [pid 12758] chdir("./1514" [pid 12757] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12758] <... chdir resumed>) = 0 [pid 12755] +++ exited with 0 +++ [pid 12754] +++ exited with 0 +++ [pid 12758] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12757] <... bpf resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12755, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12758] <... prctl resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12754, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12757] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12758] setpgid(0, 0 [pid 5068] umount2("./1532", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12758] <... setpgid resumed>) = 0 [pid 12757] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1555", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./1532", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12757] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 12758] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1555", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12758] write(3, "1000", 4 [pid 5069] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 12758] <... write resumed>) = 4 [pid 5069] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12758] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 12758] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12758] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1532/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12758] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1555/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12758] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1532/binderfs", [pid 12758] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(AT_FDCWD, "./1555/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12758] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1555/binderfs" [pid 5068] unlink("./1532/binderfs" [pid 12758] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12758] <... bpf resumed>) = 5 [pid 5068] getdents64(3, [pid 5069] getdents64(3, [pid 12758] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 5068] rmdir("./1532" [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1555" [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1533", 0777 [pid 12756] <... bpf resumed>) = 6 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12757] <... bpf resumed>) = 6 [pid 12756] exit_group(0 [pid 12758] <... bpf resumed>) = 6 [pid 12758] exit_group(0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12758] <... exit_group resumed>) = ? [pid 12757] exit_group(0 [pid 12756] <... exit_group resumed>) = ? [pid 5069] mkdir("./1556", 0777./strace-static-x86_64: Process 12759 attached [pid 12757] <... exit_group resumed>) = ? [pid 5069] <... mkdir resumed>) = 0 [pid 12759] set_robust_list(0x5555686ec660, 24 [pid 12758] +++ exited with 0 +++ [pid 12757] +++ exited with 0 +++ [pid 12756] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12759 [pid 12759] <... set_robust_list resumed>) = 0 [pid 12759] chdir("./1533") = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12756, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12759] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12757, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12758, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12759] <... prctl resumed>) = 0 [pid 12759] setpgid(0, 0 [pid 5067] umount2("./1514", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12759] <... setpgid resumed>) = 0 [pid 12759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12759] <... openat resumed>) = 3 [pid 5071] umount2("./1569", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12759] write(3, "1000", 4./strace-static-x86_64: Process 12760 attached [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1514", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12760 [pid 12760] set_robust_list(0x5555686ec660, 24 [pid 12759] <... write resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./1569", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 12760] <... set_robust_list resumed>) = 0 [pid 12759] close(3 [pid 5071] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12760] chdir("./1556" [pid 12759] <... close resumed>) = 0 [pid 12760] <... chdir resumed>) = 0 [pid 12759] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./1488", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12760] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12759] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12760] <... prctl resumed>) = 0 [pid 12759] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12760] setpgid(0, 0 [pid 5071] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] openat(AT_FDCWD, "./1488", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12760] <... setpgid resumed>) = 0 [pid 12759] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1514/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 12760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12759] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1569/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12760] <... openat resumed>) = 3 [pid 12759] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1514/binderfs", [pid 5066] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12760] write(3, "1000", 4 [pid 12759] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(AT_FDCWD, "./1569/binderfs", [pid 5067] unlink("./1514/binderfs" [pid 5066] getdents64(3, [pid 12760] <... write resumed>) = 4 [pid 12759] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12760] close(3 [pid 5071] unlink("./1569/binderfs" [pid 5067] getdents64(3, [pid 5066] umount2("./1488/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 12760] <... close resumed>) = 0 [pid 12759] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12760] symlink("/dev/binderfs", "./binderfs" [pid 12759] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5066] newfstatat(AT_FDCWD, "./1488/binderfs", [pid 12760] <... symlink resumed>) = 0 [pid 12759] exit_group(0 [pid 5071] close(3 [pid 5067] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12760] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12759] <... exit_group resumed>) = ? [pid 5071] <... close resumed>) = 0 [pid 5067] rmdir("./1514" [pid 5066] unlink("./1488/binderfs" [pid 12760] <... bpf resumed>) = 3 [pid 12759] +++ exited with 0 +++ [pid 5071] rmdir("./1569" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12760] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 12760] <... bpf resumed>) = 4 [pid 5067] mkdir("./1515", 0777 [pid 5066] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12759, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12760] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1570", 0777 [pid 5068] umount2("./1533", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 12760] <... bpf resumed>) = 5 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1488" [pid 5071] <... mkdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12760] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] mkdir("./1489", 0777 [pid 12760] <... bpf resumed>) = 6 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12760] exit_group(0 [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12762 attached ./strace-static-x86_64: Process 12761 attached [pid 12760] <... exit_group resumed>) = ? [pid 5068] openat(AT_FDCWD, "./1533", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12762] set_robust_list(0x5555686ec660, 24 [pid 5068] <... openat resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12763 attached [pid 12762] <... set_robust_list resumed>) = 0 [pid 12761] set_robust_list(0x5555686ec660, 24 [pid 12760] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12761 [pid 5068] newfstatat(3, "", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12762 [pid 12763] set_robust_list(0x5555686ec660, 24 [pid 12762] chdir("./1515" [pid 12761] <... set_robust_list resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12760, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12763 [pid 12763] <... set_robust_list resumed>) = 0 [pid 12762] <... chdir resumed>) = 0 [pid 12761] chdir("./1570" [pid 5068] getdents64(3, [pid 12763] chdir("./1489") = 0 [pid 12762] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12763] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12762] <... prctl resumed>) = 0 [pid 12761] <... chdir resumed>) = 0 [pid 5069] umount2("./1556", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12763] <... prctl resumed>) = 0 [pid 12761] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1533/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12763] setpgid(0, 0 [pid 12762] setpgid(0, 0 [pid 12761] <... prctl resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1556", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12763] <... setpgid resumed>) = 0 [pid 12762] <... setpgid resumed>) = 0 [pid 12761] setpgid(0, 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] newfstatat(AT_FDCWD, "./1533/binderfs", [pid 12763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12761] <... setpgid resumed>) = 0 [pid 12763] <... openat resumed>) = 3 [pid 12762] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12762] <... openat resumed>) = 3 [pid 12761] <... openat resumed>) = 3 [pid 12763] write(3, "1000", 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] unlink("./1533/binderfs" [pid 12763] <... write resumed>) = 4 [pid 12762] write(3, "1000", 4 [pid 12761] write(3, "1000", 4 [pid 5069] getdents64(3, [pid 5068] <... unlink resumed>) = 0 [pid 12763] close(3 [pid 12762] <... write resumed>) = 4 [pid 12761] <... write resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12763] <... close resumed>) = 0 [pid 12762] close(3 [pid 12761] close(3 [pid 5069] umount2("./1556/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 12763] symlink("/dev/binderfs", "./binderfs" [pid 12762] <... close resumed>) = 0 [pid 12761] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 12763] <... symlink resumed>) = 0 [pid 12762] symlink("/dev/binderfs", "./binderfs" [pid 12761] symlink("/dev/binderfs", "./binderfs" [pid 5069] newfstatat(AT_FDCWD, "./1556/binderfs", [pid 5068] <... close resumed>) = 0 [pid 12763] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12762] <... symlink resumed>) = 0 [pid 12761] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] rmdir("./1533" [pid 12763] <... bpf resumed>) = 3 [pid 12762] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12761] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12763] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] unlink("./1556/binderfs" [pid 5068] <... rmdir resumed>) = 0 [pid 12763] <... bpf resumed>) = 4 [pid 12762] <... bpf resumed>) = 3 [pid 12761] <... bpf resumed>) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 12763] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12762] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12761] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12763] <... bpf resumed>) = 5 [pid 12762] <... bpf resumed>) = 4 [pid 12761] <... bpf resumed>) = 4 [pid 5069] getdents64(3, [pid 5068] mkdir("./1534", 0777 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 12763] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12762] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12761] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12763] <... bpf resumed>) = 6 [pid 12762] <... bpf resumed>) = 5 [pid 12761] <... bpf resumed>) = 5 [pid 5069] rmdir("./1556" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12763] exit_group(0 [pid 12761] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12763] <... exit_group resumed>) = ? [pid 12762] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12761] <... bpf resumed>) = 6 [pid 5069] <... rmdir resumed>) = 0 [pid 12761] exit_group(0./strace-static-x86_64: Process 12764 attached [pid 5069] mkdir("./1557", 0777 [pid 12764] set_robust_list(0x5555686ec660, 24 [pid 12761] <... exit_group resumed>) = ? [pid 12764] <... set_robust_list resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12764 [pid 12764] chdir("./1534" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12764] <... chdir resumed>) = 0 [pid 12764] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12764] setpgid(0, 0) = 0 [pid 12764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12764] write(3, "1000", 4./strace-static-x86_64: Process 12765 attached [pid 12763] +++ exited with 0 +++ [pid 12762] <... bpf resumed>) = 6 [pid 12765] set_robust_list(0x5555686ec660, 24 [pid 12764] <... write resumed>) = 4 [pid 12762] exit_group(0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12765 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12763, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12765] <... set_robust_list resumed>) = 0 [pid 12764] close(3 [pid 12762] <... exit_group resumed>) = ? [pid 12765] chdir("./1557" [pid 12764] <... close resumed>) = 0 [pid 5066] umount2("./1489", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12765] <... chdir resumed>) = 0 [pid 12764] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12765] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12764] <... symlink resumed>) = 0 [pid 12765] <... prctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1489", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12765] setpgid(0, 0 [pid 12764] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... openat resumed>) = 3 [pid 12765] <... setpgid resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12764] <... bpf resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12764] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12765] <... openat resumed>) = 3 [pid 12764] <... bpf resumed>) = 4 [pid 5066] getdents64(3, [pid 12765] write(3, "1000", 4 [pid 12764] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12765] <... write resumed>) = 4 [pid 12762] +++ exited with 0 +++ [pid 12761] +++ exited with 0 +++ [pid 5066] umount2("./1489/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12765] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12761, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12762, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12765] <... close resumed>) = 0 [pid 12764] <... bpf resumed>) = 5 [pid 12765] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12765] <... symlink resumed>) = 0 [pid 12764] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12765] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(AT_FDCWD, "./1489/binderfs", [pid 5067] umount2("./1515", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12765] <... bpf resumed>) = 3 [pid 5071] umount2("./1570", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1515", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12765] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] openat(AT_FDCWD, "./1570", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5066] unlink("./1489/binderfs" [pid 5071] newfstatat(3, "", [pid 5067] newfstatat(3, "", [pid 5066] <... unlink resumed>) = 0 [pid 12765] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12765] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] close(3 [pid 5071] umount2("./1570/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 12765] <... bpf resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./1570/binderfs", [pid 5066] rmdir("./1489" [pid 12765] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] unlink("./1570/binderfs" [pid 5067] umount2("./1515/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1490", 0777 [pid 5067] newfstatat(AT_FDCWD, "./1515/binderfs", [pid 5071] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./1515/binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 5071] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] rmdir("./1570" [pid 5067] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12766 attached [pid 12765] <... bpf resumed>) = 6 [pid 12764] <... bpf resumed>) = 6 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12766] set_robust_list(0x5555686ec660, 24 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12766] <... set_robust_list resumed>) = 0 [pid 5067] close(3) = 0 [pid 12766] chdir("./1490" [pid 12764] exit_group(0 [pid 12765] exit_group(0 [pid 5071] mkdir("./1571", 0777 [pid 5067] rmdir("./1515" [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12766 [pid 12765] <... exit_group resumed>) = ? [pid 12764] <... exit_group resumed>) = ? [pid 12766] <... chdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12766] setpgid(0, 0) = 0 [pid 12766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12765] +++ exited with 0 +++ [pid 12764] +++ exited with 0 +++ [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 12766] <... openat resumed>) = 3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12765, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12764, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] mkdir("./1516", 0777./strace-static-x86_64: Process 12767 attached [pid 12766] write(3, "1000", 4 [pid 12767] set_robust_list(0x5555686ec660, 24 [pid 12766] <... write resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12767 [pid 5067] <... mkdir resumed>) = 0 [pid 12767] <... set_robust_list resumed>) = 0 [pid 12766] close(3 [pid 5069] umount2("./1557", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1534", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1534", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./1557", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12767] chdir("./1571" [pid 12766] <... close resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 12767] <... chdir resumed>) = 0 [pid 12766] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12768 attached [pid 12767] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12766] <... symlink resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] newfstatat(3, "", [pid 12768] set_robust_list(0x5555686ec660, 24 [pid 12767] <... prctl resumed>) = 0 [pid 12766] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12768 [pid 12768] <... set_robust_list resumed>) = 0 [pid 12767] setpgid(0, 0 [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 12767] <... setpgid resumed>) = 0 [pid 12766] <... bpf resumed>) = 3 [pid 12768] chdir("./1516" [pid 12767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12766] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12768] <... chdir resumed>) = 0 [pid 12767] <... openat resumed>) = 3 [pid 12766] <... bpf resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1534/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12768] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] umount2("./1557/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12766] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12768] <... prctl resumed>) = 0 [pid 12767] write(3, "1000", 4 [pid 5069] newfstatat(AT_FDCWD, "./1557/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12768] setpgid(0, 0 [pid 12766] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1534/binderfs", [pid 12768] <... setpgid resumed>) = 0 [pid 12767] <... write resumed>) = 4 [pid 12766] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12767] close(3 [pid 5069] unlink("./1557/binderfs" [pid 12767] <... close resumed>) = 0 [pid 12768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12767] symlink("/dev/binderfs", "./binderfs" [pid 12766] <... bpf resumed>) = 6 [pid 5069] <... unlink resumed>) = 0 [pid 5068] unlink("./1534/binderfs" [pid 12767] <... symlink resumed>) = 0 [pid 12766] exit_group(0 [pid 12768] <... openat resumed>) = 3 [pid 12766] <... exit_group resumed>) = ? [pid 12768] write(3, "1000", 4 [pid 12767] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5068] <... unlink resumed>) = 0 [pid 12768] <... write resumed>) = 4 [pid 12767] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 12768] close(3 [pid 12767] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12766] +++ exited with 0 +++ [pid 5069] close(3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12768] <... close resumed>) = 0 [pid 12767] <... bpf resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5068] close(3 [pid 12768] symlink("/dev/binderfs", "./binderfs" [pid 5069] rmdir("./1557" [pid 12767] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12766, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12768] <... symlink resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5069] mkdir("./1558", 0777 [pid 5068] rmdir("./1534" [pid 5066] umount2("./1490", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12768] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12768] <... bpf resumed>) = 3 [pid 12767] <... bpf resumed>) = 5 [pid 5066] openat(AT_FDCWD, "./1490", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12768] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12767] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] mkdir("./1535", 0777 [pid 5066] newfstatat(3, "", [pid 12768] <... bpf resumed>) = 4 [pid 12767] <... bpf resumed>) = 6 [pid 12767] exit_group(0) = ? [pid 5068] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12769 attached [pid 12768] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12769 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12769] set_robust_list(0x5555686ec660, 24) = 0 [pid 5066] getdents64(3, [pid 12769] chdir("./1558" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12770 attached [pid 12768] <... bpf resumed>) = 5 [pid 12770] set_robust_list(0x5555686ec660, 24) = 0 [pid 12770] chdir("./1535" [pid 12769] <... chdir resumed>) = 0 [pid 12768] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12767] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12770 [pid 5066] umount2("./1490/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12769] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12767, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12770] <... chdir resumed>) = 0 [pid 12768] <... bpf resumed>) = 6 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12769] <... prctl resumed>) = 0 [pid 12770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1490/binderfs", [pid 12770] setpgid(0, 0 [pid 12769] setpgid(0, 0 [pid 12768] exit_group(0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12770] <... setpgid resumed>) = 0 [pid 5071] umount2("./1571", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12769] <... setpgid resumed>) = 0 [pid 12768] <... exit_group resumed>) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1571", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] unlink("./1490/binderfs" [pid 12770] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 12770] write(3, "1000", 4 [pid 12769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12768] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12768, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12770] <... write resumed>) = 4 [pid 12769] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12770] close(3 [pid 12769] write(3, "1000", 4 [pid 5071] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12770] <... close resumed>) = 0 [pid 12769] <... write resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1571/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12770] symlink("/dev/binderfs", "./binderfs" [pid 12769] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12770] <... symlink resumed>) = 0 [pid 12769] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1571/binderfs", [pid 5067] umount2("./1516", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 12770] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12769] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12770] <... bpf resumed>) = 3 [pid 12769] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 12770] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12769] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] unlink("./1571/binderfs" [pid 5067] openat(AT_FDCWD, "./1516", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] rmdir("./1490" [pid 12770] <... bpf resumed>) = 4 [pid 12769] <... bpf resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 12769] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 12770] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12769] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5071] close(3 [pid 12769] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... close resumed>) = 0 [pid 12770] <... bpf resumed>) = 5 [pid 5071] rmdir("./1571" [pid 5067] newfstatat(3, "", [pid 5066] mkdir("./1491", 0777 [pid 12770] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12769] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12770] <... bpf resumed>) = 6 [pid 12769] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] mkdir("./1572", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12770] exit_group(0 [pid 12769] <... bpf resumed>) = 6 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] umount2("./1516/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12770] <... exit_group resumed>) = ? [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12769] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] newfstatat(AT_FDCWD, "./1516/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12769] <... exit_group resumed>) = ? [pid 5067] unlink("./1516/binderfs"./strace-static-x86_64: Process 12771 attached ./strace-static-x86_64: Process 12772 attached [pid 12771] set_robust_list(0x5555686ec660, 24 [pid 5067] <... unlink resumed>) = 0 [pid 12772] set_robust_list(0x5555686ec660, 24 [pid 5067] getdents64(3, [pid 12771] <... set_robust_list resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12771 [pid 12772] <... set_robust_list resumed>) = 0 [pid 12771] chdir("./1572" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12772 [pid 12771] <... chdir resumed>) = 0 [pid 12772] chdir("./1491" [pid 12771] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] close(3 [pid 12771] <... prctl resumed>) = 0 [pid 12771] setpgid(0, 0 [pid 12772] <... chdir resumed>) = 0 [pid 12771] <... setpgid resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12772] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] rmdir("./1516" [pid 12772] <... prctl resumed>) = 0 [pid 12771] <... openat resumed>) = 3 [pid 12772] setpgid(0, 0 [pid 12771] write(3, "1000", 4 [pid 5067] <... rmdir resumed>) = 0 [pid 12771] <... write resumed>) = 4 [pid 12772] <... setpgid resumed>) = 0 [pid 5067] mkdir("./1517", 0777 [pid 12771] close(3) = 0 [pid 12772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12771] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... mkdir resumed>) = 0 [pid 12772] <... openat resumed>) = 3 [pid 12771] <... symlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12772] write(3, "1000", 4) = 4 [pid 12771] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12773 attached [pid 12772] close(3) = 0 [pid 12773] set_robust_list(0x5555686ec660, 24 [pid 12772] symlink("/dev/binderfs", "./binderfs" [pid 12770] +++ exited with 0 +++ [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12773 [pid 12771] <... bpf resumed>) = 3 [pid 12769] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12770, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12769, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12773] <... set_robust_list resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 12773] chdir("./1517" [pid 12772] <... symlink resumed>) = 0 [pid 12771] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12773] <... chdir resumed>) = 0 [pid 12772] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1558", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12773] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12772] <... bpf resumed>) = 3 [pid 12771] <... bpf resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12773] <... prctl resumed>) = 0 [pid 12772] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12771] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] openat(AT_FDCWD, "./1558", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./1535", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12773] setpgid(0, 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./1535", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5069] getdents64(3, [pid 12772] <... bpf resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(3, "", [pid 5069] umount2("./1558/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12773] <... setpgid resumed>) = 0 [pid 12771] <... bpf resumed>) = 5 [pid 12772] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(AT_FDCWD, "./1558/binderfs", [pid 5068] getdents64(3, [pid 12772] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12773] <... openat resumed>) = 3 [pid 5069] unlink("./1558/binderfs" [pid 5068] umount2("./1535/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12773] write(3, "1000", 4 [pid 12772] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12771] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12773] <... write resumed>) = 4 [pid 5069] getdents64(3, [pid 5068] newfstatat(AT_FDCWD, "./1535/binderfs", [pid 12773] close(3) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12773] symlink("/dev/binderfs", "./binderfs" [pid 5069] close(3) = 0 [pid 5068] unlink("./1535/binderfs" [pid 12773] <... symlink resumed>) = 0 [pid 5069] rmdir("./1558" [pid 5068] <... unlink resumed>) = 0 [pid 12773] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12773] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] close(3 [pid 5069] mkdir("./1559", 0777 [pid 5068] <... close resumed>) = 0 [pid 12773] <... bpf resumed>) = 4 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] rmdir("./1535" [pid 12773] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12772] <... bpf resumed>) = 6 [pid 12771] <... bpf resumed>) = 6 [pid 12772] exit_group(0 [pid 12771] exit_group(0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12774 attached [pid 12773] <... bpf resumed>) = 5 [pid 12772] <... exit_group resumed>) = ? [pid 12771] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 12774] set_robust_list(0x5555686ec660, 24) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12774 [pid 12774] chdir("./1559" [pid 12773] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] mkdir("./1536", 0777 [pid 12774] <... chdir resumed>) = 0 [pid 12774] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... mkdir resumed>) = 0 [pid 12774] <... prctl resumed>) = 0 [pid 12774] setpgid(0, 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12774] <... setpgid resumed>) = 0 [pid 12774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 12775 attached ) = 3 [pid 12775] set_robust_list(0x5555686ec660, 24 [pid 12774] write(3, "1000", 4 [pid 12772] +++ exited with 0 +++ [pid 12771] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12775 [pid 12775] <... set_robust_list resumed>) = 0 [pid 12774] <... write resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12771, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12775] chdir("./1536" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12772, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12774] close(3 [pid 12775] <... chdir resumed>) = 0 [pid 12774] <... close resumed>) = 0 [pid 12775] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12774] symlink("/dev/binderfs", "./binderfs" [pid 5066] umount2("./1491", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12775] <... prctl resumed>) = 0 [pid 12774] <... symlink resumed>) = 0 [pid 5071] umount2("./1572", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12775] setpgid(0, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12775] <... setpgid resumed>) = 0 [pid 12774] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] openat(AT_FDCWD, "./1491", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12774] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 12774] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(3, "", [pid 12775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./1572", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12775] <... openat resumed>) = 3 [pid 12775] write(3, "1000", 4 [pid 12774] <... bpf resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12775] <... write resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 12773] <... bpf resumed>) = 6 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12775] close(3 [pid 12774] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 5066] getdents64(3, [pid 12775] <... close resumed>) = 0 [pid 12773] exit_group(0 [pid 12775] symlink("/dev/binderfs", "./binderfs" [pid 12774] <... bpf resumed>) = 5 [pid 12773] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12775] <... symlink resumed>) = 0 [pid 12774] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] umount2("./1491/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12774] <... bpf resumed>) = 6 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./1572/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1491/binderfs", [pid 12775] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12774] exit_group(0 [pid 5071] newfstatat(AT_FDCWD, "./1572/binderfs", [pid 12775] <... bpf resumed>) = 3 [pid 12774] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1572/binderfs" [pid 5066] unlink("./1491/binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12775] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12775] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 5066] close(3 [pid 12775] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... close resumed>) = 0 [pid 5071] close(3 [pid 5066] rmdir("./1491" [pid 12775] <... bpf resumed>) = 5 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1572" [pid 12775] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1492", 0777 [pid 5071] mkdir("./1573", 0777) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12774] +++ exited with 0 +++ [pid 12773] +++ exited with 0 +++ [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12773, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12776 ./strace-static-x86_64: Process 12777 attached ./strace-static-x86_64: Process 12776 attached [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12774, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12777] set_robust_list(0x5555686ec660, 24 [pid 12776] set_robust_list(0x5555686ec660, 24 [pid 5069] umount2("./1559", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12777 [pid 12777] <... set_robust_list resumed>) = 0 [pid 12776] <... set_robust_list resumed>) = 0 [pid 12775] <... bpf resumed>) = 6 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1517", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12776] chdir("./1573" [pid 12775] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1559", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12777] chdir("./1492" [pid 12776] <... chdir resumed>) = 0 [pid 12775] <... exit_group resumed>) = ? [pid 5069] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1517", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12777] <... chdir resumed>) = 0 [pid 12776] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12777] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12776] <... prctl resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5067] <... openat resumed>) = 3 [pid 12776] setpgid(0, 0 [pid 12777] <... prctl resumed>) = 0 [pid 12776] <... setpgid resumed>) = 0 [pid 12775] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] newfstatat(3, "", [pid 12777] setpgid(0, 0 [pid 12776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12777] <... setpgid resumed>) = 0 [pid 12776] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12775, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, [pid 12777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12776] write(3, "1000", 4 [pid 5069] umount2("./1559/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12777] <... openat resumed>) = 3 [pid 12776] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1536", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1517/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./1559/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] openat(AT_FDCWD, "./1536", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(AT_FDCWD, "./1517/binderfs", [pid 5069] unlink("./1559/binderfs" [pid 5068] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12777] write(3, "1000", 4 [pid 12776] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12777] <... write resumed>) = 4 [pid 12776] <... close resumed>) = 0 [pid 5067] unlink("./1517/binderfs" [pid 12777] close(3 [pid 12776] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12777] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 12776] <... symlink resumed>) = 0 [pid 12777] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] getdents64(3, [pid 12777] <... symlink resumed>) = 0 [pid 5068] umount2("./1536/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12777] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 12777] <... bpf resumed>) = 3 [pid 12776] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5068] newfstatat(AT_FDCWD, "./1536/binderfs", [pid 5067] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] rmdir("./1517" [pid 12777] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12776] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] unlink("./1536/binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 12776] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] close(3 [pid 12777] <... bpf resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] mkdir("./1518", 0777 [pid 12777] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12776] <... bpf resumed>) = 4 [pid 5069] rmdir("./1559" [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5068] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12777] <... bpf resumed>) = 5 [pid 12776] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] rmdir("./1536"./strace-static-x86_64: Process 12778 attached [pid 12777] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... rmdir resumed>) = 0 [pid 5069] mkdir("./1560", 0777 [pid 5068] mkdir("./1537", 0777 [pid 12778] set_robust_list(0x5555686ec660, 24 [pid 12777] <... bpf resumed>) = 6 [pid 12776] <... bpf resumed>) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12778 [pid 12778] <... set_robust_list resumed>) = 0 [pid 12777] exit_group(0 [pid 12776] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12778] chdir("./1518"./strace-static-x86_64: Process 12779 attached ) = 0 [pid 12777] <... exit_group resumed>) = ? [pid 12776] <... bpf resumed>) = 6 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12779 ./strace-static-x86_64: Process 12780 attached [pid 12779] set_robust_list(0x5555686ec660, 24 [pid 12780] set_robust_list(0x5555686ec660, 24 [pid 12779] <... set_robust_list resumed>) = 0 [pid 12778] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12776] exit_group(0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12780 [pid 12780] <... set_robust_list resumed>) = 0 [pid 12779] chdir("./1560" [pid 12778] <... prctl resumed>) = 0 [pid 12780] chdir("./1537" [pid 12776] <... exit_group resumed>) = ? [pid 12780] <... chdir resumed>) = 0 [pid 12778] setpgid(0, 0 [pid 12780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12780] setpgid(0, 0) = 0 [pid 12780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12776] +++ exited with 0 +++ [pid 12779] <... chdir resumed>) = 0 [pid 12778] <... setpgid resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12776, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12779] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12780] <... openat resumed>) = 3 [pid 12779] <... prctl resumed>) = 0 [pid 12779] setpgid(0, 0 [pid 12780] write(3, "1000", 4 [pid 12779] <... setpgid resumed>) = 0 [pid 12778] <... openat resumed>) = 3 [pid 12780] <... write resumed>) = 4 [pid 12780] close(3) = 0 [pid 12780] symlink("/dev/binderfs", "./binderfs" [pid 12779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12778] write(3, "1000", 4 [pid 12777] +++ exited with 0 +++ [pid 12778] <... write resumed>) = 4 [pid 12778] close(3 [pid 12780] <... symlink resumed>) = 0 [pid 12779] <... openat resumed>) = 3 [pid 12778] <... close resumed>) = 0 [pid 5071] umount2("./1573", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12777, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 12780] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12779] write(3, "1000", 4 [pid 12778] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12780] <... bpf resumed>) = 3 [pid 12779] <... write resumed>) = 4 [pid 12778] <... symlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1573", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12780] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12779] close(3 [pid 12780] <... bpf resumed>) = 4 [pid 12779] <... close resumed>) = 0 [pid 12778] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 5066] umount2("./1492", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12780] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12779] symlink("/dev/binderfs", "./binderfs" [pid 12778] <... bpf resumed>) = 3 [pid 12779] <... symlink resumed>) = 0 [pid 12779] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12778] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12780] <... bpf resumed>) = 5 [pid 12779] <... bpf resumed>) = 3 [pid 12778] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./1492", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12780] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12779] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 12780] <... bpf resumed>) = 6 [pid 12779] <... bpf resumed>) = 4 [pid 12778] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(3, "", [pid 12780] exit_group(0 [pid 12779] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12778] <... bpf resumed>) = 5 [pid 5071] umount2("./1573/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12780] <... exit_group resumed>) = ? [pid 12779] <... bpf resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12778] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(AT_FDCWD, "./1573/binderfs", [pid 5066] getdents64(3, [pid 12779] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12778] <... bpf resumed>) = 6 [pid 12779] <... bpf resumed>) = 6 [pid 12778] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12779] exit_group(0 [pid 12778] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] unlink("./1573/binderfs") = 0 [pid 5066] umount2("./1492/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12780] +++ exited with 0 +++ [pid 12779] <... exit_group resumed>) = ? [pid 5071] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12780, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] close(3 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5066] newfstatat(AT_FDCWD, "./1492/binderfs", [pid 5068] <... restart_syscall resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1573" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./1537", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5066] unlink("./1492/binderfs" [pid 5071] mkdir("./1574", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1537", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12779] +++ exited with 0 +++ [pid 12778] +++ exited with 0 +++ [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] close(3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12779, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12778, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... close resumed>) = 0 [pid 5068] umount2("./1537/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12781 attached [pid 5069] umount2("./1560", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./1537/binderfs", [pid 5066] rmdir("./1492" [pid 12781] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12781 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1518", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 12781] <... set_robust_list resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1560", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] unlink("./1537/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1493", 0777 [pid 12781] chdir("./1574" [pid 5069] <... openat resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1518", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12781] <... chdir resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 12781] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12781] <... prctl resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 5068] close(3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12781] setpgid(0, 0 [pid 5069] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12782 attached [pid 12781] <... setpgid resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] rmdir("./1537" [pid 5067] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12782 [pid 12782] set_robust_list(0x5555686ec660, 24 [pid 12781] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1560/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12782] <... set_robust_list resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12782] chdir("./1493" [pid 12781] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1518/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12781] write(3, "1000", 4 [pid 5069] newfstatat(AT_FDCWD, "./1560/binderfs", [pid 5068] mkdir("./1538", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12782] <... chdir resumed>) = 0 [pid 12781] <... write resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1518/binderfs", [pid 12782] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12782] setpgid(0, 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12782] <... setpgid resumed>) = 0 [pid 12782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12781] close(3 [pid 5069] unlink("./1560/binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12781] <... close resumed>) = 0 [pid 12782] <... openat resumed>) = 3 [pid 12782] write(3, "1000", 4) = 4 [pid 12782] close(3) = 0 [pid 12782] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12781] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] unlink("./1518/binderfs" [pid 12782] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12781] <... symlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 12781] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12783 attached [pid 12782] <... bpf resumed>) = 3 [pid 12781] <... bpf resumed>) = 3 [pid 12783] set_robust_list(0x5555686ec660, 24 [pid 12782] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12781] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12783] <... set_robust_list resumed>) = 0 [pid 12782] <... bpf resumed>) = 4 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12783 [pid 5069] <... close resumed>) = 0 [pid 5067] close(3 [pid 5069] rmdir("./1560" [pid 12782] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12783] chdir("./1538" [pid 12781] <... bpf resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12783] <... chdir resumed>) = 0 [pid 12781] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12782] <... bpf resumed>) = 5 [pid 12783] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] rmdir("./1518" [pid 12783] <... prctl resumed>) = 0 [pid 12783] setpgid(0, 0 [pid 12782] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12783] <... setpgid resumed>) = 0 [pid 12782] <... bpf resumed>) = 6 [pid 12781] <... bpf resumed>) = 5 [pid 12783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12782] exit_group(0 [pid 5069] mkdir("./1561", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 12782] <... exit_group resumed>) = ? [pid 12783] <... openat resumed>) = 3 [pid 12781] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] mkdir("./1519", 0777 [pid 12782] +++ exited with 0 +++ [pid 5067] <... mkdir resumed>) = 0 [pid 12783] write(3, "1000", 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12783] <... write resumed>) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12784 attached [pid 12784] set_robust_list(0x5555686ec660, 24 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12782, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12784] <... set_robust_list resumed>) = 0 [pid 5066] umount2("./1493", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12784] chdir("./1561" [pid 12783] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1493", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12784] <... chdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12784] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12784 [pid 12783] <... close resumed>) = 0 ./strace-static-x86_64: Process 12785 attached [pid 12783] symlink("/dev/binderfs", "./binderfs" [pid 12784] <... prctl resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12785] set_robust_list(0x5555686ec660, 24 [pid 12784] setpgid(0, 0 [pid 12783] <... symlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12785] <... set_robust_list resumed>) = 0 [pid 12784] <... setpgid resumed>) = 0 [pid 12783] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, [pid 12785] chdir("./1519" [pid 12784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12783] <... bpf resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12785 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12784] <... openat resumed>) = 3 [pid 12785] <... chdir resumed>) = 0 [pid 12783] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12781] <... bpf resumed>) = 6 [pid 5066] umount2("./1493/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12785] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12784] write(3, "1000", 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12785] <... prctl resumed>) = 0 [pid 12784] <... write resumed>) = 4 [pid 12783] <... bpf resumed>) = 4 [pid 12781] exit_group(0 [pid 5066] newfstatat(AT_FDCWD, "./1493/binderfs", [pid 12784] close(3 [pid 12785] setpgid(0, 0) = 0 [pid 12784] <... close resumed>) = 0 [pid 12783] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12781] <... exit_group resumed>) = ? [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12785] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12784] symlink("/dev/binderfs", "./binderfs" [pid 12783] <... bpf resumed>) = 5 [pid 5066] unlink("./1493/binderfs" [pid 12785] <... openat resumed>) = 3 [pid 12784] <... symlink resumed>) = 0 [pid 12783] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12781] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12781, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12785] write(3, "1000", 4 [pid 12784] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12785] <... write resumed>) = 4 [pid 5066] <... unlink resumed>) = 0 [pid 12785] close(3 [pid 5066] getdents64(3, [pid 12785] <... close resumed>) = 0 [pid 12784] <... bpf resumed>) = 3 [pid 5071] umount2("./1574", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12785] symlink("/dev/binderfs", "./binderfs" [pid 12784] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12785] <... symlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1574", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] close(3 [pid 12784] <... bpf resumed>) = 4 [pid 12785] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 12784] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(3, "", [pid 5066] rmdir("./1493" [pid 12785] <... bpf resumed>) = 3 [pid 12785] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... rmdir resumed>) = 0 [pid 12785] <... bpf resumed>) = 4 [pid 12785] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12784] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1494", 0777 [pid 12785] <... bpf resumed>) = 5 [pid 12785] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12784] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... mkdir resumed>) = 0 [pid 12785] <... bpf resumed>) = 6 [pid 12783] <... bpf resumed>) = 6 [pid 5071] umount2("./1574/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12784] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12785] exit_group(0 [pid 12784] exit_group(0 [pid 12783] exit_group(0 [pid 5071] newfstatat(AT_FDCWD, "./1574/binderfs", ./strace-static-x86_64: Process 12786 attached [pid 12785] <... exit_group resumed>) = ? [pid 12784] <... exit_group resumed>) = ? [pid 12783] <... exit_group resumed>) = ? [pid 12786] set_robust_list(0x5555686ec660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12786] <... set_robust_list resumed>) = 0 [pid 5071] unlink("./1574/binderfs" [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12786 [pid 12786] chdir("./1494" [pid 5071] <... unlink resumed>) = 0 [pid 12784] +++ exited with 0 +++ [pid 12786] <... chdir resumed>) = 0 [pid 12786] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 12786] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12786] setpgid(0, 0 [pid 5071] close(3 [pid 12786] <... setpgid resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] rmdir("./1574" [pid 12785] +++ exited with 0 +++ [pid 12786] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 12786] write(3, "1000", 4) = 4 [pid 12786] close(3 [pid 12783] +++ exited with 0 +++ [pid 5071] mkdir("./1575", 0777 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12784, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12786] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12783, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12785, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12786] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./1519", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1519", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", [pid 5071] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12786] <... symlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12786] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1561", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1519/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1538", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1561", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1519/binderfs", [pid 5069] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./1538", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5068] newfstatat(3, "", [pid 5067] unlink("./1519/binderfs"./strace-static-x86_64: Process 12787 attached [pid 12786] <... bpf resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12786] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12787 [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 12786] <... bpf resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12786] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] umount2("./1561/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1538/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 12787] set_robust_list(0x5555686ec660, 24 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1561/binderfs", [pid 5068] newfstatat(AT_FDCWD, "./1538/binderfs", [pid 5067] rmdir("./1519" [pid 12787] <... set_robust_list resumed>) = 0 [pid 12786] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12787] chdir("./1575" [pid 5069] unlink("./1561/binderfs" [pid 5068] unlink("./1538/binderfs" [pid 5067] mkdir("./1520", 0777 [pid 12787] <... chdir resumed>) = 0 [pid 12787] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12787] setpgid(0, 0 [pid 5068] <... unlink resumed>) = 0 [pid 12787] <... setpgid resumed>) = 0 [pid 12786] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... mkdir resumed>) = 0 [pid 12787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12786] <... bpf resumed>) = 6 [pid 5069] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 12786] exit_group(0 [pid 5069] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12787] <... openat resumed>) = 3 [pid 12786] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3./strace-static-x86_64: Process 12788 attached [pid 12787] write(3, "1000", 4 [pid 12786] +++ exited with 0 +++ [pid 5069] close(3 [pid 5068] <... close resumed>) = 0 [pid 12787] <... write resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12786, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12787] close(3 [pid 5068] rmdir("./1538" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12788 [pid 12788] set_robust_list(0x5555686ec660, 24) = 0 [pid 12787] <... close resumed>) = 0 [pid 5069] rmdir("./1561" [pid 5068] <... rmdir resumed>) = 0 [pid 12787] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... rmdir resumed>) = 0 [pid 12788] chdir("./1520" [pid 5066] umount2("./1494", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./1539", 0777 [pid 12788] <... chdir resumed>) = 0 [pid 12787] <... symlink resumed>) = 0 [pid 5069] mkdir("./1562", 0777 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12788] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12787] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1494", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12788] <... prctl resumed>) = 0 [pid 12787] <... bpf resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 12787] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12787] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12789 attached [pid 12788] setpgid(0, 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(3, "", [pid 12789] set_robust_list(0x5555686ec660, 24 [pid 12788] <... setpgid resumed>) = 0 [pid 12787] <... bpf resumed>) = 5 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12789] <... set_robust_list resumed>) = 0 [pid 12788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12787] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12790 attached [pid 12789] chdir("./1539" [pid 12788] <... openat resumed>) = 3 [pid 12787] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12789 [pid 5066] getdents64(3, [pid 12790] set_robust_list(0x5555686ec660, 24 [pid 12789] <... chdir resumed>) = 0 [pid 12787] exit_group(0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12790 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12790] <... set_robust_list resumed>) = 0 [pid 12789] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12788] write(3, "1000", 4 [pid 12790] chdir("./1562" [pid 12789] <... prctl resumed>) = 0 [pid 12788] <... write resumed>) = 4 [pid 12787] <... exit_group resumed>) = ? [pid 5066] umount2("./1494/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12789] setpgid(0, 0 [pid 12788] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12789] <... setpgid resumed>) = 0 [pid 12788] <... close resumed>) = 0 [pid 12789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12788] symlink("/dev/binderfs", "./binderfs" [pid 5066] newfstatat(AT_FDCWD, "./1494/binderfs", [pid 12790] <... chdir resumed>) = 0 [pid 12788] <... symlink resumed>) = 0 [pid 12787] +++ exited with 0 +++ [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12790] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12790] setpgid(0, 0 [pid 12789] <... openat resumed>) = 3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12787, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] unlink("./1494/binderfs" [pid 12790] <... setpgid resumed>) = 0 [pid 12789] write(3, "1000", 4 [pid 12788] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12789] <... write resumed>) = 4 [pid 12788] <... bpf resumed>) = 3 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12789] close(3 [pid 12788] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12790] <... openat resumed>) = 3 [pid 12789] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12789] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12790] write(3, "1000", 4 [pid 12788] <... bpf resumed>) = 4 [pid 5071] umount2("./1575", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 12790] <... write resumed>) = 4 [pid 12789] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12790] close(3 [pid 12788] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] openat(AT_FDCWD, "./1575", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 12790] <... close resumed>) = 0 [pid 12789] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] rmdir("./1494" [pid 5071] <... openat resumed>) = 3 [pid 12788] <... bpf resumed>) = 5 [pid 12790] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 12789] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12790] <... symlink resumed>) = 0 [pid 12789] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12788] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1495", 0777 [pid 12790] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12789] <... bpf resumed>) = 4 [pid 12788] <... bpf resumed>) = 6 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12790] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... mkdir resumed>) = 0 [pid 12789] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12788] exit_group(0 [pid 5071] umount2("./1575/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12788] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12791 attached [pid 12790] <... bpf resumed>) = 4 [pid 12789] <... bpf resumed>) = 5 [pid 5071] newfstatat(AT_FDCWD, "./1575/binderfs", [pid 12791] set_robust_list(0x5555686ec660, 24 [pid 12790] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12791] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12791 [pid 12791] chdir("./1495" [pid 12789] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] unlink("./1575/binderfs" [pid 12789] <... bpf resumed>) = 6 [pid 12789] exit_group(0 [pid 12790] <... bpf resumed>) = 5 [pid 12789] <... exit_group resumed>) = ? [pid 12791] <... chdir resumed>) = 0 [pid 12790] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... unlink resumed>) = 0 [pid 12791] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 12791] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12791] setpgid(0, 0 [pid 5071] close(3 [pid 12791] <... setpgid resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] rmdir("./1575" [pid 12791] <... openat resumed>) = 3 [pid 12791] write(3, "1000", 4 [pid 12790] <... bpf resumed>) = 6 [pid 12788] +++ exited with 0 +++ [pid 5071] <... rmdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12788, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] mkdir("./1576", 0777 [pid 12791] <... write resumed>) = 4 [pid 12790] exit_group(0 [pid 12791] close(3 [pid 12790] <... exit_group resumed>) = ? [pid 12791] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12791] symlink("/dev/binderfs", "./binderfs" [pid 12790] +++ exited with 0 +++ [pid 12789] +++ exited with 0 +++ [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./1520", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12790, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12789, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] openat(AT_FDCWD, "./1520", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./1539", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 12791] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./1539", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12791] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12792 attached [pid 12791] <... bpf resumed>) = 3 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12792 [pid 5069] umount2("./1562", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12792] set_robust_list(0x5555686ec660, 24 [pid 12791] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1520/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12792] <... set_robust_list resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1562", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12792] chdir("./1576" [pid 5069] <... openat resumed>) = 3 [pid 12791] <... bpf resumed>) = 4 [pid 5069] newfstatat(3, "", [pid 5068] getdents64(3, [pid 5067] newfstatat(AT_FDCWD, "./1520/binderfs", [pid 12791] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12792] <... chdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] getdents64(3, [pid 5067] unlink("./1520/binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... unlink resumed>) = 0 [pid 12791] <... bpf resumed>) = 5 [pid 5069] umount2("./1562/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5069] newfstatat(AT_FDCWD, "./1562/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] unlink("./1562/binderfs" [pid 5067] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1520" [pid 5069] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 12792] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12791] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... close resumed>) = 0 [pid 5068] umount2("./1539/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1521", 0777 [pid 5069] rmdir("./1562" [pid 12792] <... prctl resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12792] setpgid(0, 0) = 0 [pid 5069] mkdir("./1563", 0777 [pid 5068] newfstatat(AT_FDCWD, "./1539/binderfs", [pid 5067] <... mkdir resumed>) = 0 [pid 12792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] unlink("./1539/binderfs" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12792] <... openat resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12793 attached [pid 12792] write(3, "1000", 4) = 4 [pid 12792] close(3) = 0 [pid 12793] set_robust_list(0x5555686ec660, 24) = 0 [pid 12793] chdir("./1563" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12793 [pid 5068] getdents64(3, [pid 12792] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12794 attached [pid 12793] <... chdir resumed>) = 0 [pid 12794] set_robust_list(0x5555686ec660, 24 [pid 12793] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12791] <... bpf resumed>) = 6 [pid 5068] close(3 [pid 12794] <... set_robust_list resumed>) = 0 [pid 12793] <... prctl resumed>) = 0 [pid 12794] chdir("./1521" [pid 12793] setpgid(0, 0 [pid 12792] <... symlink resumed>) = 0 [pid 12791] exit_group(0 [pid 5068] <... close resumed>) = 0 [pid 12791] <... exit_group resumed>) = ? [pid 5068] rmdir("./1539" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12794 [pid 12794] <... chdir resumed>) = 0 [pid 12793] <... setpgid resumed>) = 0 [pid 12794] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... rmdir resumed>) = 0 [pid 12794] <... prctl resumed>) = 0 [pid 12792] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12794] setpgid(0, 0 [pid 12793] <... openat resumed>) = 3 [pid 12794] <... setpgid resumed>) = 0 [pid 12794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12793] write(3, "1000", 4) = 4 [pid 12793] close(3 [pid 12794] <... openat resumed>) = 3 [pid 12793] <... close resumed>) = 0 [pid 12792] <... bpf resumed>) = 3 [pid 12791] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12791, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12792] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12794] write(3, "1000", 4 [pid 12793] symlink("/dev/binderfs", "./binderfs" [pid 5068] mkdir("./1540", 0777 [pid 5066] umount2("./1495", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12794] <... write resumed>) = 4 [pid 12793] <... symlink resumed>) = 0 [pid 12792] <... bpf resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12794] close(3 [pid 12793] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12792] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] openat(AT_FDCWD, "./1495", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12794] <... close resumed>) = 0 [pid 12793] <... bpf resumed>) = 3 [pid 12794] symlink("/dev/binderfs", "./binderfs" [pid 12792] <... bpf resumed>) = 5 [pid 5066] <... openat resumed>) = 3 [pid 12793] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12795 attached [pid 12794] <... symlink resumed>) = 0 [pid 12792] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12795] set_robust_list(0x5555686ec660, 24 [pid 12793] <... bpf resumed>) = 4 [pid 12792] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12795 [pid 5066] newfstatat(3, "", [pid 12795] <... set_robust_list resumed>) = 0 [pid 12794] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12793] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12792] exit_group(0 [pid 12795] chdir("./1540" [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12795] <... chdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12794] <... bpf resumed>) = 3 [pid 12793] <... bpf resumed>) = 5 [pid 12792] <... exit_group resumed>) = ? [pid 12794] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12793] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12795] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12794] <... bpf resumed>) = 4 [pid 12793] <... bpf resumed>) = 6 [pid 5066] umount2("./1495/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12795] <... prctl resumed>) = 0 [pid 12794] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12795] setpgid(0, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12795] <... setpgid resumed>) = 0 [pid 12793] exit_group(0 [pid 12795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12794] <... bpf resumed>) = 5 [pid 12793] <... exit_group resumed>) = ? [pid 12792] +++ exited with 0 +++ [pid 5066] newfstatat(AT_FDCWD, "./1495/binderfs", [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12792, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12795] write(3, "1000", 4 [pid 12794] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12793] +++ exited with 0 +++ [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12795] <... write resumed>) = 4 [pid 5066] unlink("./1495/binderfs" [pid 12795] close(3) = 0 [pid 12794] <... bpf resumed>) = 6 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12793, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] umount2("./1576", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 12795] symlink("/dev/binderfs", "./binderfs" [pid 12794] exit_group(0 [pid 5069] umount2("./1563", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12794] <... exit_group resumed>) = ? [pid 5066] getdents64(3, [pid 12795] <... symlink resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1576", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./1563", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12795] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... openat resumed>) = 3 [pid 5066] close(3 [pid 12794] +++ exited with 0 +++ [pid 12795] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(3, "", [pid 5066] <... close resumed>) = 0 [pid 12795] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12794, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] rmdir("./1495" [pid 12795] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] mkdir("./1496", 0777 [pid 12795] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1576/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5069] umount2("./1563/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12795] <... bpf resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1521", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1521", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12795] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(AT_FDCWD, "./1576/binderfs", [pid 5069] newfstatat(AT_FDCWD, "./1563/binderfs", [pid 5067] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1563/binderfs" [pid 5067] newfstatat(3, "", [pid 5071] unlink("./1576/binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5069] close(3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... close resumed>) = 0 [pid 5071] close(3./strace-static-x86_64: Process 12796 attached [pid 12795] <... bpf resumed>) = 6 [pid 5069] rmdir("./1563" [pid 5067] getdents64(3, [pid 12796] set_robust_list(0x5555686ec660, 24 [pid 12795] exit_group(0 [pid 5071] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12796 [pid 12796] <... set_robust_list resumed>) = 0 [pid 12795] <... exit_group resumed>) = ? [pid 5071] rmdir("./1576" [pid 5069] <... rmdir resumed>) = 0 [pid 5067] umount2("./1521/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12796] chdir("./1496") = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12796] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12796] setpgid(0, 0) = 0 [pid 12795] +++ exited with 0 +++ [pid 5071] mkdir("./1577", 0777 [pid 5069] mkdir("./1564", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12795, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12796] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] newfstatat(AT_FDCWD, "./1521/binderfs", [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] unlink("./1521/binderfs" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 [pid 12796] <... openat resumed>) = 3 [pid 5068] umount2("./1540", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12798 attached [pid 12796] write(3, "1000", 4./strace-static-x86_64: Process 12797 attached [pid 5067] getdents64(3, [pid 12797] set_robust_list(0x5555686ec660, 24 [pid 12798] set_robust_list(0x5555686ec660, 24 [pid 12796] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12797 [pid 12798] <... set_robust_list resumed>) = 0 [pid 12797] <... set_robust_list resumed>) = 0 [pid 12796] close(3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12798 [pid 5068] openat(AT_FDCWD, "./1540", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 12798] chdir("./1564" [pid 12797] chdir("./1577" [pid 12796] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 12798] <... chdir resumed>) = 0 [pid 12797] <... chdir resumed>) = 0 [pid 12796] symlink("/dev/binderfs", "./binderfs" [pid 5067] rmdir("./1521" [pid 12798] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12797] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12796] <... symlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5067] <... rmdir resumed>) = 0 [pid 12798] <... prctl resumed>) = 0 [pid 12797] <... prctl resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12798] setpgid(0, 0 [pid 5068] getdents64(3, [pid 12798] <... setpgid resumed>) = 0 [pid 12797] setpgid(0, 0 [pid 12796] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] mkdir("./1522", 0777 [pid 12798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12797] <... setpgid resumed>) = 0 [pid 12796] <... bpf resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12798] <... openat resumed>) = 3 [pid 12797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12796] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1540/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 12798] write(3, "1000", 4 [pid 12797] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12798] <... write resumed>) = 4 [pid 12797] write(3, "1000", 4 [pid 5068] newfstatat(AT_FDCWD, "./1540/binderfs", [pid 12798] close(3 [pid 12797] <... write resumed>) = 4 [pid 12797] close(3 [pid 12796] <... bpf resumed>) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12798] <... close resumed>) = 0 [pid 12797] <... close resumed>) = 0 [pid 12796] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12798] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12797] symlink("/dev/binderfs", "./binderfs" [pid 12796] <... bpf resumed>) = 5 [pid 5068] unlink("./1540/binderfs"./strace-static-x86_64: Process 12799 attached [pid 12798] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12797] <... symlink resumed>) = 0 [pid 12796] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... unlink resumed>) = 0 [pid 12799] set_robust_list(0x5555686ec660, 24 [pid 12798] <... bpf resumed>) = 3 [pid 12797] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12796] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 12799] <... set_robust_list resumed>) = 0 [pid 12798] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12799 [pid 12799] chdir("./1522" [pid 12797] <... bpf resumed>) = 3 [pid 12796] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12797] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] close(3 [pid 12799] <... chdir resumed>) = 0 [pid 12798] <... bpf resumed>) = 4 [pid 12797] <... bpf resumed>) = 4 [pid 12796] <... exit_group resumed>) = ? [pid 5068] <... close resumed>) = 0 [pid 12799] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12797] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12799] <... prctl resumed>) = 0 [pid 12798] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12797] <... bpf resumed>) = 5 [pid 12796] +++ exited with 0 +++ [pid 5068] rmdir("./1540" [pid 12799] setpgid(0, 0) = 0 [pid 12798] <... bpf resumed>) = 5 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12796, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... restart_syscall resumed>) = 0 [pid 5068] mkdir("./1541", 0777 [pid 12797] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12799] <... openat resumed>) = 3 [pid 12798] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] umount2("./1496", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12799] write(3, "1000", 4) = 4 [pid 12799] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] openat(AT_FDCWD, "./1496", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12799] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 ./strace-static-x86_64: Process 12800 attached [pid 5066] newfstatat(3, "", [pid 12800] set_robust_list(0x5555686ec660, 24 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12800] <... set_robust_list resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12800 [pid 5066] getdents64(3, [pid 12799] symlink("/dev/binderfs", "./binderfs" [pid 12800] chdir("./1541" [pid 12799] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12800] <... chdir resumed>) = 0 [pid 12799] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] umount2("./1496/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12800] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12799] <... bpf resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12800] <... prctl resumed>) = 0 [pid 12799] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12800] setpgid(0, 0 [pid 12799] <... bpf resumed>) = 4 [pid 5066] newfstatat(AT_FDCWD, "./1496/binderfs", [pid 12800] <... setpgid resumed>) = 0 [pid 12799] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] unlink("./1496/binderfs") = 0 [pid 12800] <... openat resumed>) = 3 [pid 12799] <... bpf resumed>) = 5 [pid 12799] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12800] write(3, "1000", 4) = 4 [pid 12800] close(3) = 0 [pid 12800] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12800] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12800] <... bpf resumed>) = 3 [pid 12800] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] close(3 [pid 12800] <... bpf resumed>) = 4 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1496" [pid 12800] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12797] <... bpf resumed>) = 6 [pid 12800] <... bpf resumed>) = 5 [pid 12799] <... bpf resumed>) = 6 [pid 12798] <... bpf resumed>) = 6 [pid 12797] exit_group(0 [pid 5066] <... rmdir resumed>) = 0 [pid 12799] exit_group(0 [pid 12798] exit_group(0 [pid 12797] <... exit_group resumed>) = ? [pid 5066] mkdir("./1497", 0777 [pid 12799] <... exit_group resumed>) = ? [pid 12798] <... exit_group resumed>) = ? [pid 12797] +++ exited with 0 +++ [pid 5066] <... mkdir resumed>) = 0 [pid 12800] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12800] exit_group(0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12800] <... exit_group resumed>) = ? [pid 12799] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12797, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12801 attached [pid 12801] set_robust_list(0x5555686ec660, 24 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12799, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12801] <... set_robust_list resumed>) = 0 [pid 5071] umount2("./1577", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1577", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1522", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12801] chdir("./1497" [pid 5071] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12801 [pid 5067] openat(AT_FDCWD, "./1522", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", [pid 5071] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12801] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1522/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12801] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12800] +++ exited with 0 +++ [pid 12798] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 12801] <... prctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12798, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12800, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12801] setpgid(0, 0 [pid 5067] newfstatat(AT_FDCWD, "./1522/binderfs", [pid 5071] umount2("./1577/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12801] <... setpgid resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1541", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1522/binderfs" [pid 12801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(AT_FDCWD, "./1577/binderfs", [pid 12801] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./1564", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1541", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12801] write(3, "1000", 4 [pid 5071] unlink("./1577/binderfs" [pid 5069] openat(AT_FDCWD, "./1564", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 12801] <... write resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12801] close(3 [pid 5071] getdents64(3, [pid 5069] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] close(3 [pid 12801] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 12801] symlink("/dev/binderfs", "./binderfs" [pid 5071] close(3 [pid 5069] getdents64(3, [pid 5067] rmdir("./1522" [pid 12801] <... symlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12801] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1577" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1541/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12801] <... bpf resumed>) = 3 [pid 5071] mkdir("./1578", 0777 [pid 12801] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1564/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1541/binderfs", [pid 5067] mkdir("./1523", 0777 [pid 12801] <... bpf resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] newfstatat(AT_FDCWD, "./1564/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12801] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1541/binderfs" [pid 5069] unlink("./1564/binderfs" [pid 5068] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12802 attached [pid 5069] <... unlink resumed>) = 0 [pid 12801] <... bpf resumed>) = 5 [pid 12802] set_robust_list(0x5555686ec660, 24) = 0 [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 12802] chdir("./1578" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12802] <... chdir resumed>) = 0 [pid 12801] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12802 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12802] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] close(3 [pid 5068] <... close resumed>) = 0 [pid 12802] <... prctl resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] rmdir("./1541" [pid 12802] setpgid(0, 0 [pid 5069] rmdir("./1564" [pid 5068] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 12803 attached [pid 12801] <... bpf resumed>) = 6 [pid 12802] <... setpgid resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1542", 0777 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12803 [pid 12803] set_robust_list(0x5555686ec660, 24 [pid 12802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12803] <... set_robust_list resumed>) = 0 [pid 12802] <... openat resumed>) = 3 [pid 12801] exit_group(0 [pid 12803] chdir("./1523" [pid 5068] <... mkdir resumed>) = 0 [pid 12803] <... chdir resumed>) = 0 [pid 12802] write(3, "1000", 4 [pid 12801] <... exit_group resumed>) = ? [pid 5069] mkdir("./1565", 0777 [pid 12803] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12802] <... write resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12802] close(3 [pid 12803] <... prctl resumed>) = 0 [pid 12802] <... close resumed>) = 0 [pid 12803] setpgid(0, 0 [pid 12802] symlink("/dev/binderfs", "./binderfs" [pid 12801] +++ exited with 0 +++ [pid 5069] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12804 attached [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12804] set_robust_list(0x5555686ec660, 24 [pid 12803] <... setpgid resumed>) = 0 [pid 12802] <... symlink resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12801, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12804] <... set_robust_list resumed>) = 0 [pid 12803] <... openat resumed>) = 3 [pid 12802] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12804 ./strace-static-x86_64: Process 12805 attached [pid 12804] chdir("./1542" [pid 12805] set_robust_list(0x5555686ec660, 24 [pid 12804] <... chdir resumed>) = 0 [pid 12803] write(3, "1000", 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12805 [pid 12805] <... set_robust_list resumed>) = 0 [pid 12804] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12803] <... write resumed>) = 4 [pid 12803] close(3 [pid 12804] <... prctl resumed>) = 0 [pid 12803] <... close resumed>) = 0 [pid 5066] umount2("./1497", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12805] chdir("./1565" [pid 12804] setpgid(0, 0 [pid 12803] symlink("/dev/binderfs", "./binderfs" [pid 12802] <... bpf resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12805] <... chdir resumed>) = 0 [pid 12804] <... setpgid resumed>) = 0 [pid 12803] <... symlink resumed>) = 0 [pid 12805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12802] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12805] setpgid(0, 0) = 0 [pid 12803] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] openat(AT_FDCWD, "./1497", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12804] <... openat resumed>) = 3 [pid 12803] <... bpf resumed>) = 3 [pid 12802] <... bpf resumed>) = 4 [pid 5066] <... openat resumed>) = 3 [pid 12803] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(3, "", [pid 12805] <... openat resumed>) = 3 [pid 12804] write(3, "1000", 4 [pid 12803] <... bpf resumed>) = 4 [pid 12802] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12805] write(3, "1000", 4 [pid 12804] <... write resumed>) = 4 [pid 12803] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] getdents64(3, [pid 12805] <... write resumed>) = 4 [pid 12804] close(3 [pid 12802] <... bpf resumed>) = 5 [pid 12805] close(3 [pid 12804] <... close resumed>) = 0 [pid 12803] <... bpf resumed>) = 5 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12804] symlink("/dev/binderfs", "./binderfs" [pid 12803] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] umount2("./1497/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12805] <... close resumed>) = 0 [pid 12803] <... bpf resumed>) = 6 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1497/binderfs", [pid 12805] symlink("/dev/binderfs", "./binderfs" [pid 12804] <... symlink resumed>) = 0 [pid 12802] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12805] <... symlink resumed>) = 0 [pid 12803] exit_group(0 [pid 5066] unlink("./1497/binderfs" [pid 12803] <... exit_group resumed>) = ? [pid 12802] <... bpf resumed>) = 6 [pid 5066] <... unlink resumed>) = 0 [pid 12805] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12804] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12802] exit_group(0 [pid 12804] <... bpf resumed>) = 3 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12804] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] close(3 [pid 12805] <... bpf resumed>) = 3 [pid 12804] <... bpf resumed>) = 4 [pid 12802] <... exit_group resumed>) = ? [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1497" [pid 12805] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12804] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... rmdir resumed>) = 0 [pid 12805] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12804] <... bpf resumed>) = 5 [pid 12805] <... bpf resumed>) = 5 [pid 5066] mkdir("./1498", 0777 [pid 12804] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12805] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12806 attached [pid 12803] +++ exited with 0 +++ [pid 12802] +++ exited with 0 +++ [pid 12806] set_robust_list(0x5555686ec660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12802, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12806 [pid 12806] <... set_robust_list resumed>) = 0 [pid 12805] <... bpf resumed>) = 6 [pid 12804] <... bpf resumed>) = 6 [pid 12806] chdir("./1498" [pid 12805] exit_group(0 [pid 12804] exit_group(0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12803, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12806] <... chdir resumed>) = 0 [pid 12805] <... exit_group resumed>) = ? [pid 5071] umount2("./1578", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1523", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12806] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12804] <... exit_group resumed>) = ? [pid 12806] <... prctl resumed>) = 0 [pid 12805] +++ exited with 0 +++ [pid 12804] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12806] setpgid(0, 0 [pid 5067] openat(AT_FDCWD, "./1523", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./1578", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12805, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12804, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12806] <... setpgid resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... restart_syscall resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5067] newfstatat(3, "", [pid 12806] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] umount2("./1542", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./1565", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 12806] write(3, "1000", 4) = 4 [pid 12806] close(3) = 0 [pid 12806] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 12806] <... symlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12806] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1578/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] openat(AT_FDCWD, "./1565", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./1542", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1523/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12806] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(3, "", [pid 12806] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] newfstatat(AT_FDCWD, "./1578/binderfs", [pid 5069] newfstatat(3, "", [pid 5067] newfstatat(AT_FDCWD, "./1523/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 12806] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12806] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] unlink("./1578/binderfs" [pid 5069] getdents64(3, [pid 5067] unlink("./1523/binderfs" [pid 5068] umount2("./1542/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... unlink resumed>) = 0 [pid 12806] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1565/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5071] getdents64(3, [pid 5068] newfstatat(AT_FDCWD, "./1542/binderfs", [pid 12806] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12806] <... bpf resumed>) = 6 [pid 5069] newfstatat(AT_FDCWD, "./1565/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] close(3 [pid 12806] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1542/binderfs" [pid 5067] <... close resumed>) = 0 [pid 5071] close(3 [pid 12806] <... exit_group resumed>) = ? [pid 5069] unlink("./1565/binderfs" [pid 5068] <... unlink resumed>) = 0 [pid 5067] rmdir("./1523" [pid 5071] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] rmdir("./1578") = 0 [pid 12806] +++ exited with 0 +++ [pid 5069] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] mkdir("./1524", 0777 [pid 5071] mkdir("./1579", 0777 [pid 5069] getdents64(3, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12806, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1498", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1498", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] close(3 [pid 5068] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] rmdir("./1565") = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] umount2("./1498/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./1542" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1498/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] mkdir("./1543", 0777 [pid 5066] unlink("./1498/binderfs"./strace-static-x86_64: Process 12807 attached [pid 5069] mkdir("./1566", 0777 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12807 [pid 5066] <... unlink resumed>) = 0 [pid 12807] set_robust_list(0x5555686ec660, 24) = 0 [pid 5069] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12808 attached [pid 12807] chdir("./1524" [pid 5068] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12808] set_robust_list(0x5555686ec660, 24) = 0 [pid 12807] <... chdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12807] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12808] chdir("./1579" [pid 12807] <... prctl resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12808 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] close(3 [pid 12807] setpgid(0, 0 [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 12809 attached [pid 12808] <... chdir resumed>) = 0 [pid 12807] <... setpgid resumed>) = 0 [pid 5066] rmdir("./1498"./strace-static-x86_64: Process 12810 attached [pid 12809] set_robust_list(0x5555686ec660, 24 [pid 12808] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12809 [pid 5066] <... rmdir resumed>) = 0 [pid 12809] <... set_robust_list resumed>) = 0 [pid 12808] <... prctl resumed>) = 0 [pid 12810] set_robust_list(0x5555686ec660, 24 [pid 12808] setpgid(0, 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12810 [pid 12809] chdir("./1566" [pid 5066] mkdir("./1499", 0777 [pid 12810] <... set_robust_list resumed>) = 0 [pid 12809] <... chdir resumed>) = 0 [pid 12808] <... setpgid resumed>) = 0 [pid 12807] <... openat resumed>) = 3 [pid 12809] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... mkdir resumed>) = 0 [pid 12808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12810] chdir("./1543" [pid 12809] <... prctl resumed>) = 0 [pid 12808] <... openat resumed>) = 3 [pid 12807] write(3, "1000", 4./strace-static-x86_64: Process 12811 attached [pid 12810] <... chdir resumed>) = 0 [pid 12809] setpgid(0, 0 [pid 12808] write(3, "1000", 4 [pid 12807] <... write resumed>) = 4 [pid 12810] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12809] <... setpgid resumed>) = 0 [pid 12808] <... write resumed>) = 4 [pid 12807] close(3 [pid 12811] set_robust_list(0x5555686ec660, 24 [pid 12810] <... prctl resumed>) = 0 [pid 12809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12808] close(3 [pid 12807] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12811 [pid 12811] <... set_robust_list resumed>) = 0 [pid 12811] chdir("./1499" [pid 12810] setpgid(0, 0 [pid 12809] <... openat resumed>) = 3 [pid 12808] <... close resumed>) = 0 [pid 12807] symlink("/dev/binderfs", "./binderfs" [pid 12811] <... chdir resumed>) = 0 [pid 12810] <... setpgid resumed>) = 0 [pid 12809] write(3, "1000", 4 [pid 12808] symlink("/dev/binderfs", "./binderfs" [pid 12807] <... symlink resumed>) = 0 [pid 12811] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12810] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12809] <... write resumed>) = 4 [pid 12808] <... symlink resumed>) = 0 [pid 12807] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12811] <... prctl resumed>) = 0 [pid 12810] <... openat resumed>) = 3 [pid 12809] close(3 [pid 12808] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12807] <... bpf resumed>) = 3 [pid 12811] setpgid(0, 0 [pid 12810] write(3, "1000", 4 [pid 12809] <... close resumed>) = 0 [pid 12811] <... setpgid resumed>) = 0 [pid 12809] symlink("/dev/binderfs", "./binderfs" [pid 12808] <... bpf resumed>) = 3 [pid 12807] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12810] <... write resumed>) = 4 [pid 12811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12810] close(3 [pid 12809] <... symlink resumed>) = 0 [pid 12808] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12807] <... bpf resumed>) = 4 [pid 12811] <... openat resumed>) = 3 [pid 12810] <... close resumed>) = 0 [pid 12809] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12808] <... bpf resumed>) = 4 [pid 12811] write(3, "1000", 4 [pid 12810] symlink("/dev/binderfs", "./binderfs" [pid 12811] <... write resumed>) = 4 [pid 12809] <... bpf resumed>) = 3 [pid 12808] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12807] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12811] close(3 [pid 12810] <... symlink resumed>) = 0 [pid 12809] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12808] <... bpf resumed>) = 5 [pid 12807] <... bpf resumed>) = 5 [pid 12811] <... close resumed>) = 0 [pid 12810] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12809] <... bpf resumed>) = 4 [pid 12811] symlink("/dev/binderfs", "./binderfs" [pid 12810] <... bpf resumed>) = 3 [pid 12809] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12808] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12807] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12811] <... symlink resumed>) = 0 [pid 12810] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12809] <... bpf resumed>) = 5 [pid 12808] <... bpf resumed>) = 6 [pid 12807] <... bpf resumed>) = 6 [pid 12810] <... bpf resumed>) = 4 [pid 12807] exit_group(0 [pid 12810] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12808] exit_group(0 [pid 12811] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12809] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12808] <... exit_group resumed>) = ? [pid 12807] <... exit_group resumed>) = ? [pid 12811] <... bpf resumed>) = 3 [pid 12810] <... bpf resumed>) = 5 [pid 12809] <... bpf resumed>) = 6 [pid 12808] +++ exited with 0 +++ [pid 12809] exit_group(0 [pid 12811] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12810] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12809] <... exit_group resumed>) = ? [pid 12807] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12808, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12811] <... bpf resumed>) = 4 [pid 12810] <... bpf resumed>) = 6 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12807, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] umount2("./1524", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12810] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12811] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] openat(AT_FDCWD, "./1524", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12810] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 12811] <... bpf resumed>) = 5 [pid 5071] umount2("./1579", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1524/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12811] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12810] +++ exited with 0 +++ [pid 12809] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1579", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12809, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12810, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1524/binderfs", [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./1566", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1524/binderfs" [pid 5068] umount2("./1543", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1579/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1579/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./1579/binderfs" [pid 5069] openat(AT_FDCWD, "./1566", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./1543", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... unlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 5069] newfstatat(3, "", [pid 5068] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] close(3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] rmdir("./1524" [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1579" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1543/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1580", 0777 [pid 5069] umount2("./1566/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 5067] mkdir("./1525", 0777 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1543/binderfs", [pid 5067] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] newfstatat(AT_FDCWD, "./1566/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12812 attached ./strace-static-x86_64: Process 12813 attached [pid 12811] <... bpf resumed>) = 6 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12813 [pid 5069] unlink("./1566/binderfs" [pid 5068] unlink("./1543/binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12812 [pid 12812] set_robust_list(0x5555686ec660, 24 [pid 12813] set_robust_list(0x5555686ec660, 24 [pid 12811] exit_group(0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12812] <... set_robust_list resumed>) = 0 [pid 12813] <... set_robust_list resumed>) = 0 [pid 12811] <... exit_group resumed>) = ? [pid 12812] chdir("./1525" [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 12812] <... chdir resumed>) = 0 [pid 12813] chdir("./1580" [pid 12812] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12813] <... chdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12812] <... prctl resumed>) = 0 [pid 12813] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] close(3 [pid 5068] close(3 [pid 12812] setpgid(0, 0 [pid 12813] <... prctl resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12812] <... setpgid resumed>) = 0 [pid 12813] setpgid(0, 0 [pid 12811] +++ exited with 0 +++ [pid 5069] rmdir("./1566" [pid 5068] rmdir("./1543" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12811, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12813] <... setpgid resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] mkdir("./1567", 0777 [pid 12812] <... openat resumed>) = 3 [pid 12813] <... openat resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12812] write(3, "1000", 4 [pid 5066] umount2("./1499", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12812] <... write resumed>) = 4 [pid 12813] write(3, "1000", 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] mkdir("./1544", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12812] close(3 [pid 12813] <... write resumed>) = 4 [pid 5066] openat(AT_FDCWD, "./1499", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12812] <... close resumed>) = 0 [pid 12813] close(3 [pid 5066] <... openat resumed>) = 3 [pid 12812] symlink("/dev/binderfs", "./binderfs" [pid 12813] <... close resumed>) = 0 [pid 12812] <... symlink resumed>) = 0 [pid 12813] symlink("/dev/binderfs", "./binderfs" [pid 5066] newfstatat(3, "", [pid 12813] <... symlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12812] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12814 attached [pid 12813] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12814 [pid 12814] set_robust_list(0x5555686ec660, 24 [pid 12812] <... bpf resumed>) = 3 [pid 12813] <... bpf resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12814] <... set_robust_list resumed>) = 0 [pid 12812] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12813] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12814] chdir("./1567" [pid 5066] umount2("./1499/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12815 attached [pid 12814] <... chdir resumed>) = 0 [pid 12812] <... bpf resumed>) = 4 [pid 12813] <... bpf resumed>) = 4 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12815 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12815] set_robust_list(0x5555686ec660, 24 [pid 12814] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12812] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12813] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] newfstatat(AT_FDCWD, "./1499/binderfs", [pid 12815] <... set_robust_list resumed>) = 0 [pid 12814] <... prctl resumed>) = 0 [pid 12812] <... bpf resumed>) = 5 [pid 12815] chdir("./1544" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12814] setpgid(0, 0 [pid 12812] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] unlink("./1499/binderfs" [pid 12815] <... chdir resumed>) = 0 [pid 12814] <... setpgid resumed>) = 0 [pid 12815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12815] setpgid(0, 0 [pid 12814] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12815] <... setpgid resumed>) = 0 [pid 12815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12813] <... bpf resumed>) = 5 [pid 12815] <... openat resumed>) = 3 [pid 12815] write(3, "1000", 4) = 4 [pid 12815] close(3 [pid 12814] <... openat resumed>) = 3 [pid 12812] <... bpf resumed>) = 6 [pid 12813] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... unlink resumed>) = 0 [pid 12814] write(3, "1000", 4 [pid 5066] getdents64(3, [pid 12815] <... close resumed>) = 0 [pid 12814] <... write resumed>) = 4 [pid 12812] exit_group(0 [pid 12813] <... bpf resumed>) = 6 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12815] symlink("/dev/binderfs", "./binderfs" [pid 12814] close(3 [pid 12812] <... exit_group resumed>) = ? [pid 12814] <... close resumed>) = 0 [pid 12813] exit_group(0 [pid 5066] close(3 [pid 12815] <... symlink resumed>) = 0 [pid 12814] symlink("/dev/binderfs", "./binderfs" [pid 12813] <... exit_group resumed>) = ? [pid 5066] <... close resumed>) = 0 [pid 12815] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12814] <... symlink resumed>) = 0 [pid 5066] rmdir("./1499" [pid 12815] <... bpf resumed>) = 3 [pid 12814] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12815] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12814] <... bpf resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 12815] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12814] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5066] mkdir("./1500", 0777 [pid 12815] <... bpf resumed>) = 5 [pid 5066] <... mkdir resumed>) = 0 [pid 12814] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12815] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12814] <... bpf resumed>) = 5 [pid 12814] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12816 attached [pid 12812] +++ exited with 0 +++ [pid 12813] +++ exited with 0 +++ [pid 12816] set_robust_list(0x5555686ec660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12813, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12816 [pid 12816] <... set_robust_list resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12812, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12816] chdir("./1500" [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12816] <... chdir resumed>) = 0 [pid 5071] umount2("./1580", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... restart_syscall resumed>) = 0 [pid 12816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12816] <... prctl resumed>) = 0 [pid 12816] setpgid(0, 0 [pid 5071] openat(AT_FDCWD, "./1580", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1525", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12816] <... setpgid resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12815] <... bpf resumed>) = 6 [pid 12814] <... bpf resumed>) = 6 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12816] <... openat resumed>) = 3 [pid 12815] exit_group(0 [pid 12814] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] openat(AT_FDCWD, "./1525", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12816] write(3, "1000", 4 [pid 12815] <... exit_group resumed>) = ? [pid 12814] <... exit_group resumed>) = ? [pid 5071] getdents64(3, [pid 5067] <... openat resumed>) = 3 [pid 12816] <... write resumed>) = 4 [pid 12815] +++ exited with 0 +++ [pid 12814] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(3, "", [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12814, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12815, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12816] close(3 [pid 5071] umount2("./1580/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12816] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12816] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./1580/binderfs", [pid 5067] getdents64(3, [pid 12816] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./1567", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] unlink("./1580/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1544", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1525/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12816] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1567", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12816] <... bpf resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12816] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] openat(AT_FDCWD, "./1544", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12816] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 5069] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] newfstatat(AT_FDCWD, "./1525/binderfs", [pid 12816] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] newfstatat(3, "", [pid 12816] <... bpf resumed>) = 5 [pid 5069] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12816] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5067] unlink("./1525/binderfs" [pid 5071] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5071] rmdir("./1580" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 12816] <... bpf resumed>) = 6 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] umount2("./1567/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1544/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] mkdir("./1581", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12816] exit_group(0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 5069] newfstatat(AT_FDCWD, "./1567/binderfs", [pid 5067] <... close resumed>) = 0 [pid 12816] <... exit_group resumed>) = ? [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1544/binderfs", [pid 5067] rmdir("./1525" [pid 5069] unlink("./1567/binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12816] +++ exited with 0 +++ [pid 5068] unlink("./1544/binderfs" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12816, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... unlink resumed>) = 0 [pid 5067] mkdir("./1526", 0777./strace-static-x86_64: Process 12817 attached [pid 5069] getdents64(3, [pid 12817] set_robust_list(0x5555686ec660, 24) = 0 [pid 5068] getdents64(3, [pid 12817] chdir("./1581" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 12817] <... chdir resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12817] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] rmdir("./1544" [pid 12817] <... prctl resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12817 [pid 5069] close(3 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] umount2("./1500", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12817] setpgid(0, 0 [pid 5069] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12817] <... setpgid resumed>) = 0 [pid 5069] rmdir("./1567" [pid 12817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] mkdir("./1545", 0777 [pid 5066] openat(AT_FDCWD, "./1500", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 12818 attached [pid 12817] <... openat resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 5069] mkdir("./1568", 0777 [pid 12818] set_robust_list(0x5555686ec660, 24) = 0 [pid 12817] write(3, "1000", 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12817] <... write resumed>) = 4 [pid 5066] getdents64(3, [pid 12818] chdir("./1526" [pid 12817] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12817] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1500/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12818] <... chdir resumed>) = 0 [pid 12817] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12819 attached [pid 12818] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12817] <... symlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1500/binderfs", [pid 12818] <... prctl resumed>) = 0 [pid 12819] set_robust_list(0x5555686ec660, 24 [pid 12818] setpgid(0, 0 [pid 12817] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12819 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12818 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12819] <... set_robust_list resumed>) = 0 [pid 12818] <... setpgid resumed>) = 0 [pid 12817] <... bpf resumed>) = 3 [pid 12819] chdir("./1545" [pid 12817] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] unlink("./1500/binderfs" [pid 12819] <... chdir resumed>) = 0 [pid 12818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12817] <... bpf resumed>) = 4 [pid 5066] <... unlink resumed>) = 0 [pid 12819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12817] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12819] setpgid(0, 0 [pid 12818] <... openat resumed>) = 3 [pid 12817] <... bpf resumed>) = 5 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12820 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12820 [pid 12819] <... setpgid resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12820] set_robust_list(0x5555686ec660, 24 [pid 12817] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12820] <... set_robust_list resumed>) = 0 [pid 12819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] close(3 [pid 12820] chdir("./1568" [pid 12819] <... openat resumed>) = 3 [pid 12818] write(3, "1000", 4 [pid 12817] <... bpf resumed>) = 6 [pid 5066] <... close resumed>) = 0 [pid 12820] <... chdir resumed>) = 0 [pid 12818] <... write resumed>) = 4 [pid 12817] exit_group(0 [pid 5066] rmdir("./1500" [pid 12820] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12819] write(3, "1000", 4 [pid 12818] close(3 [pid 12817] <... exit_group resumed>) = ? [pid 5066] <... rmdir resumed>) = 0 [pid 12820] <... prctl resumed>) = 0 [pid 12819] <... write resumed>) = 4 [pid 12818] <... close resumed>) = 0 [pid 12820] setpgid(0, 0) = 0 [pid 12820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12817] +++ exited with 0 +++ [pid 12820] <... openat resumed>) = 3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12817, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12820] write(3, "1000", 4 [pid 12819] close(3 [pid 12818] symlink("/dev/binderfs", "./binderfs" [pid 5066] mkdir("./1501", 0777 [pid 12820] <... write resumed>) = 4 [pid 12819] <... close resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12820] close(3 [pid 12818] <... symlink resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 12820] <... close resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12820] symlink("/dev/binderfs", "./binderfs" [pid 12819] symlink("/dev/binderfs", "./binderfs" [pid 12818] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12820] <... symlink resumed>) = 0 [pid 12819] <... symlink resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12818] <... bpf resumed>) = 3 [pid 12820] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12819] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12818] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1581", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12820] <... bpf resumed>) = 3 [pid 12819] <... bpf resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12820] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12818] <... bpf resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./1581", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12819] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12821 attached [pid 12820] <... bpf resumed>) = 4 [pid 12818] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... openat resumed>) = 3 [pid 12821] set_robust_list(0x5555686ec660, 24 [pid 12820] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12819] <... bpf resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 12821] <... set_robust_list resumed>) = 0 [pid 12818] <... bpf resumed>) = 5 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12821 [pid 12820] <... bpf resumed>) = 5 [pid 12819] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12821] chdir("./1501" [pid 12820] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12819] <... bpf resumed>) = 5 [pid 12818] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 12821] <... chdir resumed>) = 0 [pid 12820] <... bpf resumed>) = 6 [pid 12821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12821] setpgid(0, 0 [pid 12819] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12821] <... setpgid resumed>) = 0 [pid 12819] <... bpf resumed>) = 6 [pid 12818] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12820] exit_group(0 [pid 12821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12820] <... exit_group resumed>) = ? [pid 12819] exit_group(0 [pid 5071] umount2("./1581/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12819] <... exit_group resumed>) = ? [pid 12818] exit_group(0 [pid 12821] <... openat resumed>) = 3 [pid 12819] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12818] <... exit_group resumed>) = ? [pid 5071] newfstatat(AT_FDCWD, "./1581/binderfs", [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12819, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] umount2("./1545", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./1545", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 12821] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12821] <... write resumed>) = 4 [pid 5071] unlink("./1581/binderfs" [pid 5068] umount2("./1545/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1545/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1545/binderfs" [pid 12821] close(3 [pid 12820] +++ exited with 0 +++ [pid 12818] +++ exited with 0 +++ [pid 5071] <... unlink resumed>) = 0 [pid 12821] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12820, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... unlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12818, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12821] symlink("/dev/binderfs", "./binderfs" [pid 5068] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./1526", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5071] close(3 [pid 5067] openat(AT_FDCWD, "./1526", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 12821] <... symlink resumed>) = 0 [pid 5068] rmdir("./1545" [pid 5067] <... openat resumed>) = 3 [pid 12821] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1581" [pid 5069] umount2("./1568", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(3, "", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12821] <... bpf resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1568", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./1546", 0777 [pid 5067] getdents64(3, [pid 12821] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1582", 0777 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] newfstatat(3, "", [pid 5068] <... mkdir resumed>) = 0 [pid 5067] umount2("./1526/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12821] <... bpf resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1526/binderfs", [pid 12821] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12821] <... bpf resumed>) = 5 ./strace-static-x86_64: Process 12822 attached [pid 12822] set_robust_list(0x5555686ec660, 24) = 0 ./strace-static-x86_64: Process 12823 attached [pid 12822] chdir("./1582" [pid 12821] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12822 [pid 5069] umount2("./1568/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1526/binderfs" [pid 12823] set_robust_list(0x5555686ec660, 24 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12822] <... chdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1568/binderfs", [pid 12822] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... unlink resumed>) = 0 [pid 12822] <... prctl resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12822] setpgid(0, 0 [pid 12823] <... set_robust_list resumed>) = 0 [pid 12822] <... setpgid resumed>) = 0 [pid 5067] getdents64(3, [pid 12823] chdir("./1546" [pid 12822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] unlink("./1568/binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] close(3 [pid 12822] <... openat resumed>) = 3 [pid 12821] <... bpf resumed>) = 6 [pid 5067] <... close resumed>) = 0 [pid 12823] <... chdir resumed>) = 0 [pid 12823] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12822] write(3, "1000", 4 [pid 12823] <... prctl resumed>) = 0 [pid 12822] <... write resumed>) = 4 [pid 12821] exit_group(0 [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12823 [pid 5067] rmdir("./1526" [pid 12823] setpgid(0, 0 [pid 12822] close(3) = 0 [pid 12822] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 12823] <... setpgid resumed>) = 0 [pid 12822] <... symlink resumed>) = 0 [pid 12821] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12822] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12821] +++ exited with 0 +++ [pid 5069] close(3 [pid 5067] mkdir("./1527", 0777 [pid 12823] <... openat resumed>) = 3 [pid 12822] <... bpf resumed>) = 3 [pid 12823] write(3, "1000", 4 [pid 12822] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 12823] <... write resumed>) = 4 [pid 12822] <... bpf resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12821, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12823] close(3 [pid 5069] rmdir("./1568" [pid 5066] umount2("./1501", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12823] <... close resumed>) = 0 [pid 12822] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] mkdir("./1569", 0777 [pid 5066] openat(AT_FDCWD, "./1501", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12823] symlink("/dev/binderfs", "./binderfs" [pid 12822] <... bpf resumed>) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12823] <... symlink resumed>) = 0 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12823] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12822] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12824 ./strace-static-x86_64: Process 12824 attached [pid 12823] <... bpf resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12822] <... bpf resumed>) = 6 [pid 5066] getdents64(3, [pid 12824] set_robust_list(0x5555686ec660, 24 [pid 12823] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12822] exit_group(0 [pid 12824] <... set_robust_list resumed>) = 0 [pid 12823] <... bpf resumed>) = 4 [pid 12822] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12825 attached [pid 12824] chdir("./1527" [pid 5066] umount2("./1501/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12825] set_robust_list(0x5555686ec660, 24 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12825] <... set_robust_list resumed>) = 0 [pid 12822] +++ exited with 0 +++ [pid 12823] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12824] <... chdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12825 [pid 5066] newfstatat(AT_FDCWD, "./1501/binderfs", [pid 12825] chdir("./1569" [pid 12824] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12822, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] umount2("./1582", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1582", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12824] <... prctl resumed>) = 0 [pid 12823] <... bpf resumed>) = 5 [pid 5071] <... openat resumed>) = 3 [pid 12824] setpgid(0, 0 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12825] <... chdir resumed>) = 0 [pid 12824] <... setpgid resumed>) = 0 [pid 12823] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(3, [pid 5066] unlink("./1501/binderfs" [pid 12825] <... prctl resumed>) = 0 [pid 12824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... unlink resumed>) = 0 [pid 12825] setpgid(0, 0 [pid 5066] getdents64(3, [pid 12825] <... setpgid resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12824] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] close(3 [pid 12824] write(3, "1000", 4 [pid 12825] <... openat resumed>) = 3 [pid 12824] <... write resumed>) = 4 [pid 12823] <... bpf resumed>) = 6 [pid 5071] umount2("./1582/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 12824] close(3 [pid 5066] rmdir("./1501" [pid 12824] <... close resumed>) = 0 [pid 12823] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12824] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12825] write(3, "1000", 4 [pid 12823] <... exit_group resumed>) = ? [pid 5071] newfstatat(AT_FDCWD, "./1582/binderfs", [pid 5066] mkdir("./1502", 0777 [pid 12825] <... write resumed>) = 4 [pid 12824] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12824] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12823] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12823, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12825] close(3 [pid 12824] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12825] <... close resumed>) = 0 [pid 12825] symlink("/dev/binderfs", "./binderfs" [pid 5071] unlink("./1582/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12825] <... symlink resumed>) = 0 [pid 12824] <... bpf resumed>) = 5 [pid 12824] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... unlink resumed>) = 0 [pid 12825] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12826 attached ) = 3 [pid 5071] getdents64(3, [pid 12824] <... bpf resumed>) = 6 [pid 12826] set_robust_list(0x5555686ec660, 24 [pid 12825] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12826] <... set_robust_list resumed>) = 0 [pid 12825] <... bpf resumed>) = 4 [pid 12824] exit_group(0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./1546", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12826 [pid 12824] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 12825] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 12825] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12826] chdir("./1502" [pid 12824] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12826] <... chdir resumed>) = 0 [pid 5071] rmdir("./1582" [pid 5068] openat(AT_FDCWD, "./1546", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12824, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... rmdir resumed>) = 0 [pid 12826] <... prctl resumed>) = 0 [pid 5071] mkdir("./1583", 0777 [pid 5068] <... openat resumed>) = 3 [pid 12826] setpgid(0, 0 [pid 5068] newfstatat(3, "", [pid 12826] <... setpgid resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1527", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1527", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12825] <... bpf resumed>) = 6 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12826] <... openat resumed>) = 3 [pid 12825] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1546/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12826] write(3, "1000", 4 [pid 12825] <... exit_group resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12826] <... write resumed>) = 4 [pid 12826] close(3) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1546/binderfs", [pid 5067] umount2("./1527/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12827 attached [pid 12826] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12827 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12827] set_robust_list(0x5555686ec660, 24 [pid 12826] <... symlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1527/binderfs", [pid 12827] <... set_robust_list resumed>) = 0 [pid 5068] unlink("./1546/binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12827] chdir("./1583" [pid 12826] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... unlink resumed>) = 0 [pid 5067] unlink("./1527/binderfs" [pid 12827] <... chdir resumed>) = 0 [pid 12826] <... bpf resumed>) = 3 [pid 12825] +++ exited with 0 +++ [pid 12827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12826] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... unlink resumed>) = 0 [pid 12827] <... prctl resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12825, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] getdents64(3, [pid 12827] setpgid(0, 0 [pid 12826] <... bpf resumed>) = 4 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12827] <... setpgid resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 12827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12826] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12827] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5069] umount2("./1569", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12827] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12827] <... write resumed>) = 4 [pid 5069] openat(AT_FDCWD, "./1569", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12827] close(3 [pid 5069] <... openat resumed>) = 3 [pid 5067] rmdir("./1527" [pid 12827] <... close resumed>) = 0 [pid 5068] rmdir("./1546" [pid 12827] symlink("/dev/binderfs", "./binderfs" [pid 12826] <... bpf resumed>) = 5 [pid 5069] newfstatat(3, "", [pid 12827] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] getdents64(3, [pid 12827] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12826] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1528", 0777 [pid 12827] <... bpf resumed>) = 3 [pid 12826] <... bpf resumed>) = 6 [pid 5069] umount2("./1569/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 12827] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12826] exit_group(0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./1547", 0777 [pid 12827] <... bpf resumed>) = 4 [pid 12826] <... exit_group resumed>) = ? [pid 5069] newfstatat(AT_FDCWD, "./1569/binderfs", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12827] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12827] <... bpf resumed>) = 5 [pid 12826] +++ exited with 0 +++ [pid 5069] unlink("./1569/binderfs") = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12826, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12828 attached [pid 5069] close(3 [pid 12827] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1569"./strace-static-x86_64: Process 12829 attached [pid 12828] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12829 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12828 [pid 5066] umount2("./1502", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12829] set_robust_list(0x5555686ec660, 24 [pid 12828] <... set_robust_list resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12829] <... set_robust_list resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12828] chdir("./1528" [pid 5069] mkdir("./1570", 0777 [pid 12829] chdir("./1547" [pid 12828] <... chdir resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1502", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12828] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... openat resumed>) = 3 [pid 12828] <... prctl resumed>) = 0 [pid 12829] <... chdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12828] setpgid(0, 0 [pid 12827] <... bpf resumed>) = 6 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12829] <... prctl resumed>) = 0 [pid 12828] <... setpgid resumed>) = 0 [pid 12827] exit_group(0./strace-static-x86_64: Process 12830 attached [pid 12829] setpgid(0, 0 [pid 12828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12827] <... exit_group resumed>) = ? [pid 5066] getdents64(3, [pid 12830] set_robust_list(0x5555686ec660, 24 [pid 12829] <... setpgid resumed>) = 0 [pid 12828] <... openat resumed>) = 3 [pid 12830] <... set_robust_list resumed>) = 0 [pid 12829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12828] write(3, "1000", 4 [pid 12827] +++ exited with 0 +++ [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12830 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12830] chdir("./1570") = 0 [pid 12829] <... openat resumed>) = 3 [pid 12828] <... write resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12827, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1502/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12828] close(3 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 12830] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12829] write(3, "1000", 4 [pid 12830] <... prctl resumed>) = 0 [pid 12829] <... write resumed>) = 4 [pid 12830] setpgid(0, 0 [pid 12829] close(3 [pid 12830] <... setpgid resumed>) = 0 [pid 12829] <... close resumed>) = 0 [pid 12830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12829] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12828] <... close resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 12828] symlink("/dev/binderfs", "./binderfs" [pid 5066] newfstatat(AT_FDCWD, "./1502/binderfs", [pid 12830] <... openat resumed>) = 3 [pid 12829] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12828] <... symlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12830] write(3, "1000", 4 [pid 12829] <... bpf resumed>) = 3 [pid 5071] umount2("./1583", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12830] <... write resumed>) = 4 [pid 12829] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12828] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] unlink("./1502/binderfs" [pid 12830] close(3 [pid 12829] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12830] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1583", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12830] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12829] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 12830] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12829] <... bpf resumed>) = 5 [pid 12828] <... bpf resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12830] <... bpf resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12828] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 12830] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12829] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12830] <... bpf resumed>) = 4 [pid 12829] <... bpf resumed>) = 6 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12830] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12829] exit_group(0 [pid 12828] <... bpf resumed>) = 4 [pid 5071] umount2("./1583/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 12830] <... bpf resumed>) = 5 [pid 12829] <... exit_group resumed>) = ? [pid 12828] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./1502" [pid 12830] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12829] +++ exited with 0 +++ [pid 12828] <... bpf resumed>) = 5 [pid 5071] newfstatat(AT_FDCWD, "./1583/binderfs", [pid 5066] <... rmdir resumed>) = 0 [pid 12828] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1583/binderfs" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12829, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] mkdir("./1503", 0777 [pid 5071] <... unlink resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5071] getdents64(3, [pid 5068] <... restart_syscall resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1583") = 0 [pid 5071] mkdir("./1584", 0777 [pid 12830] <... bpf resumed>) = 6 [pid 12828] <... bpf resumed>) = 6 [pid 5068] umount2("./1547", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12828] exit_group(0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12830] exit_group(0 [pid 12828] <... exit_group resumed>) = ? [pid 12830] <... exit_group resumed>) = ? [pid 5068] openat(AT_FDCWD, "./1547", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 12831 attached [pid 12831] set_robust_list(0x5555686ec660, 24 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12831] <... set_robust_list resumed>) = 0 [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12832 attached [pid 12831] chdir("./1503" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12832 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12831 [pid 12831] <... chdir resumed>) = 0 [pid 12831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12831] setpgid(0, 0 [pid 12832] set_robust_list(0x5555686ec660, 24 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12832] <... set_robust_list resumed>) = 0 [pid 12831] <... setpgid resumed>) = 0 [pid 12830] +++ exited with 0 +++ [pid 5068] umount2("./1547/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12828] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12832] chdir("./1584" [pid 12831] <... openat resumed>) = 3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12830, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] newfstatat(AT_FDCWD, "./1547/binderfs", [pid 12832] <... chdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12828, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12831] write(3, "1000", 4 [pid 5069] umount2("./1570", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12832] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12832] <... prctl resumed>) = 0 [pid 12831] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] unlink("./1547/binderfs" [pid 12832] setpgid(0, 0 [pid 12831] close(3 [pid 5069] openat(AT_FDCWD, "./1570", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... unlink resumed>) = 0 [pid 12831] <... close resumed>) = 0 [pid 12832] <... setpgid resumed>) = 0 [pid 12831] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 12832] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12831] <... symlink resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12832] <... openat resumed>) = 3 [pid 12831] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] close(3 [pid 12832] write(3, "1000", 4) = 4 [pid 12831] <... bpf resumed>) = 3 [pid 5069] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 5067] umount2("./1528", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12832] close(3 [pid 12831] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] rmdir("./1547" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12832] <... close resumed>) = 0 [pid 12832] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12831] <... bpf resumed>) = 4 [pid 12832] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12831] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] umount2("./1570/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1528", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12832] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1570/binderfs", [pid 12831] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5069] unlink("./1570/binderfs" [pid 12832] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12831] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] mkdir("./1548", 0777 [pid 5067] newfstatat(3, "", [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] close(3 [pid 12832] <... bpf resumed>) = 4 [pid 5067] getdents64(3, [pid 12831] <... bpf resumed>) = 6 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1570" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12832] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12831] exit_group(0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12832] <... bpf resumed>) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] umount2("./1528/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1571", 0777 [pid 12832] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12831] <... exit_group resumed>) = ? [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12833 attached [pid 5069] <... mkdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1528/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1528/binderfs" [pid 12831] +++ exited with 0 +++ [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 [pid 12833] set_robust_list(0x5555686ec660, 24 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12833 [pid 12833] <... set_robust_list resumed>) = 0 [pid 12833] chdir("./1548" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12831, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12834 attached [pid 5067] getdents64(3, [pid 12833] <... chdir resumed>) = 0 [pid 12834] set_robust_list(0x5555686ec660, 24 [pid 12833] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12834 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12834] <... set_robust_list resumed>) = 0 [pid 12833] <... prctl resumed>) = 0 [pid 5067] close(3 [pid 5066] umount2("./1503", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12834] chdir("./1571" [pid 12833] setpgid(0, 0 [pid 5067] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12833] <... setpgid resumed>) = 0 [pid 5067] rmdir("./1528" [pid 5066] openat(AT_FDCWD, "./1503", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12834] <... chdir resumed>) = 0 [pid 12833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12834] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] mkdir("./1529", 0777 [pid 5066] newfstatat(3, "", [pid 12834] <... prctl resumed>) = 0 [pid 12833] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12834] setpgid(0, 0 [pid 12833] write(3, "1000", 4 [pid 12834] <... setpgid resumed>) = 0 [pid 12833] <... write resumed>) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(3, [pid 12834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12833] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12835 attached [pid 12834] <... openat resumed>) = 3 [pid 12833] <... close resumed>) = 0 [pid 5066] umount2("./1503/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12835] set_robust_list(0x5555686ec660, 24 [pid 12833] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12835 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12834] write(3, "1000", 4 [pid 12835] <... set_robust_list resumed>) = 0 [pid 12834] <... write resumed>) = 4 [pid 12833] <... symlink resumed>) = 0 [pid 12832] <... bpf resumed>) = 6 [pid 5066] newfstatat(AT_FDCWD, "./1503/binderfs", [pid 12834] close(3 [pid 12833] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12832] exit_group(0 [pid 12835] chdir("./1529" [pid 12834] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12835] <... chdir resumed>) = 0 [pid 12834] symlink("/dev/binderfs", "./binderfs" [pid 12833] <... bpf resumed>) = 3 [pid 12832] <... exit_group resumed>) = ? [pid 5066] unlink("./1503/binderfs" [pid 12835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12834] <... symlink resumed>) = 0 [pid 12833] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12832] +++ exited with 0 +++ [pid 5066] <... unlink resumed>) = 0 [pid 12833] <... bpf resumed>) = 4 [pid 12833] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12835] <... prctl resumed>) = 0 [pid 12834] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, [pid 12835] setpgid(0, 0 [pid 12833] <... bpf resumed>) = 5 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12832, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12835] <... setpgid resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12833] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] close(3 [pid 12834] <... bpf resumed>) = 3 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12834] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] rmdir("./1503" [pid 12835] <... openat resumed>) = 3 [pid 12835] write(3, "1000", 4) = 4 [pid 12835] close(3) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12835] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12834] <... bpf resumed>) = 4 [pid 12835] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12834] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12833] <... bpf resumed>) = 6 [pid 5071] umount2("./1584", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1504", 0777 [pid 12835] <... bpf resumed>) = 3 [pid 12833] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... mkdir resumed>) = 0 [pid 12835] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12834] <... bpf resumed>) = 5 [pid 12833] <... exit_group resumed>) = ? [pid 5071] openat(AT_FDCWD, "./1584", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12835] <... bpf resumed>) = 4 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 3 [pid 12834] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12836 attached [pid 12836] set_robust_list(0x5555686ec660, 24 [pid 12835] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12836] <... set_robust_list resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12836 [pid 12836] chdir("./1504" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12836] <... chdir resumed>) = 0 [pid 5071] getdents64(3, [pid 12836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12836] setpgid(0, 0) = 0 [pid 12836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12835] <... bpf resumed>) = 5 [pid 12833] +++ exited with 0 +++ [pid 5071] umount2("./1584/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12836] <... openat resumed>) = 3 [pid 12835] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1584/binderfs", [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12833, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 12836] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./1548", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12836] <... write resumed>) = 4 [pid 5071] unlink("./1584/binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12836] close(3 [pid 5071] <... unlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1548", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12836] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 12836] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 5068] newfstatat(3, "", [pid 12836] <... symlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(3 [pid 5068] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12836] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] rmdir("./1584" [pid 5068] umount2("./1548/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12836] <... bpf resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1548/binderfs", [pid 12836] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1585", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12836] <... bpf resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] unlink("./1548/binderfs" [pid 12836] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... unlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] getdents64(3, [pid 12836] <... bpf resumed>) = 5 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12837 attached [pid 12837] set_robust_list(0x5555686ec660, 24 [pid 5068] close(3 [pid 12837] <... set_robust_list resumed>) = 0 [pid 12836] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1548" [pid 12837] chdir("./1585" [pid 12834] <... bpf resumed>) = 6 [pid 12837] <... chdir resumed>) = 0 [pid 12835] <... bpf resumed>) = 6 [pid 12834] exit_group(0 [pid 12836] <... bpf resumed>) = 6 [pid 12837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12835] exit_group(0 [pid 12834] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12837 [pid 5068] <... rmdir resumed>) = 0 [pid 12837] <... prctl resumed>) = 0 [pid 12836] exit_group(0 [pid 12835] <... exit_group resumed>) = ? [pid 12837] setpgid(0, 0) = 0 [pid 12836] <... exit_group resumed>) = ? [pid 12834] +++ exited with 0 +++ [pid 5068] mkdir("./1549", 0777 [pid 12837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12834, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... mkdir resumed>) = 0 [pid 12837] <... openat resumed>) = 3 [pid 12837] write(3, "1000", 4) = 4 [pid 5069] umount2("./1571", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12837] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1571", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12837] <... close resumed>) = 0 [pid 12837] symlink("/dev/binderfs", "./binderfs" [pid 5069] newfstatat(3, "", ./strace-static-x86_64: Process 12838 attached [pid 12837] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12838] set_robust_list(0x5555686ec660, 24 [pid 12837] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12838 [pid 12838] <... set_robust_list resumed>) = 0 [pid 12837] <... bpf resumed>) = 3 [pid 12838] chdir("./1549" [pid 12836] +++ exited with 0 +++ [pid 12835] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12837] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1571/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12836, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12838] <... chdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12835, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] newfstatat(AT_FDCWD, "./1571/binderfs", [pid 12838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1571/binderfs") = 0 [pid 12838] <... prctl resumed>) = 0 [pid 5069] getdents64(3, [pid 12838] setpgid(0, 0 [pid 12837] <... bpf resumed>) = 4 [pid 12837] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] umount2("./1504", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1529", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12838] <... setpgid resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12837] <... bpf resumed>) = 5 [pid 12838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12837] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] close(3 [pid 12838] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1529", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1504", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12838] write(3, "1000", 4 [pid 12837] <... bpf resumed>) = 6 [pid 5069] <... close resumed>) = 0 [pid 12838] <... write resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 12838] close(3 [pid 12837] exit_group(0 [pid 5069] rmdir("./1571" [pid 5066] <... openat resumed>) = 3 [pid 12838] <... close resumed>) = 0 [pid 12837] <... exit_group resumed>) = ? [pid 5067] newfstatat(3, "", [pid 12838] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(3, "", [pid 12838] <... symlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12838] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] mkdir("./1572", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12837] +++ exited with 0 +++ [pid 12838] <... bpf resumed>) = 3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12837, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] umount2("./1529/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12838] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1504/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12839 attached [pid 12838] <... bpf resumed>) = 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12839 [pid 5067] newfstatat(AT_FDCWD, "./1529/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12838] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1504/binderfs", [pid 12839] set_robust_list(0x5555686ec660, 24 [pid 12838] <... bpf resumed>) = 5 [pid 5071] umount2("./1585", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12838] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] unlink("./1529/binderfs" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12839] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5066] unlink("./1504/binderfs" [pid 12839] chdir("./1572" [pid 5071] openat(AT_FDCWD, "./1585", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 12839] <... chdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 12839] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] newfstatat(3, "", [pid 5067] close(3 [pid 12839] <... prctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12839] setpgid(0, 0 [pid 5071] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5066] close(3 [pid 12839] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] rmdir("./1529" [pid 5066] <... close resumed>) = 0 [pid 12839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] umount2("./1585/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1504" [pid 12839] <... openat resumed>) = 3 [pid 12838] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 12838] exit_group(0) = ? [pid 12839] write(3, "1000", 4 [pid 5071] newfstatat(AT_FDCWD, "./1585/binderfs", [pid 5067] mkdir("./1530", 0777 [pid 5066] <... rmdir resumed>) = 0 [pid 12839] <... write resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12839] close(3 [pid 12838] +++ exited with 0 +++ [pid 5071] unlink("./1585/binderfs" [pid 5067] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1505", 0777 [pid 12839] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 12839] symlink("/dev/binderfs", "./binderfs" [pid 5071] getdents64(3, [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12838, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... mkdir resumed>) = 0 [pid 5068] umount2("./1549", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12839] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] openat(AT_FDCWD, "./1549", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12840 attached [pid 12839] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] close(3 [pid 5068] newfstatat(3, "", ./strace-static-x86_64: Process 12841 attached [pid 12840] set_robust_list(0x5555686ec660, 24 [pid 12841] set_robust_list(0x5555686ec660, 24 [pid 5071] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12841 [pid 12840] <... set_robust_list resumed>) = 0 [pid 12841] <... set_robust_list resumed>) = 0 [pid 12839] <... bpf resumed>) = 3 [pid 5071] rmdir("./1585" [pid 5068] getdents64(3, [pid 12840] chdir("./1505" [pid 12841] chdir("./1530" [pid 12839] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12840 [pid 5071] <... rmdir resumed>) = 0 [pid 12840] <... chdir resumed>) = 0 [pid 5068] umount2("./1549/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12840] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12841] <... chdir resumed>) = 0 [pid 12839] <... bpf resumed>) = 4 [pid 5071] mkdir("./1586", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12840] <... prctl resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1549/binderfs", [pid 12840] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12840] <... setpgid resumed>) = 0 [pid 12841] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] unlink("./1549/binderfs" [pid 12840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12841] <... prctl resumed>) = 0 [pid 12839] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12840] <... openat resumed>) = 3 [pid 12841] setpgid(0, 0 [pid 5068] getdents64(3, [pid 12840] write(3, "1000", 4 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12840] <... write resumed>) = 4 [pid 5068] close(3 [pid 12840] close(3 [pid 12839] <... bpf resumed>) = 5 [pid 5068] <... close resumed>) = 0 [pid 12840] <... close resumed>) = 0 [pid 12840] symlink("/dev/binderfs", "./binderfs" [pid 5068] rmdir("./1549" [pid 12840] <... symlink resumed>) = 0 [pid 12841] <... setpgid resumed>) = 0 [pid 12839] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... rmdir resumed>) = 0 [pid 12840] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] mkdir("./1550", 0777 [pid 12840] <... bpf resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12842 attached [pid 12840] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12839] <... bpf resumed>) = 6 [pid 12842] set_robust_list(0x5555686ec660, 24 [pid 12840] <... bpf resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12842] <... set_robust_list resumed>) = 0 [pid 12841] <... openat resumed>) = 3 [pid 12839] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12842 [pid 12841] write(3, "1000", 4 [pid 12839] <... exit_group resumed>) = ? [pid 12841] <... write resumed>) = 4 ./strace-static-x86_64: Process 12843 attached [pid 12842] chdir("./1586" [pid 12840] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12839] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12843 [pid 12843] set_robust_list(0x5555686ec660, 24 [pid 12842] <... chdir resumed>) = 0 [pid 12841] close(3 [pid 12843] <... set_robust_list resumed>) = 0 [pid 12842] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12841] <... close resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12839, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12843] chdir("./1550" [pid 12842] <... prctl resumed>) = 0 [pid 12840] <... bpf resumed>) = 5 [pid 12841] symlink("/dev/binderfs", "./binderfs" [pid 12842] setpgid(0, 0 [pid 12840] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12843] <... chdir resumed>) = 0 [pid 12841] <... symlink resumed>) = 0 [pid 12843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12842] <... setpgid resumed>) = 0 [pid 12840] <... bpf resumed>) = 6 [pid 12841] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1572", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12843] setpgid(0, 0 [pid 12840] exit_group(0 [pid 12841] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12843] <... setpgid resumed>) = 0 [pid 12842] <... openat resumed>) = 3 [pid 12840] <... exit_group resumed>) = ? [pid 12841] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12842] write(3, "1000", 4 [pid 5069] openat(AT_FDCWD, "./1572", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12843] <... openat resumed>) = 3 [pid 12842] <... write resumed>) = 4 [pid 12841] <... bpf resumed>) = 4 [pid 12843] write(3, "1000", 4 [pid 12842] close(3 [pid 12840] +++ exited with 0 +++ [pid 12841] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... openat resumed>) = 3 [pid 12843] <... write resumed>) = 4 [pid 12842] <... close resumed>) = 0 [pid 12842] symlink("/dev/binderfs", "./binderfs" [pid 12841] <... bpf resumed>) = 5 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12840, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12843] close(3 [pid 5069] newfstatat(3, "", [pid 12843] <... close resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12841] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12842] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12843] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12843] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12842] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 12843] <... bpf resumed>) = 3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12843] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12842] <... bpf resumed>) = 3 [pid 5069] umount2("./1572/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12843] <... bpf resumed>) = 4 [pid 12842] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12843] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] umount2("./1505", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12843] <... bpf resumed>) = 5 [pid 12842] <... bpf resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1572/binderfs", [pid 12843] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12842] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] openat(AT_FDCWD, "./1505", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] unlink("./1572/binderfs" [pid 12842] <... bpf resumed>) = 5 [pid 5066] newfstatat(3, "", [pid 12842] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12843] <... bpf resumed>) = 6 [pid 12842] <... bpf resumed>) = 6 [pid 12841] <... bpf resumed>) = 6 [pid 5066] getdents64(3, [pid 12843] exit_group(0 [pid 12842] exit_group(0 [pid 12843] <... exit_group resumed>) = ? [pid 12841] exit_group(0 [pid 5069] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12842] <... exit_group resumed>) = ? [pid 5066] umount2("./1505/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12843] +++ exited with 0 +++ [pid 12841] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12842] +++ exited with 0 +++ [pid 5069] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12843, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] newfstatat(AT_FDCWD, "./1505/binderfs", [pid 5069] rmdir("./1572" [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12841] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12842, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... restart_syscall resumed>) = 0 [pid 5071] umount2("./1586", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] openat(AT_FDCWD, "./1586", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] mkdir("./1573", 0777 [pid 5066] unlink("./1505/binderfs" [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5069] <... mkdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12841, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... unlink resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./1550", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] getdents64(3, [pid 5071] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] openat(AT_FDCWD, "./1550", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] close(3 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 12844 attached [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12844 [pid 5067] umount2("./1530", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./1505" [pid 12844] set_robust_list(0x5555686ec660, 24 [pid 5071] umount2("./1586/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(3, "", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12844] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1530", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12844] chdir("./1573" [pid 5071] newfstatat(AT_FDCWD, "./1586/binderfs", [pid 5067] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1506", 0777 [pid 5068] getdents64(3, [pid 12844] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(3, "", [pid 12844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] unlink("./1586/binderfs" [pid 5068] umount2("./1550/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12844] <... prctl resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12844] setpgid(0, 0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1550/binderfs", [pid 5067] getdents64(3, [pid 12844] <... setpgid resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12845 attached [pid 12844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] getdents64(3, [pid 5068] unlink("./1550/binderfs" [pid 5067] umount2("./1530/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12845] set_robust_list(0x5555686ec660, 24 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12844] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12844] write(3, "1000", 4 [pid 5067] newfstatat(AT_FDCWD, "./1530/binderfs", [pid 12844] <... write resumed>) = 4 [pid 12845] <... set_robust_list resumed>) = 0 [pid 5071] close(3 [pid 12844] close(3 [pid 5068] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12845 [pid 12845] chdir("./1506" [pid 12844] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12845] <... chdir resumed>) = 0 [pid 12844] symlink("/dev/binderfs", "./binderfs" [pid 5071] rmdir("./1586" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./1530/binderfs" [pid 12845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12844] <... symlink resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] close(3 [pid 12845] <... prctl resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12845] setpgid(0, 0 [pid 5068] <... close resumed>) = 0 [pid 12845] <... setpgid resumed>) = 0 [pid 5071] mkdir("./1587", 0777 [pid 5068] rmdir("./1550" [pid 12845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12844] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12845] <... openat resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12845] write(3, "1000", 4 [pid 12844] <... bpf resumed>) = 3 [pid 5068] mkdir("./1551", 0777 [pid 12845] <... write resumed>) = 4 [pid 12844] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] close(3./strace-static-x86_64: Process 12846 attached [pid 12845] close(3 [pid 12844] <... bpf resumed>) = 4 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12846] set_robust_list(0x5555686ec660, 24 [pid 12845] <... close resumed>) = 0 [pid 12844] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] rmdir("./1530" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12846 [pid 12846] <... set_robust_list resumed>) = 0 [pid 12845] symlink("/dev/binderfs", "./binderfs" [pid 12844] <... bpf resumed>) = 5 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 12846] chdir("./1587" [pid 12845] <... symlink resumed>) = 0 [pid 12844] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] mkdir("./1531", 0777 [pid 12846] <... chdir resumed>) = 0 [pid 12845] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12847 attached [pid 12846] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12844] <... bpf resumed>) = 6 [pid 12845] <... bpf resumed>) = 3 [pid 12845] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12847] set_robust_list(0x5555686ec660, 24 [pid 12846] <... prctl resumed>) = 0 [pid 12845] <... bpf resumed>) = 4 [pid 12844] exit_group(0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12847 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12847] <... set_robust_list resumed>) = 0 [pid 12846] setpgid(0, 0 [pid 12845] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12844] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12848 attached [pid 12847] chdir("./1551" [pid 12846] <... setpgid resumed>) = 0 [pid 12845] <... bpf resumed>) = 5 [pid 12844] +++ exited with 0 +++ [pid 12848] set_robust_list(0x5555686ec660, 24 [pid 12847] <... chdir resumed>) = 0 [pid 12846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12845] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12844, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12847] <... prctl resumed>) = 0 [pid 12846] <... openat resumed>) = 3 [pid 12848] <... set_robust_list resumed>) = 0 [pid 12847] setpgid(0, 0) = 0 [pid 12848] chdir("./1531" [pid 12847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12848 [pid 12846] write(3, "1000", 4 [pid 12847] <... openat resumed>) = 3 [pid 12846] <... write resumed>) = 4 [pid 12846] close(3 [pid 12848] <... chdir resumed>) = 0 [pid 12847] write(3, "1000", 4 [pid 12846] <... close resumed>) = 0 [pid 12848] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12847] <... write resumed>) = 4 [pid 12846] symlink("/dev/binderfs", "./binderfs" [pid 5069] umount2("./1573", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12848] <... prctl resumed>) = 0 [pid 12847] close(3 [pid 12846] <... symlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12848] setpgid(0, 0 [pid 12847] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1573", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12848] <... setpgid resumed>) = 0 [pid 12847] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... openat resumed>) = 3 [pid 12848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12847] <... symlink resumed>) = 0 [pid 12846] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(3, "", [pid 12848] <... openat resumed>) = 3 [pid 12847] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12846] <... bpf resumed>) = 3 [pid 12848] write(3, "1000", 4 [pid 12846] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12848] <... write resumed>) = 4 [pid 12847] <... bpf resumed>) = 3 [pid 12846] <... bpf resumed>) = 4 [pid 5069] getdents64(3, [pid 12848] close(3) = 0 [pid 12848] symlink("/dev/binderfs", "./binderfs" [pid 12847] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12846] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12848] <... symlink resumed>) = 0 [pid 5069] umount2("./1573/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12845] <... bpf resumed>) = 6 [pid 12847] <... bpf resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1573/binderfs", [pid 12848] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12847] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12846] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12845] exit_group(0 [pid 12846] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12848] <... bpf resumed>) = 3 [pid 12848] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12846] exit_group(0 [pid 12847] <... bpf resumed>) = 5 [pid 12845] <... exit_group resumed>) = ? [pid 12846] <... exit_group resumed>) = ? [pid 5069] unlink("./1573/binderfs" [pid 12848] <... bpf resumed>) = 4 [pid 12846] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12846, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... unlink resumed>) = 0 [pid 12848] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12847] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12845] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12845, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./1587", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 12848] <... bpf resumed>) = 5 [pid 5069] rmdir("./1573" [pid 5071] openat(AT_FDCWD, "./1587", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./1506", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./1506", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5066] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12848] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12848] <... bpf resumed>) = 6 [pid 12847] <... bpf resumed>) = 6 [pid 5071] umount2("./1587/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./1574", 0777 [pid 5066] getdents64(3, [pid 12848] exit_group(0 [pid 12847] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] newfstatat(AT_FDCWD, "./1587/binderfs", [pid 12848] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] umount2("./1506/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12847] <... exit_group resumed>) = ? [pid 5071] unlink("./1587/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 12848] +++ exited with 0 +++ [pid 5071] getdents64(3, [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(AT_FDCWD, "./1506/binderfs", [pid 12847] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12848, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 12849 attached [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12847, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] close(3 [pid 12849] set_robust_list(0x5555686ec660, 24 [pid 5071] <... close resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12849] <... set_robust_list resumed>) = 0 [pid 12849] chdir("./1574" [pid 5071] rmdir("./1587" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12849 [pid 5068] umount2("./1551", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./1506/binderfs" [pid 12849] <... chdir resumed>) = 0 [pid 12849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 5067] umount2("./1531", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 12849] <... prctl resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1551", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12849] setpgid(0, 0 [pid 5071] mkdir("./1588", 0777 [pid 5068] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1531", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 12849] <... setpgid resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... mkdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(3, "", [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] close(3 [pid 12849] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] rmdir("./1506" [pid 12849] write(3, "1000", 4 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12849] <... write resumed>) = 4 [pid 5068] umount2("./1551/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1531/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 12849] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12850 attached [pid 12849] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12850 [pid 5068] newfstatat(AT_FDCWD, "./1551/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1531/binderfs", [pid 5066] mkdir("./1507", 0777 [pid 12850] set_robust_list(0x5555686ec660, 24 [pid 12849] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12850] <... set_robust_list resumed>) = 0 [pid 5068] unlink("./1551/binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 12849] <... symlink resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12850] chdir("./1588" [pid 12849] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 5067] unlink("./1531/binderfs"./strace-static-x86_64: Process 12851 attached [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12850] <... chdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12849] <... bpf resumed>) = 3 [pid 12850] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12851] set_robust_list(0x5555686ec660, 24 [pid 12850] <... prctl resumed>) = 0 [pid 12849] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12851 [pid 12851] <... set_robust_list resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 12851] chdir("./1507" [pid 12850] setpgid(0, 0 [pid 5068] rmdir("./1551" [pid 5067] getdents64(3, [pid 12851] <... chdir resumed>) = 0 [pid 12850] <... setpgid resumed>) = 0 [pid 12849] <... bpf resumed>) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 12849] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] mkdir("./1552", 0777 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12851] <... prctl resumed>) = 0 [pid 12849] <... bpf resumed>) = 5 [pid 12849] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12849] exit_group(0 [pid 12851] setpgid(0, 0 [pid 12850] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] close(3 [pid 12851] <... setpgid resumed>) = 0 [pid 12850] write(3, "1000", 4 [pid 12849] <... exit_group resumed>) = ? [pid 12851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12850] <... write resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... close resumed>) = 0 [pid 12850] close(3) = 0 [pid 5067] rmdir("./1531" [pid 12850] symlink("/dev/binderfs", "./binderfs" [pid 12849] +++ exited with 0 +++ [pid 5067] <... rmdir resumed>) = 0 [pid 12851] <... openat resumed>) = 3 [pid 12850] <... symlink resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12849, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12851] write(3, "1000", 4 [pid 5067] mkdir("./1532", 0777./strace-static-x86_64: Process 12852 attached [pid 12850] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12852] set_robust_list(0x5555686ec660, 24 [pid 12850] <... bpf resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12852 [pid 12852] <... set_robust_list resumed>) = 0 [pid 12851] <... write resumed>) = 4 [pid 12850] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] umount2("./1574", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 12852] chdir("./1552" [pid 12851] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12850] <... bpf resumed>) = 4 [pid 5069] openat(AT_FDCWD, "./1574", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12852] <... chdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12851] <... close resumed>) = 0 [pid 12852] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12850] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12852] <... prctl resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 12851] symlink("/dev/binderfs", "./binderfs" [pid 12850] <... bpf resumed>) = 5 [pid 12851] <... symlink resumed>) = 0 [pid 12852] setpgid(0, 0 [pid 12851] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12850] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] newfstatat(3, "", ./strace-static-x86_64: Process 12853 attached [pid 12852] <... setpgid resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12853] set_robust_list(0x5555686ec660, 24) = 0 [pid 12852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12853 [pid 12853] chdir("./1532" [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12853] <... chdir resumed>) = 0 [pid 12853] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12850] <... bpf resumed>) = 6 [pid 5069] umount2("./1574/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12851] <... bpf resumed>) = 3 [pid 12853] <... prctl resumed>) = 0 [pid 12853] setpgid(0, 0 [pid 12852] <... openat resumed>) = 3 [pid 12853] <... setpgid resumed>) = 0 [pid 12853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12852] write(3, "1000", 4 [pid 12851] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12850] exit_group(0 [pid 12852] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12852] close(3 [pid 5069] newfstatat(AT_FDCWD, "./1574/binderfs", [pid 12852] <... close resumed>) = 0 [pid 12853] write(3, "1000", 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12853] <... write resumed>) = 4 [pid 12852] symlink("/dev/binderfs", "./binderfs" [pid 12850] <... exit_group resumed>) = ? [pid 12853] close(3 [pid 12851] <... bpf resumed>) = 4 [pid 5069] unlink("./1574/binderfs" [pid 12853] <... close resumed>) = 0 [pid 12853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12853] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12852] <... symlink resumed>) = 0 [pid 12851] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12850] +++ exited with 0 +++ [pid 5069] <... unlink resumed>) = 0 [pid 12853] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12852] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12853] <... bpf resumed>) = 4 [pid 12851] <... bpf resumed>) = 5 [pid 5069] getdents64(3, [pid 12853] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12852] <... bpf resumed>) = 3 [pid 12851] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12850, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12853] <... bpf resumed>) = 5 [pid 12852] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12851] <... bpf resumed>) = 6 [pid 5071] umount2("./1588", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 12853] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12852] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 12853] exit_group(0 [pid 12852] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12851] exit_group(0 [pid 5071] openat(AT_FDCWD, "./1588", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] rmdir("./1574" [pid 12853] <... exit_group resumed>) = ? [pid 12851] <... exit_group resumed>) = ? [pid 12853] +++ exited with 0 +++ [pid 12852] <... bpf resumed>) = 5 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 12852] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12853, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] newfstatat(3, "", [pid 5069] mkdir("./1575", 0777 [pid 5067] umount2("./1532", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12852] exit_group(0 [pid 5069] <... mkdir resumed>) = 0 [pid 12852] <... exit_group resumed>) = ? [pid 5071] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] openat(AT_FDCWD, "./1532", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] umount2("./1588/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", [pid 5071] newfstatat(AT_FDCWD, "./1588/binderfs", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(3, [pid 5071] unlink("./1588/binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... unlink resumed>) = 0 [pid 5067] umount2("./1532/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12854 attached [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1532/binderfs", [pid 12854] set_robust_list(0x5555686ec660, 24 [pid 5071] close(3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12854 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 12854] <... set_robust_list resumed>) = 0 [pid 5067] unlink("./1532/binderfs" [pid 12854] chdir("./1575" [pid 5071] rmdir("./1588" [pid 12854] <... chdir resumed>) = 0 [pid 12854] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12852] +++ exited with 0 +++ [pid 12851] +++ exited with 0 +++ [pid 5071] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12854] <... prctl resumed>) = 0 [pid 5071] mkdir("./1589", 0777 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12852, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12851, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12854] setpgid(0, 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12854] <... setpgid resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 12854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] close(3 [pid 12854] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./1507", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12855 attached [pid 12854] write(3, "1000", 4 [pid 5068] umount2("./1552", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./1532" [pid 12855] set_robust_list(0x5555686ec660, 24 [pid 12854] <... write resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12855 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12854] close(3 [pid 5068] openat(AT_FDCWD, "./1552", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12854] <... close resumed>) = 0 [pid 5067] mkdir("./1533", 0777 [pid 5066] openat(AT_FDCWD, "./1507", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12854] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 3 [pid 12855] <... set_robust_list resumed>) = 0 [pid 12855] chdir("./1589" [pid 12854] <... symlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12855] <... chdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12855] setpgid(0, 0 [pid 12854] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] newfstatat(3, "", [pid 12855] <... setpgid resumed>) = 0 [pid 5068] getdents64(3, [pid 12855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12854] <... bpf resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12856 attached [pid 12854] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12856 [pid 5066] getdents64(3, [pid 12856] set_robust_list(0x5555686ec660, 24 [pid 12855] <... openat resumed>) = 3 [pid 12854] <... bpf resumed>) = 4 [pid 5068] umount2("./1552/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12856] <... set_robust_list resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12855] write(3, "1000", 4 [pid 12854] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1507/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12856] chdir("./1533" [pid 12855] <... write resumed>) = 4 [pid 5068] newfstatat(AT_FDCWD, "./1552/binderfs", [pid 12856] <... chdir resumed>) = 0 [pid 12855] close(3 [pid 12854] <... bpf resumed>) = 5 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12855] <... close resumed>) = 0 [pid 12854] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12856] <... prctl resumed>) = 0 [pid 12855] symlink("/dev/binderfs", "./binderfs" [pid 12856] setpgid(0, 0 [pid 12855] <... symlink resumed>) = 0 [pid 12856] <... setpgid resumed>) = 0 [pid 5068] unlink("./1552/binderfs" [pid 5066] newfstatat(AT_FDCWD, "./1507/binderfs", [pid 12854] <... bpf resumed>) = 6 [pid 12856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12855] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12854] exit_group(0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12854] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 5066] unlink("./1507/binderfs" [pid 12856] <... openat resumed>) = 3 [pid 12855] <... bpf resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 12856] write(3, "1000", 4 [pid 12855] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12856] <... write resumed>) = 4 [pid 12855] <... bpf resumed>) = 4 [pid 12856] close(3 [pid 12855] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12854] +++ exited with 0 +++ [pid 12856] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 12856] symlink("/dev/binderfs", "./binderfs" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12854, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12855] <... bpf resumed>) = 5 [pid 12856] <... symlink resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... close resumed>) = 0 [pid 5066] close(3 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] rmdir("./1552" [pid 5066] <... close resumed>) = 0 [pid 12856] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12855] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] rmdir("./1507" [pid 12856] <... bpf resumed>) = 3 [pid 5068] mkdir("./1553", 0777 [pid 12856] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... rmdir resumed>) = 0 [pid 5069] umount2("./1575", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 12856] <... bpf resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12856] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1508", 0777 [pid 5069] openat(AT_FDCWD, "./1575", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12857 attached [pid 5066] <... mkdir resumed>) = 0 [pid 12856] <... bpf resumed>) = 5 [pid 12857] set_robust_list(0x5555686ec660, 24 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12857 [pid 12857] <... set_robust_list resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12857] chdir("./1553" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12857] <... chdir resumed>) = 0 [pid 12856] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12858 attached [pid 12857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12856] <... bpf resumed>) = 6 [pid 12855] <... bpf resumed>) = 6 [pid 12858] set_robust_list(0x5555686ec660, 24 [pid 12857] <... prctl resumed>) = 0 [pid 12855] exit_group(0 [pid 5069] umount2("./1575/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12858 [pid 12858] <... set_robust_list resumed>) = 0 [pid 12857] setpgid(0, 0 [pid 12856] exit_group(0 [pid 12855] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12858] chdir("./1508" [pid 12857] <... setpgid resumed>) = 0 [pid 12856] <... exit_group resumed>) = ? [pid 5069] newfstatat(AT_FDCWD, "./1575/binderfs", [pid 12857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12858] <... chdir resumed>) = 0 [pid 12857] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1575/binderfs" [pid 12858] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12857] write(3, "1000", 4 [pid 5069] <... unlink resumed>) = 0 [pid 12858] <... prctl resumed>) = 0 [pid 12857] <... write resumed>) = 4 [pid 5069] getdents64(3, [pid 12858] setpgid(0, 0 [pid 12857] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12858] <... setpgid resumed>) = 0 [pid 12857] <... close resumed>) = 0 [pid 12857] symlink("/dev/binderfs", "./binderfs" [pid 12858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] close(3 [pid 12858] <... openat resumed>) = 3 [pid 12857] <... symlink resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12858] write(3, "1000", 4 [pid 12857] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] rmdir("./1575" [pid 12858] <... write resumed>) = 4 [pid 12857] <... bpf resumed>) = 3 [pid 12857] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 12858] close(3) = 0 [pid 12858] symlink("/dev/binderfs", "./binderfs" [pid 12857] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12858] <... symlink resumed>) = 0 [pid 5069] mkdir("./1576", 0777 [pid 12858] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12857] <... bpf resumed>) = 5 [pid 5069] <... mkdir resumed>) = 0 [pid 12857] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12858] <... bpf resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12858] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12859 attached [pid 12856] +++ exited with 0 +++ [pid 12855] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12855, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12859 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12856, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12859] set_robust_list(0x5555686ec660, 24) = 0 [pid 12858] <... bpf resumed>) = 4 [pid 12858] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12859] chdir("./1576" [pid 5071] umount2("./1589", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12859] <... chdir resumed>) = 0 [pid 12858] <... bpf resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12858] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12859] setpgid(0, 0 [pid 5067] umount2("./1533", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12859] <... setpgid resumed>) = 0 [pid 12858] <... bpf resumed>) = 6 [pid 12857] <... bpf resumed>) = 6 [pid 5071] openat(AT_FDCWD, "./1589", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12857] exit_group(0 [pid 5071] newfstatat(3, "", [pid 12859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12858] exit_group(0 [pid 12857] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12859] <... openat resumed>) = 3 [pid 12858] <... exit_group resumed>) = ? [pid 12859] write(3, "1000", 4 [pid 5071] getdents64(3, [pid 5067] openat(AT_FDCWD, "./1533", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12859] <... write resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12859] close(3 [pid 5071] umount2("./1589/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 12859] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12859] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./1589/binderfs", [pid 5067] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12859] <... symlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5071] unlink("./1589/binderfs" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1533/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12859] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(AT_FDCWD, "./1533/binderfs", [pid 12859] <... bpf resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 12859] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1533/binderfs" [pid 12859] <... bpf resumed>) = 4 [pid 12858] +++ exited with 0 +++ [pid 12857] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12858, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12859] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12857, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... unlink resumed>) = 0 [pid 12859] <... bpf resumed>) = 5 [pid 5071] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 12859] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] rmdir("./1589" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12859] <... bpf resumed>) = 6 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] umount2("./1553", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 12859] exit_group(0 [pid 5071] mkdir("./1590", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 12859] <... exit_group resumed>) = ? [pid 5071] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1553", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] rmdir("./1533" [pid 5066] umount2("./1508", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12859] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./1508", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12859, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5069] umount2("./1576", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 5066] newfstatat(3, "", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12860 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12860 [pid 5067] mkdir("./1534", 0777 [pid 12860] set_robust_list(0x5555686ec660, 24 [pid 5069] openat(AT_FDCWD, "./1576", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12860] <... set_robust_list resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./1553/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5069] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1553/binderfs", [pid 5069] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./1508/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] unlink("./1553/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1576/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1508/binderfs", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12860] chdir("./1590" [pid 5069] newfstatat(AT_FDCWD, "./1576/binderfs", [pid 5068] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] unlink("./1508/binderfs" [pid 12860] <... chdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12860] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] unlink("./1576/binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12860] <... prctl resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] close(3./strace-static-x86_64: Process 12861 attached [pid 12860] setpgid(0, 0 [pid 5068] <... close resumed>) = 0 [pid 12860] <... setpgid resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] rmdir("./1553" [pid 5066] getdents64(3, [pid 12861] set_robust_list(0x5555686ec660, 24 [pid 12860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12861 [pid 12861] <... set_robust_list resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12861] chdir("./1534" [pid 12860] <... openat resumed>) = 3 [pid 5069] close(3 [pid 5066] close(3 [pid 12861] <... chdir resumed>) = 0 [pid 12860] write(3, "1000", 4 [pid 5069] <... close resumed>) = 0 [pid 5068] mkdir("./1554", 0777 [pid 5066] <... close resumed>) = 0 [pid 12861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12860] <... write resumed>) = 4 [pid 5069] rmdir("./1576" [pid 5066] rmdir("./1508" [pid 12861] <... prctl resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12861] setpgid(0, 0 [pid 12860] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 12861] <... setpgid resumed>) = 0 [pid 12860] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12862 attached [pid 12861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12860] symlink("/dev/binderfs", "./binderfs" [pid 5069] mkdir("./1577", 0777 [pid 5066] mkdir("./1509", 0777 [pid 12861] <... openat resumed>) = 3 [pid 12862] set_robust_list(0x5555686ec660, 24 [pid 12860] <... symlink resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12862 [pid 5066] <... mkdir resumed>) = 0 [pid 12861] write(3, "1000", 4) = 4 [pid 12862] <... set_robust_list resumed>) = 0 [pid 12861] close(3 [pid 12860] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12862] chdir("./1554" [pid 12860] <... bpf resumed>) = 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12862] <... chdir resumed>) = 0 [pid 12860] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12861] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12862] <... prctl resumed>) = 0 [pid 12861] symlink("/dev/binderfs", "./binderfs" [pid 12860] <... bpf resumed>) = 4 [pid 12862] setpgid(0, 0 [pid 12860] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12864 attached ./strace-static-x86_64: Process 12863 attached [pid 12861] <... symlink resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12863 [pid 12864] set_robust_list(0x5555686ec660, 24 [pid 12863] set_robust_list(0x5555686ec660, 24 [pid 12862] <... setpgid resumed>) = 0 [pid 12860] <... bpf resumed>) = 5 [pid 12864] <... set_robust_list resumed>) = 0 [pid 12863] <... set_robust_list resumed>) = 0 [pid 12862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12864 [pid 12863] chdir("./1577" [pid 12862] <... openat resumed>) = 3 [pid 12861] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12864] chdir("./1509" [pid 12863] <... chdir resumed>) = 0 [pid 12862] write(3, "1000", 4 [pid 12860] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12864] <... chdir resumed>) = 0 [pid 12863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12862] <... write resumed>) = 4 [pid 12861] <... bpf resumed>) = 3 [pid 12860] <... bpf resumed>) = 6 [pid 12864] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12863] <... prctl resumed>) = 0 [pid 12862] close(3 [pid 12861] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12860] exit_group(0 [pid 12864] <... prctl resumed>) = 0 [pid 12863] setpgid(0, 0 [pid 12862] <... close resumed>) = 0 [pid 12862] symlink("/dev/binderfs", "./binderfs" [pid 12860] <... exit_group resumed>) = ? [pid 12864] setpgid(0, 0 [pid 12863] <... setpgid resumed>) = 0 [pid 12862] <... symlink resumed>) = 0 [pid 12861] <... bpf resumed>) = 4 [pid 12864] <... setpgid resumed>) = 0 [pid 12863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12862] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12861] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12860] +++ exited with 0 +++ [pid 12862] <... bpf resumed>) = 3 [pid 12862] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12863] <... openat resumed>) = 3 [pid 12862] <... bpf resumed>) = 4 [pid 12862] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12860, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12862] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12864] <... openat resumed>) = 3 [pid 12863] write(3, "1000", 4 [pid 12861] <... bpf resumed>) = 5 [pid 5071] umount2("./1590", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12861] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12864] write(3, "1000", 4 [pid 12863] <... write resumed>) = 4 [pid 12864] <... write resumed>) = 4 [pid 12863] close(3 [pid 12864] close(3 [pid 12863] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1590", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12864] <... close resumed>) = 0 [pid 12863] symlink("/dev/binderfs", "./binderfs" [pid 12862] <... bpf resumed>) = 6 [pid 12861] <... bpf resumed>) = 6 [pid 12864] symlink("/dev/binderfs", "./binderfs" [pid 12863] <... symlink resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12864] <... symlink resumed>) = 0 [pid 12862] exit_group(0 [pid 12861] exit_group(0 [pid 5071] newfstatat(3, "", [pid 12863] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12864] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12862] <... exit_group resumed>) = ? [pid 12861] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12864] <... bpf resumed>) = 3 [pid 12863] <... bpf resumed>) = 3 [pid 12864] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12863] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 12864] <... bpf resumed>) = 4 [pid 12863] <... bpf resumed>) = 4 [pid 12864] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12863] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12864] <... bpf resumed>) = 5 [pid 5071] umount2("./1590/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12864] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1590/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1590/binderfs" [pid 12863] <... bpf resumed>) = 5 [pid 12863] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... unlink resumed>) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1590" [pid 12862] +++ exited with 0 +++ [pid 12861] +++ exited with 0 +++ [pid 5071] <... rmdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12862, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] mkdir("./1591", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12861, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] umount2("./1554", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1554", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./1534", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", ./strace-static-x86_64: Process 12865 attached [pid 12864] <... bpf resumed>) = 6 [pid 12863] <... bpf resumed>) = 6 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12865] set_robust_list(0x5555686ec660, 24 [pid 12864] exit_group(0 [pid 12863] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12865 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] openat(AT_FDCWD, "./1534", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12865] <... set_robust_list resumed>) = 0 [pid 12863] <... exit_group resumed>) = ? [pid 12865] chdir("./1591" [pid 5068] getdents64(3, [pid 12864] <... exit_group resumed>) = ? [pid 12863] +++ exited with 0 +++ [pid 5067] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12865] <... chdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12863, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] umount2("./1577", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12864] +++ exited with 0 +++ [pid 5068] umount2("./1554/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(3, "", [pid 12865] <... prctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12865] setpgid(0, 0 [pid 5069] openat(AT_FDCWD, "./1577", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(AT_FDCWD, "./1554/binderfs", [pid 5067] getdents64(3, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12864, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12865] <... setpgid resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1509", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(3, "", [pid 5068] unlink("./1554/binderfs" [pid 5067] umount2("./1534/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./1509", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12865] <... openat resumed>) = 3 [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 12865] write(3, "1000", 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(AT_FDCWD, "./1534/binderfs", [pid 12865] <... write resumed>) = 4 [pid 5069] umount2("./1577/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(3, "", [pid 12865] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] close(3 [pid 5069] newfstatat(AT_FDCWD, "./1577/binderfs", [pid 5068] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12865] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1534/binderfs" [pid 12865] symlink("/dev/binderfs", "./binderfs" [pid 5069] unlink("./1577/binderfs" [pid 5068] rmdir("./1554" [pid 5066] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 12865] <... symlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1509/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] mkdir("./1555", 0777 [pid 5066] newfstatat(AT_FDCWD, "./1509/binderfs", [pid 12865] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 12865] <... bpf resumed>) = 3 [pid 5069] close(3 [pid 5067] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12865] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 5067] rmdir("./1534" [pid 5066] unlink("./1509/binderfs" [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1509" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1510", 0777 [pid 12865] <... bpf resumed>) = 4 [pid 5069] rmdir("./1577" [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1535", 0777 [pid 12865] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12865] <... bpf resumed>) = 5 [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12866 attached [pid 12866] set_robust_list(0x5555686ec660, 24) = 0 [pid 12866] chdir("./1555" [pid 12865] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] mkdir("./1578", 0777 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12866 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12866] <... chdir resumed>) = 0 [pid 12866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12866] setpgid(0, 0) = 0 [pid 5069] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12868 attached ./strace-static-x86_64: Process 12867 attached [pid 12865] <... bpf resumed>) = 6 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12865] exit_group(0 [pid 12868] set_robust_list(0x5555686ec660, 24 [pid 12867] set_robust_list(0x5555686ec660, 24 [pid 12866] <... openat resumed>) = 3 [pid 12865] <... exit_group resumed>) = ? [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12868 [pid 12867] <... set_robust_list resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12867 [pid 12868] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 12869 attached [pid 12868] chdir("./1510" [pid 12867] chdir("./1535" [pid 12866] write(3, "1000", 4 [pid 12868] <... chdir resumed>) = 0 [pid 12865] +++ exited with 0 +++ [pid 12869] set_robust_list(0x5555686ec660, 24 [pid 12868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12866] <... write resumed>) = 4 [pid 12867] <... chdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12869 [pid 12869] <... set_robust_list resumed>) = 0 [pid 12868] <... prctl resumed>) = 0 [pid 12867] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12866] close(3 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12865, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] umount2("./1591", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12869] chdir("./1578" [pid 12868] setpgid(0, 0 [pid 12867] <... prctl resumed>) = 0 [pid 12866] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1591", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1591/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1591/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./1591/binderfs" [pid 12869] <... chdir resumed>) = 0 [pid 12868] <... setpgid resumed>) = 0 [pid 12867] setpgid(0, 0 [pid 12866] symlink("/dev/binderfs", "./binderfs" [pid 12867] <... setpgid resumed>) = 0 [pid 12869] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12866] <... symlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 12869] <... prctl resumed>) = 0 [pid 12868] <... openat resumed>) = 3 [pid 12867] <... openat resumed>) = 3 [pid 12866] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12869] setpgid(0, 0 [pid 12868] write(3, "1000", 4 [pid 12867] write(3, "1000", 4 [pid 12866] <... bpf resumed>) = 3 [pid 5071] getdents64(3, [pid 12869] <... setpgid resumed>) = 0 [pid 12868] <... write resumed>) = 4 [pid 12867] <... write resumed>) = 4 [pid 12866] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12868] close(3 [pid 12867] close(3 [pid 5071] close(3 [pid 12868] <... close resumed>) = 0 [pid 12867] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 12869] <... openat resumed>) = 3 [pid 12868] symlink("/dev/binderfs", "./binderfs" [pid 12867] symlink("/dev/binderfs", "./binderfs" [pid 12866] <... bpf resumed>) = 4 [pid 5071] rmdir("./1591" [pid 12869] write(3, "1000", 4 [pid 12868] <... symlink resumed>) = 0 [pid 12867] <... symlink resumed>) = 0 [pid 12866] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... rmdir resumed>) = 0 [pid 12869] <... write resumed>) = 4 [pid 12868] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12867] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1592", 0777 [pid 12869] close(3 [pid 12868] <... bpf resumed>) = 3 [pid 12867] <... bpf resumed>) = 3 [pid 12866] <... bpf resumed>) = 5 [pid 12869] <... close resumed>) = 0 [pid 12868] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12869] symlink("/dev/binderfs", "./binderfs" [pid 12867] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12866] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 12869] <... symlink resumed>) = 0 [pid 12868] <... bpf resumed>) = 4 [pid 12867] <... bpf resumed>) = 4 [pid 12868] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12869] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12867] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12866] <... bpf resumed>) = 6 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12869] <... bpf resumed>) = 3 [pid 12868] <... bpf resumed>) = 5 [pid 12868] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12870 attached [pid 12869] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12867] <... bpf resumed>) = 5 [pid 12866] exit_group(0 [pid 12868] <... bpf resumed>) = 6 [pid 12870] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12870 [pid 12870] <... set_robust_list resumed>) = 0 [pid 12869] <... bpf resumed>) = 4 [pid 12868] exit_group(0 [pid 12867] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12866] <... exit_group resumed>) = ? [pid 12870] chdir("./1592" [pid 12869] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12868] <... exit_group resumed>) = ? [pid 12867] <... bpf resumed>) = 6 [pid 12870] <... chdir resumed>) = 0 [pid 12870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12866] +++ exited with 0 +++ [pid 12870] <... prctl resumed>) = 0 [pid 12870] setpgid(0, 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12866, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12870] <... setpgid resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... restart_syscall resumed>) = 0 [pid 12869] <... bpf resumed>) = 5 [pid 12869] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12867] exit_group(0 [pid 12870] <... openat resumed>) = 3 [pid 12867] <... exit_group resumed>) = ? [pid 5068] umount2("./1555", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12870] write(3, "1000", 4 [pid 5068] openat(AT_FDCWD, "./1555", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12870] <... write resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 12870] close(3) = 0 [pid 5068] newfstatat(3, "", [pid 12870] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 12870] <... symlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] umount2("./1555/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1555/binderfs", [pid 12870] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1555/binderfs" [pid 12870] <... bpf resumed>) = 3 [pid 12868] +++ exited with 0 +++ [pid 12869] <... bpf resumed>) = 6 [pid 12869] exit_group(0 [pid 5068] <... unlink resumed>) = 0 [pid 12870] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12869] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12868, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1510", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1510", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12870] <... bpf resumed>) = 4 [pid 5068] rmdir("./1555" [pid 5066] <... openat resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12870] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] mkdir("./1556", 0777 [pid 5066] getdents64(3, [pid 12870] <... bpf resumed>) = 5 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12870] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12869] +++ exited with 0 +++ [pid 12867] +++ exited with 0 +++ [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1510/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1510/binderfs", [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12869, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12867, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./1578", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] unlink("./1510/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12871 attached [pid 5069] openat(AT_FDCWD, "./1578", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 12871] set_robust_list(0x5555686ec660, 24 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12871 [pid 12871] <... set_robust_list resumed>) = 0 [pid 12871] chdir("./1556" [pid 5069] newfstatat(3, "", [pid 5067] umount2("./1535", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12871] <... chdir resumed>) = 0 [pid 12871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12871] setpgid(0, 0) = 0 [pid 12870] <... bpf resumed>) = 6 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] openat(AT_FDCWD, "./1535", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] close(3 [pid 12871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12870] exit_group(0 [pid 5069] getdents64(3, [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1510" [pid 12871] <... openat resumed>) = 3 [pid 12870] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] newfstatat(3, "", [pid 12871] write(3, "1000", 4 [pid 5069] umount2("./1578/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12871] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12871] close(3 [pid 5069] newfstatat(AT_FDCWD, "./1578/binderfs", [pid 5067] getdents64(3, [pid 5066] mkdir("./1511", 0777 [pid 12871] <... close resumed>) = 0 [pid 12870] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... mkdir resumed>) = 0 [pid 12871] symlink("/dev/binderfs", "./binderfs" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12870, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] unlink("./1578/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... unlink resumed>) = 0 [pid 5067] umount2("./1535/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12872 attached [pid 12871] <... symlink resumed>) = 0 [pid 5069] getdents64(3, [pid 12872] set_robust_list(0x5555686ec660, 24 [pid 12871] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12872 [pid 12872] <... set_robust_list resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12872] chdir("./1511" [pid 12871] <... bpf resumed>) = 3 [pid 5069] close(3 [pid 5067] newfstatat(AT_FDCWD, "./1535/binderfs", [pid 12872] <... chdir resumed>) = 0 [pid 12871] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] umount2("./1592", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... close resumed>) = 0 [pid 12872] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12871] <... bpf resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] rmdir("./1578" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12872] <... prctl resumed>) = 0 [pid 12871] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] unlink("./1535/binderfs" [pid 12872] setpgid(0, 0 [pid 12871] <... bpf resumed>) = 5 [pid 5071] openat(AT_FDCWD, "./1592", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... rmdir resumed>) = 0 [pid 12872] <... setpgid resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12871] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... unlink resumed>) = 0 [pid 12872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12871] <... bpf resumed>) = 6 [pid 5071] newfstatat(3, "", [pid 5069] mkdir("./1579", 0777 [pid 5067] getdents64(3, [pid 12872] <... openat resumed>) = 3 [pid 12871] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12872] write(3, "1000", 4 [pid 12871] <... exit_group resumed>) = ? [pid 5071] getdents64(3, [pid 5067] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12873 attached [pid 12872] <... write resumed>) = 4 [pid 12871] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... close resumed>) = 0 [pid 12873] set_robust_list(0x5555686ec660, 24 [pid 12872] close(3 [pid 5071] umount2("./1592/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12873] <... set_robust_list resumed>) = 0 [pid 12872] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12873 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12871, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] rmdir("./1535" [pid 12873] chdir("./1579" [pid 12872] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./1592/binderfs", [pid 5068] umount2("./1556", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12873] <... chdir resumed>) = 0 [pid 12872] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 12873] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] unlink("./1592/binderfs" [pid 5068] openat(AT_FDCWD, "./1556", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12873] <... prctl resumed>) = 0 [pid 12873] setpgid(0, 0 [pid 12872] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 5067] mkdir("./1536", 0777 [pid 12872] <... bpf resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 12873] <... setpgid resumed>) = 0 [pid 5071] getdents64(3, [pid 5068] newfstatat(3, "", [pid 12872] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12872] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12873] <... openat resumed>) = 3 [pid 12872] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] close(3 [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12874 attached [pid 12873] write(3, "1000", 4 [pid 5071] <... close resumed>) = 0 [pid 12874] set_robust_list(0x5555686ec660, 24 [pid 12873] <... write resumed>) = 4 [pid 5071] rmdir("./1592" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12874 [pid 12874] <... set_robust_list resumed>) = 0 [pid 12873] close(3) = 0 [pid 12872] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] umount2("./1556/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12874] chdir("./1536" [pid 12873] symlink("/dev/binderfs", "./binderfs" [pid 12872] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12874] <... chdir resumed>) = 0 [pid 12873] <... symlink resumed>) = 0 [pid 5071] mkdir("./1593", 0777 [pid 12874] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12872] <... bpf resumed>) = 6 [pid 5068] newfstatat(AT_FDCWD, "./1556/binderfs", [pid 12874] <... prctl resumed>) = 0 [pid 12874] setpgid(0, 0 [pid 12873] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12872] exit_group(0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12874] <... setpgid resumed>) = 0 [pid 12873] <... bpf resumed>) = 3 [pid 12872] <... exit_group resumed>) = ? [pid 5071] <... mkdir resumed>) = 0 [pid 5068] unlink("./1556/binderfs" [pid 12874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12875 attached [pid 12874] <... openat resumed>) = 3 [pid 12873] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12872] +++ exited with 0 +++ [pid 5068] <... unlink resumed>) = 0 [pid 12875] set_robust_list(0x5555686ec660, 24 [pid 12874] write(3, "1000", 4 [pid 12875] <... set_robust_list resumed>) = 0 [pid 12875] chdir("./1593" [pid 12874] <... write resumed>) = 4 [pid 12873] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12875 [pid 5068] getdents64(3, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12872, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12874] close(3 [pid 12875] <... chdir resumed>) = 0 [pid 12875] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12875] <... prctl resumed>) = 0 [pid 12875] setpgid(0, 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12874] <... close resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12874] symlink("/dev/binderfs", "./binderfs" [pid 12873] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12874] <... symlink resumed>) = 0 [pid 12875] <... setpgid resumed>) = 0 [pid 5068] close(3 [pid 12875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12874] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12873] <... bpf resumed>) = 5 [pid 12875] <... openat resumed>) = 3 [pid 12873] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... close resumed>) = 0 [pid 12875] write(3, "1000", 4 [pid 12874] <... bpf resumed>) = 3 [pid 5066] umount2("./1511", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12875] <... write resumed>) = 4 [pid 12874] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] rmdir("./1556" [pid 12875] close(3 [pid 12874] <... bpf resumed>) = 4 [pid 12873] <... bpf resumed>) = 6 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12875] <... close resumed>) = 0 [pid 12874] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1511", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12875] symlink("/dev/binderfs", "./binderfs" [pid 12874] <... bpf resumed>) = 5 [pid 12873] exit_group(0 [pid 5068] mkdir("./1557", 0777 [pid 12875] <... symlink resumed>) = 0 [pid 12874] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12873] <... exit_group resumed>) = ? [pid 5066] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 12874] <... bpf resumed>) = 6 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12875] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] newfstatat(3, "", [pid 12875] <... bpf resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12875] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12874] exit_group(0 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12876 attached [pid 12876] set_robust_list(0x5555686ec660, 24 [pid 12875] <... bpf resumed>) = 4 [pid 12874] <... exit_group resumed>) = ? [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12876 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12876] <... set_robust_list resumed>) = 0 [pid 12875] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] umount2("./1511/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12876] chdir("./1557" [pid 12875] <... bpf resumed>) = 5 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1511/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1511/binderfs" [pid 12875] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... unlink resumed>) = 0 [pid 12876] <... chdir resumed>) = 0 [pid 12876] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] getdents64(3, [pid 12876] setpgid(0, 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12876] <... setpgid resumed>) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1511" [pid 12876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12874] +++ exited with 0 +++ [pid 12873] +++ exited with 0 +++ [pid 12876] <... openat resumed>) = 3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12873, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12874, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12876] write(3, "1000", 4 [pid 5066] <... rmdir resumed>) = 0 [pid 5069] umount2("./1579", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1536", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12876] <... write resumed>) = 4 [pid 5066] mkdir("./1512", 0777 [pid 12876] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... mkdir resumed>) = 0 [pid 12876] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1579", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12876] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12876] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1536", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12877 attached [pid 12877] set_robust_list(0x5555686ec660, 24 [pid 12876] <... bpf resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12877 [pid 5067] <... openat resumed>) = 3 [pid 12877] <... set_robust_list resumed>) = 0 [pid 12876] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(3, "", [pid 12877] chdir("./1512" [pid 12876] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12876] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12877] <... chdir resumed>) = 0 [pid 12875] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 5067] getdents64(3, [pid 12877] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12875] exit_group(0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12875] <... exit_group resumed>) = ? [pid 12877] <... prctl resumed>) = 0 [pid 5069] umount2("./1579/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12877] setpgid(0, 0) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(AT_FDCWD, "./1579/binderfs", [pid 12875] +++ exited with 0 +++ [pid 12876] <... bpf resumed>) = 5 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12875, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1536/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12877] <... openat resumed>) = 3 [pid 12876] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] unlink("./1579/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1536/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1536/binderfs") = 0 [pid 5067] getdents64(3, [pid 12877] write(3, "1000", 4 [pid 5069] <... unlink resumed>) = 0 [pid 5071] umount2("./1593", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12877] <... write resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12877] close(3 [pid 5071] openat(AT_FDCWD, "./1593", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 12877] <... close resumed>) = 0 [pid 5069] close(3 [pid 5067] <... close resumed>) = 0 [pid 12877] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... openat resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 5067] rmdir("./1536" [pid 5071] newfstatat(3, "", [pid 12877] <... symlink resumed>) = 0 [pid 12876] <... bpf resumed>) = 6 [pid 5069] rmdir("./1579" [pid 5067] <... rmdir resumed>) = 0 [pid 12876] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1537", 0777 [pid 12877] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12876] <... exit_group resumed>) = ? [pid 5071] getdents64(3, [pid 5069] mkdir("./1580", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 12877] <... bpf resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12878 attached [pid 12877] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12876] +++ exited with 0 +++ [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12878] set_robust_list(0x5555686ec660, 24 [pid 12877] <... bpf resumed>) = 4 [pid 5071] umount2("./1593/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12876, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12877] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144./strace-static-x86_64: Process 12879 attached [pid 12878] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12878 [pid 12878] chdir("./1537" [pid 12877] <... bpf resumed>) = 5 [pid 5071] newfstatat(AT_FDCWD, "./1593/binderfs", [pid 12879] set_robust_list(0x5555686ec660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12879] <... set_robust_list resumed>) = 0 [pid 12878] <... chdir resumed>) = 0 [pid 12877] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] unlink("./1593/binderfs" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12879 [pid 12879] chdir("./1580" [pid 12878] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12877] <... bpf resumed>) = 6 [pid 5068] umount2("./1557", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5068] openat(AT_FDCWD, "./1557", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12879] <... chdir resumed>) = 0 [pid 12878] <... prctl resumed>) = 0 [pid 12877] exit_group(0 [pid 5071] close(3 [pid 5068] <... openat resumed>) = 3 [pid 12879] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12878] setpgid(0, 0 [pid 12877] <... exit_group resumed>) = ? [pid 5071] <... close resumed>) = 0 [pid 12878] <... setpgid resumed>) = 0 [pid 12878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12879] <... prctl resumed>) = 0 [pid 12877] +++ exited with 0 +++ [pid 5071] rmdir("./1593" [pid 5068] newfstatat(3, "", [pid 12879] setpgid(0, 0 [pid 12878] write(3, "1000", 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12879] <... setpgid resumed>) = 0 [pid 12878] <... write resumed>) = 4 [pid 5068] getdents64(3, [pid 12879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12878] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12878] <... close resumed>) = 0 [pid 12879] <... openat resumed>) = 3 [pid 12878] symlink("/dev/binderfs", "./binderfs" [pid 5071] mkdir("./1594", 0777 [pid 5068] umount2("./1557/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12879] write(3, "1000", 4 [pid 12878] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12877, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... mkdir resumed>) = 0 [pid 12879] <... write resumed>) = 4 [pid 5068] newfstatat(AT_FDCWD, "./1557/binderfs", [pid 12879] close(3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12879] <... close resumed>) = 0 [pid 12878] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1557/binderfs" [pid 5066] <... restart_syscall resumed>) = 0 [pid 12879] symlink("/dev/binderfs", "./binderfs" [pid 12878] <... bpf resumed>) = 3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... unlink resumed>) = 0 [pid 12879] <... symlink resumed>) = 0 [pid 12878] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 12880 attached [pid 12880] set_robust_list(0x5555686ec660, 24 [pid 12878] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12880 [pid 5068] getdents64(3, [pid 12879] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1512", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12880] <... set_robust_list resumed>) = 0 [pid 12879] <... bpf resumed>) = 3 [pid 12878] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12880] chdir("./1594" [pid 12879] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1512", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12878] <... bpf resumed>) = 5 [pid 5068] rmdir("./1557" [pid 12880] <... chdir resumed>) = 0 [pid 12879] <... bpf resumed>) = 4 [pid 12878] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12880] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12879] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12880] <... prctl resumed>) = 0 [pid 12878] <... bpf resumed>) = 6 [pid 12880] setpgid(0, 0 [pid 5068] mkdir("./1558", 0777 [pid 5066] newfstatat(3, "", [pid 12880] <... setpgid resumed>) = 0 [pid 12878] exit_group(0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12878] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12879] <... bpf resumed>) = 5 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1512/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12878] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12878, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] newfstatat(AT_FDCWD, "./1512/binderfs", ./strace-static-x86_64: Process 12881 attached [pid 12880] <... openat resumed>) = 3 [pid 12879] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12881] set_robust_list(0x5555686ec660, 24 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] unlink("./1512/binderfs" [pid 12881] <... set_robust_list resumed>) = 0 [pid 12880] write(3, "1000", 4 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12881 [pid 5066] <... unlink resumed>) = 0 [pid 12881] chdir("./1558" [pid 12880] <... write resumed>) = 4 [pid 12880] close(3 [pid 5066] getdents64(3, [pid 12880] <... close resumed>) = 0 [pid 12881] <... chdir resumed>) = 0 [pid 12880] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./1537", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12881] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12881] <... prctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1537", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12881] setpgid(0, 0 [pid 5066] close(3) = 0 [pid 12880] <... symlink resumed>) = 0 [pid 5066] rmdir("./1512" [pid 12881] <... setpgid resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] newfstatat(3, "", [pid 5066] <... rmdir resumed>) = 0 [pid 12881] <... openat resumed>) = 3 [pid 12880] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12881] write(3, "1000", 4 [pid 12880] <... bpf resumed>) = 3 [pid 5067] getdents64(3, [pid 5066] mkdir("./1513", 0777 [pid 12880] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12880] <... bpf resumed>) = 4 [pid 5067] umount2("./1537/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1537/binderfs", [pid 12881] <... write resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12881] close(3 [pid 12880] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] unlink("./1537/binderfs" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12881] <... close resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12882 attached [pid 12881] symlink("/dev/binderfs", "./binderfs" [pid 12880] <... bpf resumed>) = 5 [pid 12879] <... bpf resumed>) = 6 [pid 12882] set_robust_list(0x5555686ec660, 24 [pid 12881] <... symlink resumed>) = 0 [pid 12880] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12879] exit_group(0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12882 [pid 12882] <... set_robust_list resumed>) = 0 [pid 12881] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12880] <... bpf resumed>) = 6 [pid 12879] <... exit_group resumed>) = ? [pid 5067] close(3 [pid 12882] chdir("./1513" [pid 12881] <... bpf resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 12880] exit_group(0 [pid 12881] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12880] <... exit_group resumed>) = ? [pid 5067] rmdir("./1537" [pid 12882] <... chdir resumed>) = 0 [pid 12881] <... bpf resumed>) = 4 [pid 5067] <... rmdir resumed>) = 0 [pid 12881] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12882] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12882] setpgid(0, 0 [pid 5067] mkdir("./1538", 0777 [pid 12882] <... setpgid resumed>) = 0 [pid 12881] <... bpf resumed>) = 5 [pid 12882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12881] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... mkdir resumed>) = 0 [pid 12882] <... openat resumed>) = 3 [pid 12882] write(3, "1000", 4) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12882] close(3) = 0 ./strace-static-x86_64: Process 12883 attached [pid 12882] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12883 [pid 12882] <... symlink resumed>) = 0 [pid 12882] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12883] set_robust_list(0x5555686ec660, 24) = 0 [pid 12882] <... bpf resumed>) = 3 [pid 12883] chdir("./1538" [pid 12882] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12883] <... chdir resumed>) = 0 [pid 12883] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12882] <... bpf resumed>) = 4 [pid 12882] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12883] <... prctl resumed>) = 0 [pid 12882] <... bpf resumed>) = 5 [pid 12880] +++ exited with 0 +++ [pid 12879] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12879, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12880, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12883] setpgid(0, 0 [pid 12882] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12883] <... setpgid resumed>) = 0 [pid 12883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] umount2("./1594", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1580", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12883] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1594", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./1580", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12883] write(3, "1000", 4 [pid 5069] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 12883] <... write resumed>) = 4 [pid 12883] close(3) = 0 [pid 12883] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(3, "", [pid 12883] <... symlink resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12883] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 12883] <... bpf resumed>) = 3 [pid 5071] getdents64(3, [pid 12883] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1580/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./1594/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12883] <... bpf resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1580/binderfs", [pid 12883] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1594/binderfs", [pid 5069] unlink("./1580/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5071] unlink("./1594/binderfs" [pid 12883] <... bpf resumed>) = 5 [pid 12882] <... bpf resumed>) = 6 [pid 12881] <... bpf resumed>) = 6 [pid 5069] getdents64(3, [pid 12883] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12882] exit_group(0 [pid 12881] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12882] <... exit_group resumed>) = ? [pid 12883] exit_group(0 [pid 12881] <... exit_group resumed>) = ? [pid 5071] getdents64(3, [pid 5069] close(3 [pid 12883] <... exit_group resumed>) = ? [pid 12883] +++ exited with 0 +++ [pid 12882] +++ exited with 0 +++ [pid 5069] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] rmdir("./1580" [pid 12881] +++ exited with 0 +++ [pid 5071] close(3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12881, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] <... close resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12883, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12882, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] rmdir("./1594") = 0 [pid 5069] mkdir("./1581", 0777 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] umount2("./1513", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] mkdir("./1595", 0777) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./1558", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./1513", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 12884 attached [pid 12884] set_robust_list(0x5555686ec660, 24 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] openat(AT_FDCWD, "./1558", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] umount2("./1538", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(3, "", [pid 5067] openat(AT_FDCWD, "./1538", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./1513/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12884 [pid 5068] getdents64(3, [pid 5067] newfstatat(3, "", [pid 5066] newfstatat(AT_FDCWD, "./1513/binderfs", ./strace-static-x86_64: Process 12885 attached [pid 12884] <... set_robust_list resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12885 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12885] set_robust_list(0x5555686ec660, 24) = 0 [pid 12884] chdir("./1595" [pid 5068] umount2("./1558/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] unlink("./1513/binderfs" [pid 12885] chdir("./1581" [pid 12884] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 12885] <... chdir resumed>) = 0 [pid 12884] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] newfstatat(AT_FDCWD, "./1558/binderfs", [pid 12885] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12884] <... prctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] getdents64(3, [pid 12885] <... prctl resumed>) = 0 [pid 12884] setpgid(0, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12885] setpgid(0, 0 [pid 12884] <... setpgid resumed>) = 0 [pid 5067] umount2("./1538/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12885] <... setpgid resumed>) = 0 [pid 5068] unlink("./1558/binderfs" [pid 12884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 5068] getdents64(3, [pid 5067] newfstatat(AT_FDCWD, "./1538/binderfs", [pid 5066] <... close resumed>) = 0 [pid 12885] <... openat resumed>) = 3 [pid 12884] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] rmdir("./1513" [pid 12885] write(3, "1000", 4 [pid 12884] write(3, "1000", 4 [pid 5068] close(3 [pid 5067] unlink("./1538/binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 12885] <... write resumed>) = 4 [pid 12884] <... write resumed>) = 4 [pid 12885] close(3 [pid 12884] close(3 [pid 5068] <... close resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12885] <... close resumed>) = 0 [pid 12884] <... close resumed>) = 0 [pid 5068] rmdir("./1558" [pid 5066] mkdir("./1514", 0777 [pid 12885] symlink("/dev/binderfs", "./binderfs" [pid 12884] symlink("/dev/binderfs", "./binderfs" [pid 12885] <... symlink resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 12884] <... symlink resumed>) = 0 [pid 12885] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12884] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] mkdir("./1559", 0777 [pid 5067] close(3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12885] <... bpf resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1538" [pid 12885] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12884] <... bpf resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 12884] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... mkdir resumed>) = 0 [pid 12885] <... bpf resumed>) = 4 [pid 5067] mkdir("./1539", 0777./strace-static-x86_64: Process 12886 attached [pid 12884] <... bpf resumed>) = 4 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12886] set_robust_list(0x5555686ec660, 24 [pid 5067] <... mkdir resumed>) = 0 [pid 12885] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12886] <... set_robust_list resumed>) = 0 [pid 12884] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12886 [pid 12886] chdir("./1514") = 0 [pid 12886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12886] setpgid(0, 0./strace-static-x86_64: Process 12888 attached ./strace-static-x86_64: Process 12887 attached [pid 12885] <... bpf resumed>) = 5 [pid 12884] <... bpf resumed>) = 5 [pid 12888] set_robust_list(0x5555686ec660, 24 [pid 12887] set_robust_list(0x5555686ec660, 24 [pid 12886] <... setpgid resumed>) = 0 [pid 12885] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12884] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12888] <... set_robust_list resumed>) = 0 [pid 12888] chdir("./1539") = 0 [pid 12887] <... set_robust_list resumed>) = 0 [pid 12886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12885] <... bpf resumed>) = 6 [pid 12884] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12887 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12888 [pid 12888] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12887] chdir("./1559" [pid 12884] exit_group(0 [pid 12888] <... prctl resumed>) = 0 [pid 12885] exit_group(0 [pid 12886] <... openat resumed>) = 3 [pid 12885] <... exit_group resumed>) = ? [pid 12888] setpgid(0, 0 [pid 12887] <... chdir resumed>) = 0 [pid 12884] <... exit_group resumed>) = ? [pid 12888] <... setpgid resumed>) = 0 [pid 12887] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12886] write(3, "1000", 4 [pid 12888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12887] <... prctl resumed>) = 0 [pid 12886] <... write resumed>) = 4 [pid 12886] close(3 [pid 12888] <... openat resumed>) = 3 [pid 12887] setpgid(0, 0 [pid 12886] <... close resumed>) = 0 [pid 12886] symlink("/dev/binderfs", "./binderfs" [pid 12888] write(3, "1000", 4 [pid 12887] <... setpgid resumed>) = 0 [pid 12886] <... symlink resumed>) = 0 [pid 12887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12886] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12888] <... write resumed>) = 4 [pid 12887] <... openat resumed>) = 3 [pid 12886] <... bpf resumed>) = 3 [pid 12888] close(3 [pid 12886] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12888] <... close resumed>) = 0 [pid 12887] write(3, "1000", 4 [pid 12888] symlink("/dev/binderfs", "./binderfs" [pid 12887] <... write resumed>) = 4 [pid 12888] <... symlink resumed>) = 0 [pid 12887] close(3 [pid 12886] <... bpf resumed>) = 4 [pid 12887] <... close resumed>) = 0 [pid 12887] symlink("/dev/binderfs", "./binderfs" [pid 12886] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12888] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12887] <... symlink resumed>) = 0 [pid 12888] <... bpf resumed>) = 3 [pid 12885] +++ exited with 0 +++ [pid 12886] <... bpf resumed>) = 5 [pid 12888] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12887] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12886] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12885, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12888] <... bpf resumed>) = 4 [pid 12888] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12887] <... bpf resumed>) = 3 [pid 12886] <... bpf resumed>) = 6 [pid 12887] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12886] exit_group(0 [pid 5069] umount2("./1581", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12888] <... bpf resumed>) = 5 [pid 12887] <... bpf resumed>) = 4 [pid 12886] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12888] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12887] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] openat(AT_FDCWD, "./1581", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12887] <... bpf resumed>) = 5 [pid 5069] <... openat resumed>) = 3 [pid 12887] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 12888] <... bpf resumed>) = 6 [pid 12884] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12888] exit_group(0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12884, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] umount2("./1581/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12888] <... exit_group resumed>) = ? [pid 5071] umount2("./1595", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1595", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] newfstatat(AT_FDCWD, "./1581/binderfs", [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./1581/binderfs") = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./1595/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1595/binderfs", [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1581" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5071] unlink("./1595/binderfs" [pid 5069] mkdir("./1582", 0777 [pid 5071] <... unlink resumed>) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5069] <... mkdir resumed>) = 0 [pid 12887] <... bpf resumed>) = 6 [pid 12886] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 12887] exit_group(0 [pid 5071] rmdir("./1595" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12886, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12887] <... exit_group resumed>) = ? [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1596", 0777) = 0 [pid 5066] umount2("./1514", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1514", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12889 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12889 [pid 12889] set_robust_list(0x5555686ec660, 24 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12890 attached [pid 12889] <... set_robust_list resumed>) = 0 [pid 12889] chdir("./1582" [pid 12890] set_robust_list(0x5555686ec660, 24 [pid 12889] <... chdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12890] <... set_robust_list resumed>) = 0 [pid 5066] umount2("./1514/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12889] setpgid(0, 0) = 0 [pid 12890] chdir("./1596" [pid 12889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12890 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12890] <... chdir resumed>) = 0 [pid 12889] <... openat resumed>) = 3 [pid 12888] +++ exited with 0 +++ [pid 5066] newfstatat(AT_FDCWD, "./1514/binderfs", [pid 12890] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12887] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12888, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12890] <... prctl resumed>) = 0 [pid 12889] write(3, "1000", 4) = 4 [pid 5066] unlink("./1514/binderfs" [pid 12890] setpgid(0, 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12887, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12889] close(3) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12889] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12889] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12890] <... setpgid resumed>) = 0 [pid 5068] umount2("./1559", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1539", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] openat(AT_FDCWD, "./1559", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1539", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12889] <... bpf resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12890] <... openat resumed>) = 3 [pid 12889] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] newfstatat(3, "", [pid 5066] close(3 [pid 12890] write(3, "1000", 4 [pid 12889] <... bpf resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... close resumed>) = 0 [pid 12890] <... write resumed>) = 4 [pid 12889] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5066] rmdir("./1514" [pid 12890] close(3 [pid 12889] <... bpf resumed>) = 5 [pid 5068] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12890] <... close resumed>) = 0 [pid 12889] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... rmdir resumed>) = 0 [pid 12890] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1539/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1515", 0777 [pid 5068] umount2("./1559/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./1559/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12890] <... symlink resumed>) = 0 [pid 12889] <... bpf resumed>) = 6 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... mkdir resumed>) = 0 [pid 12890] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12889] exit_group(0 [pid 5068] unlink("./1559/binderfs" [pid 5067] newfstatat(AT_FDCWD, "./1539/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12890] <... bpf resumed>) = 3 [pid 12889] <... exit_group resumed>) = ? [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12891 attached [pid 12891] set_robust_list(0x5555686ec660, 24 [pid 5068] getdents64(3, [pid 5067] unlink("./1539/binderfs" [pid 12890] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12889] +++ exited with 0 +++ [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12891 [pid 12891] <... set_robust_list resumed>) = 0 [pid 12890] <... bpf resumed>) = 4 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12889, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12890] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] close(3 [pid 12891] chdir("./1515" [pid 12890] <... bpf resumed>) = 5 [pid 5068] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 12890] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12891] <... chdir resumed>) = 0 [pid 12890] <... bpf resumed>) = 6 [pid 12890] exit_group(0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12891] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] umount2("./1582", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./1559" [pid 5067] close(3 [pid 12891] <... prctl resumed>) = 0 [pid 12891] setpgid(0, 0 [pid 12890] <... exit_group resumed>) = ? [pid 12891] <... setpgid resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12890] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12890, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] openat(AT_FDCWD, "./1582", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./1560", 0777 [pid 5067] rmdir("./1539" [pid 12891] <... openat resumed>) = 3 [pid 12891] write(3, "1000", 4) = 4 [pid 5069] <... openat resumed>) = 3 [pid 12891] close(3) = 0 [pid 12891] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5071] umount2("./1596", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12891] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./1540", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12891] <... bpf resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./1596", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 12892 attached [pid 12891] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12892] set_robust_list(0x5555686ec660, 24 [pid 5071] <... openat resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12892 [pid 5071] newfstatat(3, "", [pid 12891] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12892] <... set_robust_list resumed>) = 0 [pid 12891] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 5069] umount2("./1582/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12893 attached [pid 12892] chdir("./1560" [pid 12891] <... bpf resumed>) = 5 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12893] set_robust_list(0x5555686ec660, 24 [pid 12892] <... chdir resumed>) = 0 [pid 12891] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] umount2("./1596/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./1582/binderfs", [pid 12893] <... set_robust_list resumed>) = 0 [pid 12892] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12891] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12893 [pid 12892] <... prctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1596/binderfs", [pid 12893] chdir("./1540" [pid 12892] setpgid(0, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12891] exit_group(0 [pid 12892] <... setpgid resumed>) = 0 [pid 5071] unlink("./1596/binderfs" [pid 12893] <... chdir resumed>) = 0 [pid 12892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12891] <... exit_group resumed>) = ? [pid 5069] unlink("./1582/binderfs" [pid 12893] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... unlink resumed>) = 0 [pid 12893] <... prctl resumed>) = 0 [pid 12892] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5069] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 12892] write(3, "1000", 4 [pid 5071] <... close resumed>) = 0 [pid 12892] <... write resumed>) = 4 [pid 5071] rmdir("./1596" [pid 12893] setpgid(0, 0 [pid 12892] close(3 [pid 12891] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 12893] <... setpgid resumed>) = 0 [pid 12892] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12892] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12891, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] close(3 [pid 12892] <... symlink resumed>) = 0 [pid 5071] mkdir("./1597", 0777 [pid 5069] <... close resumed>) = 0 [pid 5066] umount2("./1515", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12893] <... openat resumed>) = 3 [pid 12892] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12893] write(3, "1000", 4 [pid 12892] <... bpf resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 12893] <... write resumed>) = 4 [pid 12892] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] rmdir("./1582" [pid 12893] close(3 [pid 12892] <... bpf resumed>) = 4 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12893] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1515", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12893] symlink("/dev/binderfs", "./binderfs" [pid 12892] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12893] <... symlink resumed>) = 0 [pid 12892] <... bpf resumed>) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12892] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12894 attached [pid 12893] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] mkdir("./1583", 0777 [pid 5066] newfstatat(3, "", [pid 12894] set_robust_list(0x5555686ec660, 24 [pid 12893] <... bpf resumed>) = 3 [pid 12892] <... bpf resumed>) = 6 [pid 12894] <... set_robust_list resumed>) = 0 [pid 12892] exit_group(0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12892] <... exit_group resumed>) = ? [pid 12894] chdir("./1597" [pid 12893] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12894 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12894] <... chdir resumed>) = 0 [pid 12894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12892] +++ exited with 0 +++ [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12894] <... prctl resumed>) = 0 [pid 12893] <... bpf resumed>) = 4 [pid 5066] umount2("./1515/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12894] setpgid(0, 0 [pid 12893] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12892, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12894] <... setpgid resumed>) = 0 [pid 12893] <... bpf resumed>) = 5 [pid 5068] umount2("./1560", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12895 attached [pid 12894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] newfstatat(AT_FDCWD, "./1515/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12895] set_robust_list(0x5555686ec660, 24 [pid 12894] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./1560", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] unlink("./1515/binderfs" [pid 12895] <... set_robust_list resumed>) = 0 [pid 12894] write(3, "1000", 4 [pid 12893] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12895 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 12895] chdir("./1583" [pid 12894] <... write resumed>) = 4 [pid 5068] newfstatat(3, "", [pid 12894] close(3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12894] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 12895] <... chdir resumed>) = 0 [pid 12894] symlink("/dev/binderfs", "./binderfs" [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12895] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12894] <... symlink resumed>) = 0 [pid 12895] <... prctl resumed>) = 0 [pid 12895] setpgid(0, 0 [pid 12894] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] close(3 [pid 12895] <... setpgid resumed>) = 0 [pid 12894] <... bpf resumed>) = 3 [pid 5068] umount2("./1560/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 12895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12894] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./1515" [pid 12895] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 12894] <... bpf resumed>) = 4 [pid 5068] newfstatat(AT_FDCWD, "./1560/binderfs", [pid 12895] write(3, "1000", 4) = 4 [pid 12895] close(3) = 0 [pid 12895] symlink("/dev/binderfs", "./binderfs" [pid 12894] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12893] <... bpf resumed>) = 6 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] mkdir("./1516", 0777 [pid 12895] <... symlink resumed>) = 0 [pid 12895] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12894] <... bpf resumed>) = 5 [pid 12893] exit_group(0 [pid 5068] unlink("./1560/binderfs" [pid 12894] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... mkdir resumed>) = 0 [pid 12895] <... bpf resumed>) = 3 [pid 12893] <... exit_group resumed>) = ? [pid 5068] <... unlink resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12894] <... bpf resumed>) = 6 [pid 12894] exit_group(0) = ? [pid 12895] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, ./strace-static-x86_64: Process 12896 attached [pid 12895] <... bpf resumed>) = 4 [pid 12896] set_robust_list(0x5555686ec660, 24 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12895] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] close(3 [pid 12896] <... set_robust_list resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12896 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1560" [pid 12896] chdir("./1516" [pid 12895] <... bpf resumed>) = 5 [pid 12896] <... chdir resumed>) = 0 [pid 12895] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... rmdir resumed>) = 0 [pid 12896] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] mkdir("./1561", 0777 [pid 12896] <... prctl resumed>) = 0 [pid 12896] setpgid(0, 0) = 0 [pid 12896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... mkdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12896] <... openat resumed>) = 3 [pid 12896] write(3, "1000", 4) = 4 [pid 12896] close(3) = 0 ./strace-static-x86_64: Process 12897 attached [pid 12896] symlink("/dev/binderfs", "./binderfs" [pid 12894] +++ exited with 0 +++ [pid 12893] +++ exited with 0 +++ [pid 12897] set_robust_list(0x5555686ec660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12894, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12897 [pid 12897] <... set_robust_list resumed>) = 0 [pid 12896] <... symlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12893, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12897] chdir("./1561" [pid 12896] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12897] <... chdir resumed>) = 0 [pid 5071] umount2("./1597", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12896] <... bpf resumed>) = 3 [pid 12897] <... prctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12896] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12897] setpgid(0, 0 [pid 5071] openat(AT_FDCWD, "./1597", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... restart_syscall resumed>) = 0 [pid 12897] <... setpgid resumed>) = 0 [pid 12896] <... bpf resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 12897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./1540", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12896] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12897] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12897] write(3, "1000", 4 [pid 5067] openat(AT_FDCWD, "./1540", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12897] <... write resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] umount2("./1597/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1597/binderfs", [pid 12897] close(3 [pid 12896] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12897] <... close resumed>) = 0 [pid 5071] unlink("./1597/binderfs" [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12897] symlink("/dev/binderfs", "./binderfs" [pid 12896] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 12897] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12897] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./1540/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12897] <... bpf resumed>) = 3 [pid 5071] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12897] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./1540/binderfs", [pid 12897] <... bpf resumed>) = 4 [pid 5071] rmdir("./1597" [pid 12897] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12895] <... bpf resumed>) = 6 [pid 5067] unlink("./1540/binderfs" [pid 12897] <... bpf resumed>) = 5 [pid 12896] <... bpf resumed>) = 6 [pid 12895] exit_group(0 [pid 5071] mkdir("./1598", 0777 [pid 5067] <... unlink resumed>) = 0 [pid 12897] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12896] exit_group(0 [pid 12895] <... exit_group resumed>) = ? [pid 12897] <... bpf resumed>) = 6 [pid 12897] exit_group(0) = ? [pid 12896] <... exit_group resumed>) = ? [pid 12895] +++ exited with 0 +++ [pid 5071] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12895, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12898 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12898 [pid 12898] set_robust_list(0x5555686ec660, 24 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12898] <... set_robust_list resumed>) = 0 [pid 12898] chdir("./1598" [pid 5067] close(3 [pid 12897] +++ exited with 0 +++ [pid 12898] <... chdir resumed>) = 0 [pid 12896] +++ exited with 0 +++ [pid 12898] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12897, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] rmdir("./1540" [pid 12898] <... prctl resumed>) = 0 [pid 12898] setpgid(0, 0) = 0 [pid 12898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1583", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12896, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./1541", 0777 [pid 5066] umount2("./1516", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12898] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12898] write(3, "1000", 4) = 4 [pid 5069] openat(AT_FDCWD, "./1583", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1516", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12898] close(3 [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./1561", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 12898] <... close resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 12898] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] openat(AT_FDCWD, "./1561", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(3, "", [pid 12898] <... symlink resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(3, "", [pid 5066] getdents64(3, [pid 12898] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1583/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./1516/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1516/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1516/binderfs") = 0 [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12899 attached [pid 12898] <... bpf resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12899 [pid 5069] newfstatat(AT_FDCWD, "./1583/binderfs", [pid 12899] set_robust_list(0x5555686ec660, 24 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12899] <... set_robust_list resumed>) = 0 [pid 12898] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] unlink("./1583/binderfs" [pid 5068] umount2("./1561/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 12899] chdir("./1541" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 12899] <... chdir resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1561/binderfs", [pid 5066] rmdir("./1516" [pid 12899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12898] <... bpf resumed>) = 4 [pid 5066] <... rmdir resumed>) = 0 [pid 12898] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] unlink("./1561/binderfs" [pid 5069] close(3 [pid 5066] mkdir("./1517", 0777) = 0 [pid 12898] <... bpf resumed>) = 5 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12899] <... prctl resumed>) = 0 [pid 12898] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... close resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 12900 attached [pid 12899] setpgid(0, 0 [pid 5069] rmdir("./1583" [pid 5068] getdents64(3, [pid 12900] set_robust_list(0x5555686ec660, 24 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12900 [pid 12900] <... set_robust_list resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12900] chdir("./1517" [pid 12899] <... setpgid resumed>) = 0 [pid 12898] <... bpf resumed>) = 6 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] close(3 [pid 12900] <... chdir resumed>) = 0 [pid 12899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12898] exit_group(0 [pid 5069] mkdir("./1584", 0777 [pid 5068] <... close resumed>) = 0 [pid 12900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12899] <... openat resumed>) = 3 [pid 12898] <... exit_group resumed>) = ? [pid 5068] rmdir("./1561" [pid 12900] <... prctl resumed>) = 0 [pid 12899] write(3, "1000", 4 [pid 5069] <... mkdir resumed>) = 0 [pid 12900] setpgid(0, 0 [pid 12899] <... write resumed>) = 4 [pid 12900] <... setpgid resumed>) = 0 [pid 12900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12899] close(3) = 0 [pid 12898] +++ exited with 0 +++ [pid 12900] <... openat resumed>) = 3 [pid 12899] symlink("/dev/binderfs", "./binderfs" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12898, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12900] write(3, "1000", 4 [pid 12899] <... symlink resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... rmdir resumed>) = 0 [pid 12900] <... write resumed>) = 4 [pid 5071] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 12901 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12901 [pid 12900] close(3 [pid 12901] set_robust_list(0x5555686ec660, 24 [pid 12900] <... close resumed>) = 0 [pid 12899] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12901] <... set_robust_list resumed>) = 0 [pid 12900] symlink("/dev/binderfs", "./binderfs" [pid 5068] mkdir("./1562", 0777 [pid 12901] chdir("./1584" [pid 12900] <... symlink resumed>) = 0 [pid 12899] <... bpf resumed>) = 3 [pid 5071] umount2("./1598", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12901] <... chdir resumed>) = 0 [pid 12899] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 12901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12900] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12899] <... bpf resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./1598", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12901] <... prctl resumed>) = 0 [pid 12900] <... bpf resumed>) = 3 [pid 12900] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... openat resumed>) = 3 [pid 12899] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(3, "", ./strace-static-x86_64: Process 12902 attached [pid 12901] setpgid(0, 0 [pid 12900] <... bpf resumed>) = 4 [pid 12899] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12901] <... setpgid resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12902 [pid 12900] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12902] set_robust_list(0x5555686ec660, 24 [pid 12899] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 12902] <... set_robust_list resumed>) = 0 [pid 12900] <... bpf resumed>) = 5 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12902] chdir("./1562" [pid 12901] <... openat resumed>) = 3 [pid 5071] umount2("./1598/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12902] <... chdir resumed>) = 0 [pid 12901] write(3, "1000", 4 [pid 12900] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12902] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12901] <... write resumed>) = 4 [pid 12899] <... bpf resumed>) = 6 [pid 12900] <... bpf resumed>) = 6 [pid 5071] newfstatat(AT_FDCWD, "./1598/binderfs", [pid 12902] <... prctl resumed>) = 0 [pid 12901] close(3 [pid 12899] exit_group(0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12900] exit_group(0 [pid 12902] setpgid(0, 0 [pid 12901] <... close resumed>) = 0 [pid 12899] <... exit_group resumed>) = ? [pid 5071] unlink("./1598/binderfs" [pid 12902] <... setpgid resumed>) = 0 [pid 12901] symlink("/dev/binderfs", "./binderfs" [pid 12900] <... exit_group resumed>) = ? [pid 12901] <... symlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 12902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12901] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] getdents64(3, [pid 12902] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12901] <... bpf resumed>) = 3 [pid 12902] write(3, "1000", 4) = 4 [pid 12902] close(3) = 0 [pid 12902] symlink("/dev/binderfs", "./binderfs" [pid 12901] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] close(3 [pid 12902] <... symlink resumed>) = 0 [pid 12901] <... bpf resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 12901] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] rmdir("./1598" [pid 12902] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... rmdir resumed>) = 0 [pid 12902] <... bpf resumed>) = 3 [pid 12901] <... bpf resumed>) = 5 [pid 5071] mkdir("./1599", 0777 [pid 12902] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12901] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12902] <... bpf resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12903 attached [pid 12902] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12903 [pid 12903] set_robust_list(0x5555686ec660, 24 [pid 12902] <... bpf resumed>) = 5 [pid 12902] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12903] <... set_robust_list resumed>) = 0 [pid 12903] chdir("./1599") = 0 [pid 12900] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12900, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./1517", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12899] +++ exited with 0 +++ [pid 12903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12899, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12903] setpgid(0, 0 [pid 5066] openat(AT_FDCWD, "./1517", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12903] <... setpgid resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12903] <... openat resumed>) = 3 [pid 5067] umount2("./1541", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12903] write(3, "1000", 4 [pid 12902] <... bpf resumed>) = 6 [pid 12901] <... bpf resumed>) = 6 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12903] <... write resumed>) = 4 [pid 12901] exit_group(0 [pid 5066] umount2("./1517/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12903] close(3 [pid 12902] exit_group(0 [pid 12901] <... exit_group resumed>) = ? [pid 5067] openat(AT_FDCWD, "./1541", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12903] <... close resumed>) = 0 [pid 12902] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 5066] newfstatat(AT_FDCWD, "./1517/binderfs", [pid 12903] symlink("/dev/binderfs", "./binderfs" [pid 5067] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12903] <... symlink resumed>) = 0 [pid 5066] unlink("./1517/binderfs") = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 12903] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12903] <... bpf resumed>) = 3 [pid 5067] umount2("./1541/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12903] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1541/binderfs", [pid 5066] close(3 [pid 12903] <... bpf resumed>) = 4 [pid 12903] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... close resumed>) = 0 [pid 5067] unlink("./1541/binderfs" [pid 5066] rmdir("./1517") = 0 [pid 5066] mkdir("./1518", 0777 [pid 12903] <... bpf resumed>) = 5 [pid 12902] +++ exited with 0 +++ [pid 12901] +++ exited with 0 +++ [pid 5067] <... unlink resumed>) = 0 [pid 12903] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12901, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12902, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5068] umount2("./1562", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./1541" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./1584", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./1562", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 5067] mkdir("./1542", 0777./strace-static-x86_64: Process 12904 attached [pid 12904] set_robust_list(0x5555686ec660, 24 [pid 5069] openat(AT_FDCWD, "./1584", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(3, "", [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12904 [pid 12904] <... set_robust_list resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12904] chdir("./1518" [pid 5068] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12904] <... chdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] umount2("./1562/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12904] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12904] <... prctl resumed>) = 0 [pid 12904] setpgid(0, 0./strace-static-x86_64: Process 12905 attached ) = 0 [pid 5069] umount2("./1584/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./1562/binderfs", [pid 12904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12905] set_robust_list(0x5555686ec660, 24 [pid 12904] <... openat resumed>) = 3 [pid 12903] <... bpf resumed>) = 6 [pid 5069] newfstatat(AT_FDCWD, "./1584/binderfs", [pid 5068] unlink("./1562/binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12905 [pid 12905] <... set_robust_list resumed>) = 0 [pid 12903] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12905] chdir("./1542" [pid 12904] write(3, "1000", 4 [pid 12903] <... exit_group resumed>) = ? [pid 5069] unlink("./1584/binderfs" [pid 5068] <... unlink resumed>) = 0 [pid 12905] <... chdir resumed>) = 0 [pid 12904] <... write resumed>) = 4 [pid 5069] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5069] getdents64(3, [pid 12905] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12904] close(3 [pid 12903] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12903, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12905] <... prctl resumed>) = 0 [pid 12904] <... close resumed>) = 0 [pid 5068] close(3 [pid 12905] setpgid(0, 0 [pid 12904] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... close resumed>) = 0 [pid 12905] <... setpgid resumed>) = 0 [pid 12904] <... symlink resumed>) = 0 [pid 5068] rmdir("./1562" [pid 12905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12904] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 12904] <... bpf resumed>) = 3 [pid 12904] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] mkdir("./1563", 0777 [pid 12905] <... openat resumed>) = 3 [pid 12904] <... bpf resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 12904] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... mkdir resumed>) = 0 [pid 5069] rmdir("./1584" [pid 12905] write(3, "1000", 4 [pid 5071] umount2("./1599", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12905] <... write resumed>) = 4 [pid 12904] <... bpf resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... rmdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12905] close(3 [pid 5071] openat(AT_FDCWD, "./1599", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] mkdir("./1585", 0777./strace-static-x86_64: Process 12906 attached [pid 12905] <... close resumed>) = 0 [pid 12904] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... openat resumed>) = 3 [pid 12905] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12906 [pid 12906] set_robust_list(0x5555686ec660, 24 [pid 12905] <... symlink resumed>) = 0 [pid 12904] <... bpf resumed>) = 6 [pid 5071] newfstatat(3, "", [pid 5069] <... mkdir resumed>) = 0 [pid 12906] <... set_robust_list resumed>) = 0 [pid 12905] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12906] chdir("./1563" [pid 12904] exit_group(0 [pid 5071] getdents64(3, [pid 12905] <... bpf resumed>) = 3 [pid 12905] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12904] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12906] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 12907 attached [pid 12905] <... bpf resumed>) = 4 [pid 12907] set_robust_list(0x5555686ec660, 24) = 0 [pid 12905] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12907] chdir("./1585" [pid 12906] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12904] +++ exited with 0 +++ [pid 5071] umount2("./1599/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12907 [pid 12906] <... prctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1599/binderfs", [pid 12906] setpgid(0, 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12904, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12907] <... chdir resumed>) = 0 [pid 12906] <... setpgid resumed>) = 0 [pid 12905] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12905] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12907] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] unlink("./1599/binderfs" [pid 12907] <... prctl resumed>) = 0 [pid 12907] setpgid(0, 0) = 0 [pid 12907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... unlink resumed>) = 0 [pid 5066] umount2("./1518", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12907] <... openat resumed>) = 3 [pid 12907] write(3, "1000", 4) = 4 [pid 12906] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5066] openat(AT_FDCWD, "./1518", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12907] close(3) = 0 [pid 12907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12906] write(3, "1000", 4 [pid 5066] <... openat resumed>) = 3 [pid 12906] <... write resumed>) = 4 [pid 5066] newfstatat(3, "", [pid 12906] close(3 [pid 5071] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12906] <... close resumed>) = 0 [pid 12907] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12906] symlink("/dev/binderfs", "./binderfs" [pid 12905] <... bpf resumed>) = 6 [pid 5071] <... close resumed>) = 0 [pid 12907] <... bpf resumed>) = 3 [pid 12905] exit_group(0 [pid 5066] getdents64(3, [pid 12907] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12905] <... exit_group resumed>) = ? [pid 12906] <... symlink resumed>) = 0 [pid 5071] rmdir("./1599" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12907] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12906] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12905] +++ exited with 0 +++ [pid 5071] <... rmdir resumed>) = 0 [pid 5066] umount2("./1518/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12906] <... bpf resumed>) = 3 [pid 12906] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12907] <... bpf resumed>) = 5 [pid 12906] <... bpf resumed>) = 4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12905, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] mkdir("./1600", 0777 [pid 12906] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 5066] newfstatat(AT_FDCWD, "./1518/binderfs", [pid 12906] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12907] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] unlink("./1518/binderfs" [pid 12907] <... bpf resumed>) = 6 [pid 12906] <... bpf resumed>) = 6 [pid 12907] exit_group(0 [pid 12906] exit_group(0 [pid 12907] <... exit_group resumed>) = ? [pid 5067] umount2("./1542", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5067] openat(AT_FDCWD, "./1542", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12907] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12908 attached [pid 12906] <... exit_group resumed>) = ? [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12908 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12907, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5066] close(3) = 0 [pid 12908] set_robust_list(0x5555686ec660, 24 [pid 12906] +++ exited with 0 +++ [pid 5067] newfstatat(3, "", [pid 12908] <... set_robust_list resumed>) = 0 [pid 5069] umount2("./1585", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] rmdir("./1518" [pid 12908] chdir("./1600" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12906, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 12908] <... chdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1585", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] mkdir("./1519", 0777 [pid 5068] umount2("./1563", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12908] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... openat resumed>) = 3 [pid 12908] <... prctl resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 12908] setpgid(0, 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1542/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12908] <... setpgid resumed>) = 0 [pid 5069] getdents64(3, [pid 12908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] openat(AT_FDCWD, "./1563", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12908] <... openat resumed>) = 3 [pid 5069] umount2("./1585/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [pid 5067] newfstatat(AT_FDCWD, "./1542/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12908] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] unlink("./1542/binderfs" [pid 12908] <... write resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1585/binderfs", [pid 12908] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12908] <... close resumed>) = 0 [pid 5069] unlink("./1585/binderfs" [pid 12908] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12908] <... symlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5069] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12908] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3./strace-static-x86_64: Process 12909 attached [pid 12908] <... bpf resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 5068] umount2("./1563/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12909] set_robust_list(0x5555686ec660, 24 [pid 12908] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] rmdir("./1585" [pid 5068] newfstatat(AT_FDCWD, "./1563/binderfs", [pid 5067] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12909 [pid 12909] <... set_robust_list resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] rmdir("./1542" [pid 5069] <... rmdir resumed>) = 0 [pid 5068] unlink("./1563/binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 12909] chdir("./1519" [pid 12908] <... bpf resumed>) = 4 [pid 5069] mkdir("./1586", 0777 [pid 5068] <... unlink resumed>) = 0 [pid 12909] <... chdir resumed>) = 0 [pid 12908] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] mkdir("./1543", 0777 [pid 12909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... mkdir resumed>) = 0 [pid 12909] <... prctl resumed>) = 0 [pid 12908] <... bpf resumed>) = 5 [pid 5068] getdents64(3, [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 12909] setpgid(0, 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] close(3 [pid 12909] <... setpgid resumed>) = 0 [pid 12908] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... close resumed>) = 0 ./strace-static-x86_64: Process 12911 attached ./strace-static-x86_64: Process 12910 attached [pid 12909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] rmdir("./1563" [pid 12911] set_robust_list(0x5555686ec660, 24 [pid 12910] set_robust_list(0x5555686ec660, 24 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12911 [pid 12911] <... set_robust_list resumed>) = 0 [pid 12910] <... set_robust_list resumed>) = 0 [pid 12909] <... openat resumed>) = 3 [pid 12908] <... bpf resumed>) = 6 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12910 [pid 5068] mkdir("./1564", 0777 [pid 12911] chdir("./1543" [pid 12910] chdir("./1586" [pid 12909] write(3, "1000", 4 [pid 12908] exit_group(0 [pid 12910] <... chdir resumed>) = 0 [pid 12911] <... chdir resumed>) = 0 [pid 12910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12909] <... write resumed>) = 4 [pid 12908] <... exit_group resumed>) = ? [pid 5068] <... mkdir resumed>) = 0 [pid 12910] <... prctl resumed>) = 0 [pid 12909] close(3 [pid 12911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12910] setpgid(0, 0 [pid 12911] <... prctl resumed>) = 0 [pid 12910] <... setpgid resumed>) = 0 [pid 12911] setpgid(0, 0 [pid 12910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12911] <... setpgid resumed>) = 0 [pid 12911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12908] +++ exited with 0 +++ [pid 12909] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12908, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12911] <... openat resumed>) = 3 [pid 12910] <... openat resumed>) = 3 [pid 12909] symlink("/dev/binderfs", "./binderfs" [pid 12911] write(3, "1000", 4) = 4 [pid 12911] close(3 [pid 12910] write(3, "1000", 4./strace-static-x86_64: Process 12912 attached [pid 12911] <... close resumed>) = 0 [pid 12910] <... write resumed>) = 4 [pid 12909] <... symlink resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12912 [pid 12912] set_robust_list(0x5555686ec660, 24 [pid 12911] symlink("/dev/binderfs", "./binderfs" [pid 12910] close(3 [pid 12909] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12912] <... set_robust_list resumed>) = 0 [pid 12911] <... symlink resumed>) = 0 [pid 12910] <... close resumed>) = 0 [pid 12909] <... bpf resumed>) = 3 [pid 12912] chdir("./1564" [pid 12911] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12910] symlink("/dev/binderfs", "./binderfs" [pid 12909] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12912] <... chdir resumed>) = 0 [pid 12909] <... bpf resumed>) = 4 [pid 5071] umount2("./1600", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1600", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12910] <... symlink resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 12909] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] newfstatat(3, "", [pid 12912] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12911] <... bpf resumed>) = 3 [pid 12910] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12909] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12912] <... prctl resumed>) = 0 [pid 12911] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12912] setpgid(0, 0 [pid 12910] <... bpf resumed>) = 3 [pid 12912] <... setpgid resumed>) = 0 [pid 12909] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] getdents64(3, [pid 12911] <... bpf resumed>) = 4 [pid 12912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12910] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12911] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12912] <... openat resumed>) = 3 [pid 12910] <... bpf resumed>) = 4 [pid 12909] <... bpf resumed>) = 6 [pid 5071] umount2("./1600/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12912] write(3, "1000", 4 [pid 12911] <... bpf resumed>) = 5 [pid 12910] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12909] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12912] <... write resumed>) = 4 [pid 12911] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12909] <... exit_group resumed>) = ? [pid 5071] newfstatat(AT_FDCWD, "./1600/binderfs", [pid 12912] close(3 [pid 12911] <... bpf resumed>) = 6 [pid 12910] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12912] <... close resumed>) = 0 [pid 12911] exit_group(0 [pid 12910] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] unlink("./1600/binderfs" [pid 12912] symlink("/dev/binderfs", "./binderfs" [pid 12911] <... exit_group resumed>) = ? [pid 5071] <... unlink resumed>) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1600" [pid 12912] <... symlink resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12912] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12912] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] mkdir("./1601", 0777 [pid 12912] <... bpf resumed>) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 12912] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12912] <... bpf resumed>) = 5 ./strace-static-x86_64: Process 12913 attached [pid 12912] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12913] set_robust_list(0x5555686ec660, 24) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12913 [pid 12913] chdir("./1601") = 0 [pid 12913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12913] setpgid(0, 0) = 0 [pid 12913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12909] +++ exited with 0 +++ [pid 12913] write(3, "1000", 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12909, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12913] <... write resumed>) = 4 [pid 12913] close(3) = 0 [pid 12913] symlink("/dev/binderfs", "./binderfs" [pid 12910] <... bpf resumed>) = 6 [pid 12910] exit_group(0) = ? [pid 12913] <... symlink resumed>) = 0 [pid 5066] umount2("./1519", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12913] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12913] <... bpf resumed>) = 3 [pid 12913] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] openat(AT_FDCWD, "./1519", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12913] <... bpf resumed>) = 4 [pid 5066] <... openat resumed>) = 3 [pid 12913] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] newfstatat(3, "", [pid 12913] <... bpf resumed>) = 5 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12913] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1519/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./1519/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1519/binderfs") = 0 [pid 5066] getdents64(3, [pid 12912] <... bpf resumed>) = 6 [pid 12911] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./1519" [pid 12912] exit_group(0 [pid 5066] <... rmdir resumed>) = 0 [pid 12912] <... exit_group resumed>) = ? [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12911, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] mkdir("./1520", 0777) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./1543", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1543", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12914 attached [pid 12914] set_robust_list(0x5555686ec660, 24 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12914 [pid 12914] <... set_robust_list resumed>) = 0 [pid 12913] <... bpf resumed>) = 6 [pid 12910] +++ exited with 0 +++ [pid 5067] newfstatat(3, "", [pid 12914] chdir("./1520") = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12914] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12913] exit_group(0 [pid 12914] <... prctl resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12910, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12913] <... exit_group resumed>) = ? [pid 5067] getdents64(3, [pid 12914] setpgid(0, 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12914] <... setpgid resumed>) = 0 [pid 12914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] umount2("./1543/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1586", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12914] write(3, "1000", 4) = 4 [pid 12914] close(3) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1543/binderfs", [pid 12914] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] openat(AT_FDCWD, "./1586", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1543/binderfs" [pid 12914] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5067] <... unlink resumed>) = 0 [pid 12914] <... bpf resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12914] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5067] getdents64(3, [pid 12914] <... bpf resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] close(3 [pid 12914] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12913] +++ exited with 0 +++ [pid 12912] +++ exited with 0 +++ [pid 5069] umount2("./1586/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 12914] <... bpf resumed>) = 5 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12912, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] rmdir("./1543" [pid 12914] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12913, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] newfstatat(AT_FDCWD, "./1586/binderfs", [pid 5067] <... rmdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./1601", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] unlink("./1586/binderfs" [pid 5067] mkdir("./1544", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1601", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5068] umount2("./1564", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] openat(AT_FDCWD, "./1564", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... openat resumed>) = 3 [pid 5071] umount2("./1601/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1601/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] close(3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] unlink("./1601/binderfs") = 0 [pid 5071] getdents64(3, ./strace-static-x86_64: Process 12915 attached [pid 5069] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5069] rmdir("./1586" [pid 12915] set_robust_list(0x5555686ec660, 24 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] close(3 [pid 5068] umount2("./1564/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12915] <... set_robust_list resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1564/binderfs", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12915 [pid 12914] <... bpf resumed>) = 6 [pid 5071] rmdir("./1601" [pid 12915] chdir("./1544" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12915] <... chdir resumed>) = 0 [pid 5069] mkdir("./1587", 0777 [pid 5068] unlink("./1564/binderfs" [pid 12915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12914] exit_group(0 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12914] <... exit_group resumed>) = ? [pid 5069] <... mkdir resumed>) = 0 [pid 12915] setpgid(0, 0 [pid 5068] getdents64(3, [pid 12915] <... setpgid resumed>) = 0 [pid 12915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12914] +++ exited with 0 +++ [pid 5071] mkdir("./1602", 0777 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12916 attached [pid 12915] <... openat resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] close(3 [pid 12916] set_robust_list(0x5555686ec660, 24) = 0 [pid 12916] chdir("./1587" [pid 12915] write(3, "1000", 4 [pid 5068] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12914, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12916 [pid 12916] <... chdir resumed>) = 0 [pid 5066] umount2("./1520", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12916] <... prctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1520", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12917 attached [pid 12916] setpgid(0, 0 [pid 12915] <... write resumed>) = 4 [pid 5068] rmdir("./1564" [pid 5066] <... openat resumed>) = 3 [pid 12915] close(3 [pid 12917] set_robust_list(0x5555686ec660, 24 [pid 12916] <... setpgid resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 12917] <... set_robust_list resumed>) = 0 [pid 12916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12915] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12917] chdir("./1602") = 0 [pid 12916] <... openat resumed>) = 3 [pid 12915] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12917] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12916] write(3, "1000", 4 [pid 12917] <... prctl resumed>) = 0 [pid 12916] <... write resumed>) = 4 [pid 12917] setpgid(0, 0 [pid 12916] close(3 [pid 12917] <... setpgid resumed>) = 0 [pid 12916] <... close resumed>) = 0 [pid 12917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12916] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12917 [pid 5068] mkdir("./1565", 0777 [pid 12917] <... openat resumed>) = 3 [pid 12915] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12917] write(3, "1000", 4 [pid 12916] <... symlink resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 12917] <... write resumed>) = 4 [pid 12916] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] umount2("./1520/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12917] close(3 [pid 12915] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12917] <... close resumed>) = 0 [pid 12916] <... bpf resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 12918 attached [pid 12917] symlink("/dev/binderfs", "./binderfs" [pid 12916] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12915] <... bpf resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12918 [pid 5066] newfstatat(AT_FDCWD, "./1520/binderfs", [pid 12918] set_robust_list(0x5555686ec660, 24 [pid 12917] <... symlink resumed>) = 0 [pid 12915] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12918] <... set_robust_list resumed>) = 0 [pid 12916] <... bpf resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12918] chdir("./1565" [pid 12917] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12915] <... bpf resumed>) = 4 [pid 12918] <... chdir resumed>) = 0 [pid 12916] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] unlink("./1520/binderfs" [pid 12918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12917] <... bpf resumed>) = 3 [pid 12915] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12918] <... prctl resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12918] setpgid(0, 0 [pid 12917] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12918] <... setpgid resumed>) = 0 [pid 12918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12916] <... bpf resumed>) = 5 [pid 12915] <... bpf resumed>) = 5 [pid 12918] <... openat resumed>) = 3 [pid 12917] <... bpf resumed>) = 4 [pid 5066] getdents64(3, [pid 12918] write(3, "1000", 4) = 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12918] close(3 [pid 12917] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12916] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12915] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] close(3 [pid 12918] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12916] <... bpf resumed>) = 6 [pid 5066] rmdir("./1520") = 0 [pid 12918] symlink("/dev/binderfs", "./binderfs" [pid 12915] <... bpf resumed>) = 6 [pid 12918] <... symlink resumed>) = 0 [pid 12917] <... bpf resumed>) = 5 [pid 12916] exit_group(0 [pid 12915] exit_group(0 [pid 5066] mkdir("./1521", 0777 [pid 12917] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12916] <... exit_group resumed>) = ? [pid 12915] <... exit_group resumed>) = ? [pid 12918] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12917] <... bpf resumed>) = 6 [pid 5066] <... mkdir resumed>) = 0 [pid 12918] <... bpf resumed>) = 3 [pid 12917] exit_group(0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12918] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12917] <... exit_group resumed>) = ? [pid 12915] +++ exited with 0 +++ ./strace-static-x86_64: Process 12919 attached [pid 12918] <... bpf resumed>) = 4 [pid 12919] set_robust_list(0x5555686ec660, 24 [pid 12918] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12915, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12919] <... set_robust_list resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12919 [pid 12919] chdir("./1521" [pid 12918] <... bpf resumed>) = 5 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12919] <... chdir resumed>) = 0 [pid 12919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12918] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12919] setpgid(0, 0 [pid 5067] umount2("./1544", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12919] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1544", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12919] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12919] write(3, "1000", 4) = 4 [pid 12919] close(3) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1544/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1544/binderfs", [pid 12919] symlink("/dev/binderfs", "./binderfs" [pid 12917] +++ exited with 0 +++ [pid 12916] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12917, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12916, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12919] <... symlink resumed>) = 0 [pid 5067] unlink("./1544/binderfs" [pid 5071] umount2("./1602", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1602", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] umount2("./1587", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", [pid 5069] openat(AT_FDCWD, "./1587", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... unlink resumed>) = 0 [pid 5071] getdents64(3, [pid 12919] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12919] <... bpf resumed>) = 3 [pid 5071] umount2("./1602/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] close(3 [pid 12919] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 12919] <... bpf resumed>) = 4 [pid 5071] newfstatat(AT_FDCWD, "./1602/binderfs", [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] rmdir("./1544" [pid 12919] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./1587/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./1602/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1545", 0777 [pid 5071] <... unlink resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1587/binderfs", [pid 12919] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(3, [pid 5069] unlink("./1587/binderfs" [pid 5067] <... mkdir resumed>) = 0 [pid 12919] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5071] close(3 [pid 5069] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./1602" [pid 5069] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./1587") = 0 [pid 5071] mkdir("./1603", 0777./strace-static-x86_64: Process 12920 attached ) = 0 [pid 5069] mkdir("./1588", 0777 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12920 [pid 12920] set_robust_list(0x5555686ec660, 24 [pid 12918] <... bpf resumed>) = 6 [pid 12920] <... set_robust_list resumed>) = 0 [pid 12919] <... bpf resumed>) = 6 [pid 12918] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... mkdir resumed>) = 0 [pid 12920] chdir("./1545" [pid 12919] exit_group(0 [pid 12918] <... exit_group resumed>) = ? [pid 12920] <... chdir resumed>) = 0 [pid 12920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12920] setpgid(0, 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12920] <... setpgid resumed>) = 0 [pid 12920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12919] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12921 attached ./strace-static-x86_64: Process 12922 attached [pid 12922] set_robust_list(0x5555686ec660, 24) = 0 [pid 12922] chdir("./1588" [pid 12920] <... openat resumed>) = 3 [pid 12922] <... chdir resumed>) = 0 [pid 12922] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12920] write(3, "1000", 4 [pid 12919] +++ exited with 0 +++ [pid 12922] <... prctl resumed>) = 0 [pid 12921] set_robust_list(0x5555686ec660, 24 [pid 12920] <... write resumed>) = 4 [pid 12922] setpgid(0, 0 [pid 12920] close(3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12922 [pid 12922] <... setpgid resumed>) = 0 [pid 12921] <... set_robust_list resumed>) = 0 [pid 12920] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12919, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12920] symlink("/dev/binderfs", "./binderfs" [pid 12918] +++ exited with 0 +++ [pid 12921] chdir("./1603" [pid 12920] <... symlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12921 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12918, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12922] <... openat resumed>) = 3 [pid 12921] <... chdir resumed>) = 0 [pid 12922] write(3, "1000", 4 [pid 12921] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12920] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12922] <... write resumed>) = 4 [pid 12921] <... prctl resumed>) = 0 [pid 5066] umount2("./1521", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12922] close(3 [pid 12921] setpgid(0, 0 [pid 12920] <... bpf resumed>) = 3 [pid 5068] umount2("./1565", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12922] <... close resumed>) = 0 [pid 12921] <... setpgid resumed>) = 0 [pid 12920] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12922] symlink("/dev/binderfs", "./binderfs" [pid 12921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] openat(AT_FDCWD, "./1565", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./1521", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12922] <... symlink resumed>) = 0 [pid 12920] <... bpf resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 12922] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12921] <... openat resumed>) = 3 [pid 12920] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12922] <... bpf resumed>) = 3 [pid 12921] write(3, "1000", 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12922] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12921] <... write resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12922] <... bpf resumed>) = 4 [pid 12921] close(3 [pid 12920] <... bpf resumed>) = 5 [pid 5068] getdents64(3, [pid 5066] umount2("./1521/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12922] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12921] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12922] <... bpf resumed>) = 5 [pid 12921] symlink("/dev/binderfs", "./binderfs" [pid 12920] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] umount2("./1565/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1521/binderfs", [pid 12921] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1565/binderfs", [pid 5066] unlink("./1521/binderfs" [pid 12921] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12922] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12921] <... bpf resumed>) = 3 [pid 5068] unlink("./1565/binderfs" [pid 12921] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12922] <... bpf resumed>) = 6 [pid 12921] <... bpf resumed>) = 4 [pid 12920] <... bpf resumed>) = 6 [pid 5068] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 12922] exit_group(0 [pid 12921] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12922] <... exit_group resumed>) = ? [pid 12921] <... bpf resumed>) = 5 [pid 12920] exit_group(0 [pid 5068] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12922] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12922, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] close(3 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 12921] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5068] rmdir("./1565" [pid 5066] rmdir("./1521" [pid 12921] <... bpf resumed>) = 6 [pid 12920] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5069] umount2("./1588", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12921] exit_group(0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./1522", 0777 [pid 5069] openat(AT_FDCWD, "./1588", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12921] <... exit_group resumed>) = ? [pid 5069] <... openat resumed>) = 3 [pid 5068] mkdir("./1566", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1588/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12923 attached ./strace-static-x86_64: Process 12924 attached [pid 5069] newfstatat(AT_FDCWD, "./1588/binderfs", [pid 12923] set_robust_list(0x5555686ec660, 24 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12924] set_robust_list(0x5555686ec660, 24 [pid 12923] <... set_robust_list resumed>) = 0 [pid 12924] <... set_robust_list resumed>) = 0 [pid 5069] unlink("./1588/binderfs" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12924 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12923 [pid 12924] chdir("./1566" [pid 12923] chdir("./1522" [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./1588" [pid 12924] <... chdir resumed>) = 0 [pid 12923] <... chdir resumed>) = 0 [pid 12921] +++ exited with 0 +++ [pid 12920] +++ exited with 0 +++ [pid 12923] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12920, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12924] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12923] <... prctl resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12921, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] <... rmdir resumed>) = 0 [pid 5069] mkdir("./1589", 0777 [pid 12924] <... prctl resumed>) = 0 [pid 12923] setpgid(0, 0 [pid 5069] <... mkdir resumed>) = 0 [pid 12924] setpgid(0, 0 [pid 5067] umount2("./1545", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12924] <... setpgid resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12923] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12924] <... openat resumed>) = 3 [pid 12923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] umount2("./1603", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./1545", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12925 attached [pid 12924] write(3, "1000", 4 [pid 12923] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 12925] set_robust_list(0x5555686ec660, 24 [pid 12924] <... write resumed>) = 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12925 [pid 12923] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "./1603", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 12925] <... set_robust_list resumed>) = 0 [pid 12924] close(3 [pid 12923] <... write resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 12924] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12925] chdir("./1589") = 0 [pid 12923] close(3 [pid 5067] getdents64(3, [pid 12925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12924] symlink("/dev/binderfs", "./binderfs" [pid 12923] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12925] <... prctl resumed>) = 0 [pid 12923] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1545/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12924] <... symlink resumed>) = 0 [pid 12925] setpgid(0, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12925] <... setpgid resumed>) = 0 [pid 12924] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12923] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] newfstatat(AT_FDCWD, "./1545/binderfs", [pid 12925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12923] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12925] <... openat resumed>) = 3 [pid 12923] <... bpf resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12924] <... bpf resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12925] write(3, "1000", 4 [pid 12924] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12923] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12925] <... write resumed>) = 4 [pid 5071] umount2("./1603/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1545/binderfs" [pid 12924] <... bpf resumed>) = 4 [pid 12925] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12924] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12925] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1603/binderfs", [pid 12923] <... bpf resumed>) = 4 [pid 12923] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12925] symlink("/dev/binderfs", "./binderfs" [pid 12924] <... bpf resumed>) = 5 [pid 12923] <... bpf resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12924] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12923] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] unlink("./1603/binderfs" [pid 12925] <... symlink resumed>) = 0 [pid 5067] getdents64(3, [pid 12925] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12924] <... bpf resumed>) = 6 [pid 12923] <... bpf resumed>) = 6 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] close(3 [pid 12925] <... bpf resumed>) = 3 [pid 12924] exit_group(0 [pid 12923] exit_group(0 [pid 5071] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 12925] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12924] <... exit_group resumed>) = ? [pid 12923] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./1545" [pid 12925] <... bpf resumed>) = 4 [pid 5067] <... rmdir resumed>) = 0 [pid 12925] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] close(3 [pid 5067] mkdir("./1546", 0777 [pid 5071] <... close resumed>) = 0 [pid 12925] <... bpf resumed>) = 5 [pid 5071] rmdir("./1603" [pid 5067] <... mkdir resumed>) = 0 [pid 12925] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... rmdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] mkdir("./1604", 0777) = 0 ./strace-static-x86_64: Process 12926 attached [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12926 [pid 12926] set_robust_list(0x5555686ec660, 24./strace-static-x86_64: Process 12927 attached ) = 0 [pid 12926] chdir("./1546" [pid 12927] set_robust_list(0x5555686ec660, 24 [pid 12926] <... chdir resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12927 [pid 12927] <... set_robust_list resumed>) = 0 [pid 12926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12927] chdir("./1604" [pid 12926] setpgid(0, 0) = 0 [pid 12924] +++ exited with 0 +++ [pid 12927] <... chdir resumed>) = 0 [pid 12927] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12924, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12927] <... prctl resumed>) = 0 [pid 12926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... restart_syscall resumed>) = 0 [pid 12927] setpgid(0, 0 [pid 12926] <... openat resumed>) = 3 [pid 12927] <... setpgid resumed>) = 0 [pid 5068] umount2("./1566", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12926] write(3, "1000", 4 [pid 12923] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12926] <... write resumed>) = 4 [pid 12926] close(3) = 0 [pid 12926] symlink("/dev/binderfs", "./binderfs" [pid 12927] <... openat resumed>) = 3 [pid 12926] <... symlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1566", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12927] write(3, "1000", 4 [pid 12926] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... openat resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12923, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12927] <... write resumed>) = 4 [pid 12927] close(3 [pid 5068] newfstatat(3, "", [pid 12927] <... close resumed>) = 0 [pid 12926] <... bpf resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./1522", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12927] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12926] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12927] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12926] <... bpf resumed>) = 4 [pid 12926] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] openat(AT_FDCWD, "./1522", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12927] <... bpf resumed>) = 3 [pid 12927] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1566/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 12926] <... bpf resumed>) = 5 [pid 12927] <... bpf resumed>) = 4 [pid 12926] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 12927] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] newfstatat(AT_FDCWD, "./1566/binderfs", [pid 12927] <... bpf resumed>) = 5 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(3, [pid 5068] unlink("./1566/binderfs" [pid 12927] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1522/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12925] <... bpf resumed>) = 6 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12926] <... bpf resumed>) = 6 [pid 12927] <... bpf resumed>) = 6 [pid 5068] getdents64(3, [pid 12925] exit_group(0 [pid 12927] exit_group(0 [pid 12926] exit_group(0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1522/binderfs", [pid 12927] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 12927] +++ exited with 0 +++ [pid 12926] <... exit_group resumed>) = ? [pid 12925] <... exit_group resumed>) = ? [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1566") = 0 [pid 5068] mkdir("./1567", 0777 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12927, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] unlink("./1522/binderfs") = 0 [pid 5066] getdents64(3, [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./1522" [pid 5071] umount2("./1604", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 12925] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12926] +++ exited with 0 +++ [pid 5071] openat(AT_FDCWD, "./1604", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] mkdir("./1523", 0777./strace-static-x86_64: Process 12928 attached [pid 5071] newfstatat(3, "", [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12925, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12928 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12926, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] umount2("./1546", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12928] set_robust_list(0x5555686ec660, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./1589", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./1546", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12929 attached ) = 3 [pid 12929] set_robust_list(0x5555686ec660, 24 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12929 [pid 12929] <... set_robust_list resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12928] <... set_robust_list resumed>) = 0 [pid 5071] getdents64(3, [pid 12929] chdir("./1523" [pid 12928] chdir("./1567" [pid 12929] <... chdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] openat(AT_FDCWD, "./1589", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 12929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] <... openat resumed>) = 3 [pid 12929] setpgid(0, 0) = 0 [pid 12928] <... chdir resumed>) = 0 [pid 5071] umount2("./1604/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12928] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12928] <... prctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./1604/binderfs", [pid 12929] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12928] setpgid(0, 0 [pid 5069] getdents64(3, [pid 12929] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./1546/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12929] <... write resumed>) = 4 [pid 12928] <... setpgid resumed>) = 0 [pid 5071] unlink("./1604/binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12929] close(3 [pid 5067] newfstatat(AT_FDCWD, "./1546/binderfs", [pid 12929] <... close resumed>) = 0 [pid 12928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] umount2("./1589/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12929] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... unlink resumed>) = 0 [pid 5067] unlink("./1546/binderfs" [pid 12929] <... symlink resumed>) = 0 [pid 12928] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 12928] write(3, "1000", 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1589/binderfs", [pid 5067] getdents64(3, [pid 12929] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12928] <... write resumed>) = 4 [pid 5071] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12929] <... bpf resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12929] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12928] close(3 [pid 5071] <... close resumed>) = 0 [pid 5069] unlink("./1589/binderfs" [pid 5067] close(3 [pid 12928] <... close resumed>) = 0 [pid 5071] rmdir("./1604" [pid 12929] <... bpf resumed>) = 4 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12929] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12928] symlink("/dev/binderfs", "./binderfs" [pid 12929] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 12928] <... symlink resumed>) = 0 [pid 5067] rmdir("./1546" [pid 12928] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12929] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] mkdir("./1605", 0777 [pid 5069] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1547", 0777 [pid 12929] <... bpf resumed>) = 6 [pid 12928] <... bpf resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12929] exit_group(0 [pid 12928] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] close(3 [pid 12929] <... exit_group resumed>) = ? [pid 12928] <... bpf resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5069] rmdir("./1589"./strace-static-x86_64: Process 12930 attached [pid 12928] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... rmdir resumed>) = 0 [pid 12930] set_robust_list(0x5555686ec660, 24 [pid 12928] <... bpf resumed>) = 5 [pid 12930] <... set_robust_list resumed>) = 0 [pid 12929] +++ exited with 0 +++ [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] mkdir("./1590", 0777 [pid 12930] chdir("./1605" [pid 5069] <... mkdir resumed>) = 0 [pid 12930] <... chdir resumed>) = 0 [pid 12928] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12929, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12930] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] umount2("./1523", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12931 attached [pid 12930] <... prctl resumed>) = 0 [pid 12928] <... bpf resumed>) = 6 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12931] set_robust_list(0x5555686ec660, 24 [pid 12930] setpgid(0, 0 [pid 12928] exit_group(0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12930 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12931 [pid 5066] openat(AT_FDCWD, "./1523", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12930] <... setpgid resumed>) = 0 [pid 12931] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 12932 attached [pid 12931] chdir("./1547" [pid 12930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12928] <... exit_group resumed>) = ? [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12932 [pid 5066] <... openat resumed>) = 3 [pid 12932] set_robust_list(0x5555686ec660, 24 [pid 12931] <... chdir resumed>) = 0 [pid 12931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12932] <... set_robust_list resumed>) = 0 [pid 12930] <... openat resumed>) = 3 [pid 12928] +++ exited with 0 +++ [pid 5066] newfstatat(3, "", [pid 12932] chdir("./1590" [pid 12931] setpgid(0, 0 [pid 12930] write(3, "1000", 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12928, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12931] <... setpgid resumed>) = 0 [pid 12930] <... write resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12932] <... chdir resumed>) = 0 [pid 12931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12930] close(3 [pid 12932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12930] <... close resumed>) = 0 [pid 5068] umount2("./1567", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12932] <... prctl resumed>) = 0 [pid 12931] <... openat resumed>) = 3 [pid 12930] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12932] setpgid(0, 0 [pid 5068] openat(AT_FDCWD, "./1567", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12931] write(3, "1000", 4) = 4 [pid 5068] <... openat resumed>) = 3 [pid 12931] close(3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12932] <... setpgid resumed>) = 0 [pid 12931] <... close resumed>) = 0 [pid 12930] <... symlink resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 12931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12931] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12931] <... bpf resumed>) = 3 [pid 12931] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] umount2("./1523/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12930] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] getdents64(3, [pid 12932] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(AT_FDCWD, "./1523/binderfs", [pid 12930] <... bpf resumed>) = 3 [pid 12932] write(3, "1000", 4 [pid 12931] <... bpf resumed>) = 4 [pid 12930] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] umount2("./1567/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12932] <... write resumed>) = 4 [pid 12931] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12930] <... bpf resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12932] close(3 [pid 12931] <... bpf resumed>) = 5 [pid 5068] newfstatat(AT_FDCWD, "./1567/binderfs", [pid 5066] unlink("./1523/binderfs" [pid 12932] <... close resumed>) = 0 [pid 12930] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12932] symlink("/dev/binderfs", "./binderfs" [pid 12931] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12932] <... symlink resumed>) = 0 [pid 12931] <... bpf resumed>) = 6 [pid 12930] <... bpf resumed>) = 5 [pid 12932] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] getdents64(3, [pid 12931] exit_group(0 [pid 12930] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] unlink("./1567/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12931] <... exit_group resumed>) = ? [pid 12932] <... bpf resumed>) = 3 [pid 5066] close(3 [pid 5068] <... unlink resumed>) = 0 [pid 12932] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... close resumed>) = 0 [pid 12932] <... bpf resumed>) = 4 [pid 5066] rmdir("./1523" [pid 12931] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 12932] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12931, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] mkdir("./1524", 0777 [pid 5068] close(3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./1567" [pid 12932] <... bpf resumed>) = 5 [pid 5067] umount2("./1547", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12932] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1547", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./1568", 0777 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] newfstatat(3, "", ./strace-static-x86_64: Process 12933 attached [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12933] set_robust_list(0x5555686ec660, 24 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12933 [pid 12933] <... set_robust_list resumed>) = 0 [pid 12933] chdir("./1524") = 0 [pid 12933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 12934 attached [pid 12932] <... bpf resumed>) = 6 [pid 12930] <... bpf resumed>) = 6 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12934 [pid 5067] getdents64(3, [pid 12934] set_robust_list(0x5555686ec660, 24 [pid 12933] setpgid(0, 0 [pid 12930] exit_group(0 [pid 12932] exit_group(0 [pid 12934] <... set_robust_list resumed>) = 0 [pid 12933] <... setpgid resumed>) = 0 [pid 12932] <... exit_group resumed>) = ? [pid 12930] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12934] chdir("./1568" [pid 5067] umount2("./1547/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12934] <... chdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12934] setpgid(0, 0) = 0 [pid 12933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] newfstatat(AT_FDCWD, "./1547/binderfs", [pid 12934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12933] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12934] <... openat resumed>) = 3 [pid 12933] write(3, "1000", 4 [pid 5067] unlink("./1547/binderfs" [pid 12933] <... write resumed>) = 4 [pid 12934] write(3, "1000", 4 [pid 12933] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 12934] <... write resumed>) = 4 [pid 12933] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 12934] close(3 [pid 12933] symlink("/dev/binderfs", "./binderfs" [pid 12934] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12934] symlink("/dev/binderfs", "./binderfs" [pid 12933] <... symlink resumed>) = 0 [pid 5067] close(3 [pid 12933] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... close resumed>) = 0 [pid 12934] <... symlink resumed>) = 0 [pid 5067] rmdir("./1547" [pid 12934] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12933] <... bpf resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 12934] <... bpf resumed>) = 3 [pid 12933] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12930] +++ exited with 0 +++ [pid 5067] mkdir("./1548", 0777 [pid 12934] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12933] <... bpf resumed>) = 4 [pid 12932] +++ exited with 0 +++ [pid 5067] <... mkdir resumed>) = 0 [pid 12934] <... bpf resumed>) = 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12930, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12932, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12933] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12934] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1605", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1605", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] umount2("./1590", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1590", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12935 attached [pid 12934] <... bpf resumed>) = 5 [pid 12933] <... bpf resumed>) = 5 [pid 5071] <... openat resumed>) = 3 [pid 12934] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] newfstatat(3, "", [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12935 [pid 12935] set_robust_list(0x5555686ec660, 24 [pid 12933] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... openat resumed>) = 3 [pid 12935] <... set_robust_list resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 12935] chdir("./1548" [pid 5071] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12935] <... chdir resumed>) = 0 [pid 5069] getdents64(3, [pid 12935] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12935] <... prctl resumed>) = 0 [pid 12934] <... bpf resumed>) = 6 [pid 12933] <... bpf resumed>) = 6 [pid 5071] umount2("./1605/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12935] setpgid(0, 0 [pid 12934] exit_group(0 [pid 12933] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1590/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12934] <... exit_group resumed>) = ? [pid 5071] newfstatat(AT_FDCWD, "./1605/binderfs", [pid 12935] <... setpgid resumed>) = 0 [pid 12933] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12933] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1590/binderfs", [pid 12934] +++ exited with 0 +++ [pid 5071] unlink("./1605/binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12933, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12935] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5069] unlink("./1590/binderfs" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12934, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] getdents64(3, [pid 12935] write(3, "1000", 4 [pid 5069] <... unlink resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 12935] <... write resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./1524", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12935] close(3 [pid 5071] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1524", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12935] <... close resumed>) = 0 [pid 5071] rmdir("./1605" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12935] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 5069] close(3 [pid 5071] mkdir("./1606", 0777 [pid 5066] newfstatat(3, "", [pid 12935] <... symlink resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] umount2("./1568", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] rmdir("./1590" [pid 12935] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5069] mkdir("./1591", 0777 [pid 5068] openat(AT_FDCWD, "./1568", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12935] <... bpf resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", ./strace-static-x86_64: Process 12936 attached [pid 12935] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12936] set_robust_list(0x5555686ec660, 24) = 0 [pid 12935] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12936 [pid 5068] getdents64(3, [pid 5066] umount2("./1524/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12937 attached [pid 12936] chdir("./1606" [pid 12935] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12937] set_robust_list(0x5555686ec660, 24 [pid 5068] umount2("./1568/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1524/binderfs", [pid 12935] <... bpf resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12936] <... chdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1568/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1524/binderfs") = 0 [pid 5068] unlink("./1568/binderfs") = 0 [pid 12937] <... set_robust_list resumed>) = 0 [pid 12936] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12935] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12937 [pid 12936] <... prctl resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] getdents64(3, [pid 12936] setpgid(0, 0 [pid 12935] <... bpf resumed>) = 6 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12937] chdir("./1591" [pid 5066] close(3 [pid 12935] exit_group(0 [pid 12937] <... chdir resumed>) = 0 [pid 12936] <... setpgid resumed>) = 0 [pid 12935] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 5066] <... close resumed>) = 0 [pid 12936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... close resumed>) = 0 [pid 5066] rmdir("./1524" [pid 5068] rmdir("./1568" [pid 5066] <... rmdir resumed>) = 0 [pid 12937] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12936] <... openat resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 12937] <... prctl resumed>) = 0 [pid 12936] write(3, "1000", 4 [pid 12937] setpgid(0, 0 [pid 12936] <... write resumed>) = 4 [pid 12937] <... setpgid resumed>) = 0 [pid 12935] +++ exited with 0 +++ [pid 12936] close(3 [pid 5068] mkdir("./1569", 0777 [pid 5066] mkdir("./1525", 0777 [pid 12937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12936] <... close resumed>) = 0 [pid 12937] <... openat resumed>) = 3 [pid 12936] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... mkdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12935, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12937] write(3, "1000", 4 [pid 12936] <... symlink resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12937] <... write resumed>) = 4 [pid 12937] close(3 [pid 12936] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12937] <... close resumed>) = 0 [pid 5067] umount2("./1548", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12939 attached ./strace-static-x86_64: Process 12938 attached [pid 12937] symlink("/dev/binderfs", "./binderfs" [pid 12936] <... bpf resumed>) = 3 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12938 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12939] set_robust_list(0x5555686ec660, 24 [pid 12938] set_robust_list(0x5555686ec660, 24 [pid 12937] <... symlink resumed>) = 0 [pid 12936] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] openat(AT_FDCWD, "./1548", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12939] <... set_robust_list resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12939 [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12939] chdir("./1525" [pid 12938] <... set_robust_list resumed>) = 0 [pid 12937] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12936] <... bpf resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12939] <... chdir resumed>) = 0 [pid 12938] chdir("./1569" [pid 12937] <... bpf resumed>) = 3 [pid 12936] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12938] <... chdir resumed>) = 0 [pid 12937] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, [pid 12939] <... prctl resumed>) = 0 [pid 12938] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12937] <... bpf resumed>) = 4 [pid 12936] <... bpf resumed>) = 5 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12939] setpgid(0, 0 [pid 12938] <... prctl resumed>) = 0 [pid 12937] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12936] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] umount2("./1548/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12939] <... setpgid resumed>) = 0 [pid 12938] setpgid(0, 0 [pid 12937] <... bpf resumed>) = 5 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12936] <... bpf resumed>) = 6 [pid 5067] newfstatat(AT_FDCWD, "./1548/binderfs", [pid 12938] <... setpgid resumed>) = 0 [pid 12937] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12936] exit_group(0 [pid 12939] <... openat resumed>) = 3 [pid 12938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12937] <... bpf resumed>) = 6 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12939] write(3, "1000", 4 [pid 12938] <... openat resumed>) = 3 [pid 12936] <... exit_group resumed>) = ? [pid 5067] unlink("./1548/binderfs" [pid 12937] exit_group(0 [pid 12939] <... write resumed>) = 4 [pid 12937] <... exit_group resumed>) = ? [pid 5067] <... unlink resumed>) = 0 [pid 12939] close(3 [pid 12938] write(3, "1000", 4 [pid 12939] <... close resumed>) = 0 [pid 12938] <... write resumed>) = 4 [pid 5067] getdents64(3, [pid 12938] close(3 [pid 12939] symlink("/dev/binderfs", "./binderfs" [pid 12938] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12938] symlink("/dev/binderfs", "./binderfs" [pid 12939] <... symlink resumed>) = 0 [pid 12938] <... symlink resumed>) = 0 [pid 5067] close(3 [pid 12938] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... close resumed>) = 0 [pid 12939] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12938] <... bpf resumed>) = 3 [pid 5067] rmdir("./1548" [pid 12939] <... bpf resumed>) = 3 [pid 12938] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12939] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... rmdir resumed>) = 0 [pid 12938] <... bpf resumed>) = 4 [pid 12939] <... bpf resumed>) = 4 [pid 12938] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] mkdir("./1549", 0777 [pid 12939] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12938] <... bpf resumed>) = 5 [pid 12939] <... bpf resumed>) = 5 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12939] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12938] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12940 attached [pid 12940] set_robust_list(0x5555686ec660, 24 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12940 [pid 12936] +++ exited with 0 +++ [pid 12940] <... set_robust_list resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12936, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12940] chdir("./1549" [pid 12937] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12937, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12940] <... chdir resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 12940] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... restart_syscall resumed>) = 0 [pid 5071] umount2("./1606", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12940] <... prctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12940] setpgid(0, 0 [pid 5071] openat(AT_FDCWD, "./1606", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12940] <... setpgid resumed>) = 0 [pid 5069] umount2("./1591", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./1591", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12940] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5069] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12940] write(3, "1000", 4 [pid 5071] getdents64(3, [pid 5069] newfstatat(3, "", [pid 12940] <... write resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12940] close(3) = 0 [pid 5069] getdents64(3, [pid 12940] symlink("/dev/binderfs", "./binderfs" [pid 5071] umount2("./1606/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12940] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1591/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./1606/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12940] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] unlink("./1606/binderfs" [pid 5069] newfstatat(AT_FDCWD, "./1591/binderfs", [pid 12940] <... bpf resumed>) = 3 [pid 12940] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 12940] <... bpf resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 5069] unlink("./1591/binderfs" [pid 5071] rmdir("./1606" [pid 12940] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5071] mkdir("./1607", 0777) = 0 [pid 12940] <... bpf resumed>) = 5 [pid 5069] getdents64(3, [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12940] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12939] <... bpf resumed>) = 6 [pid 12938] <... bpf resumed>) = 6 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12941 attached [pid 12940] <... bpf resumed>) = 6 [pid 12939] exit_group(0 [pid 12938] exit_group(0 [pid 5069] close(3 [pid 12941] set_robust_list(0x5555686ec660, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12941 [pid 12941] <... set_robust_list resumed>) = 0 [pid 12941] chdir("./1607" [pid 12940] exit_group(0 [pid 12939] <... exit_group resumed>) = ? [pid 12938] <... exit_group resumed>) = ? [pid 5069] <... close resumed>) = 0 [pid 12941] <... chdir resumed>) = 0 [pid 12940] <... exit_group resumed>) = ? [pid 12939] +++ exited with 0 +++ [pid 5069] rmdir("./1591" [pid 12941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12939, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12941] setpgid(0, 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12941] <... setpgid resumed>) = 0 [pid 5069] mkdir("./1592", 0777 [pid 12941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] umount2("./1525", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./1525", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12941] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 12941] write(3, "1000", 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12941] <... write resumed>) = 4 [pid 12940] +++ exited with 0 +++ [pid 12938] +++ exited with 0 +++ [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12942 attached [pid 12941] close(3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12942 [pid 5066] getdents64(3, [pid 12942] set_robust_list(0x5555686ec660, 24 [pid 12941] <... close resumed>) = 0 [pid 12942] <... set_robust_list resumed>) = 0 [pid 12941] symlink("/dev/binderfs", "./binderfs" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12938, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12940, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1549", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12942] chdir("./1592" [pid 5068] umount2("./1569", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1525/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12941] <... symlink resumed>) = 0 [pid 12942] <... chdir resumed>) = 0 [pid 12941] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1549", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12942] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] openat(AT_FDCWD, "./1569", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5066] newfstatat(AT_FDCWD, "./1525/binderfs", [pid 5068] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12942] <... prctl resumed>) = 0 [pid 12941] <... bpf resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] unlink("./1525/binderfs" [pid 12942] setpgid(0, 0 [pid 12941] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12942] <... setpgid resumed>) = 0 [pid 12941] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5066] <... unlink resumed>) = 0 [pid 12942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12941] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12942] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 12942] write(3, "1000", 4 [pid 12941] <... bpf resumed>) = 5 [pid 5068] umount2("./1569/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12942] <... write resumed>) = 4 [pid 12941] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] umount2("./1549/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 12942] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 12942] <... close resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1569/binderfs", [pid 5066] rmdir("./1525" [pid 5067] newfstatat(AT_FDCWD, "./1549/binderfs", [pid 12942] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12942] <... symlink resumed>) = 0 [pid 5068] unlink("./1569/binderfs" [pid 5067] unlink("./1549/binderfs" [pid 5066] mkdir("./1526", 0777 [pid 12942] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12941] <... bpf resumed>) = 6 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 12942] <... bpf resumed>) = 3 [pid 12942] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] getdents64(3, [pid 12941] exit_group(0 [pid 12942] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 12942] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12941] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 5067] close(3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12942] <... bpf resumed>) = 5 [pid 5068] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12942] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] rmdir("./1549" [pid 12942] <... bpf resumed>) = 6 [pid 5067] <... rmdir resumed>) = 0 [pid 12942] exit_group(0./strace-static-x86_64: Process 12943 attached ) = ? [pid 5068] rmdir("./1569" [pid 5067] mkdir("./1550", 0777 [pid 12943] set_robust_list(0x5555686ec660, 24 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12943 [pid 12943] <... set_robust_list resumed>) = 0 [pid 12943] chdir("./1526" [pid 12942] +++ exited with 0 +++ [pid 12941] +++ exited with 0 +++ [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 12943] <... chdir resumed>) = 0 [pid 5068] mkdir("./1570", 0777 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12941, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12942, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12943] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12943] <... prctl resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5069] umount2("./1592", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12944 attached [pid 12943] setpgid(0, 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12944] set_robust_list(0x5555686ec660, 24 [pid 12943] <... setpgid resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1592", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12945 attached [pid 5071] umount2("./1607", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12945 [pid 12945] set_robust_list(0x5555686ec660, 24 [pid 12944] <... set_robust_list resumed>) = 0 [pid 12943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12944 [pid 12945] <... set_robust_list resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1607", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] newfstatat(3, "", [pid 12945] chdir("./1570" [pid 12944] chdir("./1550" [pid 12943] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12945] <... chdir resumed>) = 0 [pid 12944] <... chdir resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 12945] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12943] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 12945] <... prctl resumed>) = 0 [pid 12944] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12943] <... write resumed>) = 4 [pid 5071] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12945] setpgid(0, 0 [pid 12944] <... prctl resumed>) = 0 [pid 12943] close(3 [pid 12945] <... setpgid resumed>) = 0 [pid 12944] setpgid(0, 0 [pid 12943] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] umount2("./1592/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12943] symlink("/dev/binderfs", "./binderfs" [pid 12944] <... setpgid resumed>) = 0 [pid 5071] umount2("./1607/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12945] <... openat resumed>) = 3 [pid 12944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12943] <... symlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./1592/binderfs", [pid 5071] newfstatat(AT_FDCWD, "./1607/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12945] write(3, "1000", 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12945] <... write resumed>) = 4 [pid 5071] unlink("./1607/binderfs" [pid 5069] unlink("./1592/binderfs" [pid 12945] close(3 [pid 12944] <... openat resumed>) = 3 [pid 12943] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12945] <... close resumed>) = 0 [pid 12944] write(3, "1000", 4 [pid 12943] <... bpf resumed>) = 3 [pid 12944] <... write resumed>) = 4 [pid 12943] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12944] close(3 [pid 12945] symlink("/dev/binderfs", "./binderfs" [pid 12944] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 12945] <... symlink resumed>) = 0 [pid 12944] symlink("/dev/binderfs", "./binderfs" [pid 12943] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12945] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12944] <... symlink resumed>) = 0 [pid 12943] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] close(3 [pid 5069] close(3 [pid 12945] <... bpf resumed>) = 3 [pid 12944] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12945] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12943] <... bpf resumed>) = 5 [pid 5071] rmdir("./1607" [pid 5069] rmdir("./1592" [pid 12945] <... bpf resumed>) = 4 [pid 12944] <... bpf resumed>) = 3 [pid 12943] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12944] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12945] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] mkdir("./1608", 0777 [pid 5069] mkdir("./1593", 0777 [pid 12945] <... bpf resumed>) = 5 [pid 12944] <... bpf resumed>) = 4 [pid 12943] <... bpf resumed>) = 6 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12945] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12944] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12943] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12944] <... bpf resumed>) = 5 [pid 12943] <... exit_group resumed>) = ? [pid 12945] <... bpf resumed>) = 6 [pid 12944] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 12944] exit_group(0) = ? [pid 12945] exit_group(0) = ? ./strace-static-x86_64: Process 12947 attached [pid 12943] +++ exited with 0 +++ ./strace-static-x86_64: Process 12946 attached [pid 12947] set_robust_list(0x5555686ec660, 24 [pid 12945] +++ exited with 0 +++ [pid 12944] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12947 [pid 12947] <... set_robust_list resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12944, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12945, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12946] set_robust_list(0x5555686ec660, 24 [pid 12947] chdir("./1608" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12946 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12943, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12946] <... set_robust_list resumed>) = 0 [pid 12947] <... chdir resumed>) = 0 [pid 12946] chdir("./1593" [pid 12947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] umount2("./1570", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./1550", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12947] <... prctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... restart_syscall resumed>) = 0 [pid 12947] setpgid(0, 0 [pid 5067] openat(AT_FDCWD, "./1550", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12947] <... setpgid resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./1570", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12946] <... chdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 12946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12946] setpgid(0, 0) = 0 [pid 12946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5066] umount2("./1526", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12946] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12947] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./1526", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12946] write(3, "1000", 4 [pid 12947] write(3, "1000", 4 [pid 5067] getdents64(3, [pid 12946] <... write resumed>) = 4 [pid 12947] <... write resumed>) = 4 [pid 5068] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 12946] close(3 [pid 12947] close(3 [pid 12946] <... close resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] newfstatat(3, "", [pid 12947] <... close resumed>) = 0 [pid 12946] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./1570/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12947] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12946] <... symlink resumed>) = 0 [pid 12947] <... symlink resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1570/binderfs", [pid 5067] umount2("./1550/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 12946] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12947] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12947] <... bpf resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./1526/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12946] <... bpf resumed>) = 3 [pid 12947] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] unlink("./1570/binderfs" [pid 12946] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(AT_FDCWD, "./1550/binderfs", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1526/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12946] <... bpf resumed>) = 4 [pid 12947] <... bpf resumed>) = 4 [pid 5068] getdents64(3, [pid 5067] unlink("./1550/binderfs" [pid 5066] unlink("./1526/binderfs" [pid 12946] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12947] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12946] <... bpf resumed>) = 5 [pid 12947] <... bpf resumed>) = 5 [pid 5067] getdents64(3, [pid 5068] close(3 [pid 12947] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... close resumed>) = 0 [pid 12946] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] getdents64(3, [pid 5068] rmdir("./1570" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5066] close(3) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] rmdir("./1550" [pid 12946] <... bpf resumed>) = 6 [pid 12947] <... bpf resumed>) = 6 [pid 5068] mkdir("./1571", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] rmdir("./1526" [pid 12947] exit_group(0 [pid 5067] mkdir("./1551", 0777 [pid 12946] exit_group(0 [pid 12947] <... exit_group resumed>) = ? [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12946] <... exit_group resumed>) = ? [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 5066] mkdir("./1527", 0777) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12948 attached ./strace-static-x86_64: Process 12949 attached [pid 12946] +++ exited with 0 +++ [pid 12947] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12948 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12949] set_robust_list(0x5555686ec660, 24 [pid 12948] set_robust_list(0x5555686ec660, 24 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12947, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12946, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12949] <... set_robust_list resumed>) = 0 [pid 12948] <... set_robust_list resumed>) = 0 [pid 12949] chdir("./1527"./strace-static-x86_64: Process 12950 attached [pid 12948] chdir("./1571" [pid 5071] umount2("./1608", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./1593", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12949 [pid 12950] set_robust_list(0x5555686ec660, 24 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12950] <... set_robust_list resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12950] chdir("./1551" [pid 12949] <... chdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./1608", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./1593", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12950 [pid 12948] <... chdir resumed>) = 0 [pid 12950] <... chdir resumed>) = 0 [pid 12949] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12950] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12949] <... prctl resumed>) = 0 [pid 12948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 12950] <... prctl resumed>) = 0 [pid 12949] setpgid(0, 0 [pid 12948] <... prctl resumed>) = 0 [pid 12950] setpgid(0, 0 [pid 12949] <... setpgid resumed>) = 0 [pid 12948] setpgid(0, 0 [pid 5071] newfstatat(3, "", [pid 5069] newfstatat(3, "", [pid 12950] <... setpgid resumed>) = 0 [pid 12948] <... setpgid resumed>) = 0 [pid 12950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12950] <... openat resumed>) = 3 [pid 12949] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 12950] write(3, "1000", 4 [pid 12949] write(3, "1000", 4 [pid 12948] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12950] <... write resumed>) = 4 [pid 12949] <... write resumed>) = 4 [pid 12948] write(3, "1000", 4 [pid 5069] umount2("./1593/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1608/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12950] close(3 [pid 12949] close(3 [pid 12948] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12949] <... close resumed>) = 0 [pid 12948] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12950] <... close resumed>) = 0 [pid 12949] symlink("/dev/binderfs", "./binderfs" [pid 12948] <... close resumed>) = 0 [pid 12948] symlink("/dev/binderfs", "./binderfs" [pid 12950] symlink("/dev/binderfs", "./binderfs" [pid 5071] newfstatat(AT_FDCWD, "./1608/binderfs", [pid 5069] newfstatat(AT_FDCWD, "./1593/binderfs", [pid 12949] <... symlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12948] <... symlink resumed>) = 0 [pid 5071] unlink("./1608/binderfs" [pid 5069] unlink("./1593/binderfs" [pid 12950] <... symlink resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12949] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12950] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12948] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12950] <... bpf resumed>) = 3 [pid 12949] <... bpf resumed>) = 3 [pid 12948] <... bpf resumed>) = 3 [pid 12949] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12950] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12948] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12949] <... bpf resumed>) = 4 [pid 5071] getdents64(3, [pid 5069] getdents64(3, [pid 12948] <... bpf resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12950] <... bpf resumed>) = 4 [pid 5071] close(3 [pid 5069] close(3 [pid 12949] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12950] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12948] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 12949] <... bpf resumed>) = 5 [pid 5071] rmdir("./1608" [pid 5069] rmdir("./1593" [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1609", 0777 [pid 5069] mkdir("./1594", 0777 [pid 12950] <... bpf resumed>) = 5 [pid 12949] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12948] <... bpf resumed>) = 5 [pid 5071] <... mkdir resumed>) = 0 [pid 12949] <... bpf resumed>) = 6 [pid 5069] <... mkdir resumed>) = 0 [pid 12950] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12949] exit_group(0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12950] <... bpf resumed>) = 6 [pid 12949] <... exit_group resumed>) = ? [pid 12948] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12950] exit_group(0./strace-static-x86_64: Process 12951 attached [pid 12951] set_robust_list(0x5555686ec660, 24 [pid 12950] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12952 attached [pid 12951] <... set_robust_list resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12951 [pid 12951] chdir("./1609" [pid 12952] set_robust_list(0x5555686ec660, 24 [pid 12951] <... chdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12952 [pid 12952] <... set_robust_list resumed>) = 0 [pid 12952] chdir("./1594" [pid 12951] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12952] <... chdir resumed>) = 0 [pid 12951] <... prctl resumed>) = 0 [pid 12952] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12952] setpgid(0, 0 [pid 12951] setpgid(0, 0 [pid 12952] <... setpgid resumed>) = 0 [pid 12952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12951] <... setpgid resumed>) = 0 [pid 12952] <... openat resumed>) = 3 [pid 12951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12952] write(3, "1000", 4 [pid 12951] <... openat resumed>) = 3 [pid 12951] write(3, "1000", 4 [pid 12952] <... write resumed>) = 4 [pid 12951] <... write resumed>) = 4 [pid 12952] close(3 [pid 12951] close(3 [pid 12952] <... close resumed>) = 0 [pid 12951] <... close resumed>) = 0 [pid 12952] symlink("/dev/binderfs", "./binderfs" [pid 12951] symlink("/dev/binderfs", "./binderfs" [pid 12952] <... symlink resumed>) = 0 [pid 12951] <... symlink resumed>) = 0 [pid 12951] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12952] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12951] <... bpf resumed>) = 3 [pid 12952] <... bpf resumed>) = 3 [pid 12951] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12952] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12951] <... bpf resumed>) = 4 [pid 12952] <... bpf resumed>) = 4 [pid 12951] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12952] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12949] +++ exited with 0 +++ [pid 12948] <... bpf resumed>) = 6 [pid 12952] <... bpf resumed>) = 5 [pid 12951] <... bpf resumed>) = 5 [pid 12948] exit_group(0 [pid 12952] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12951] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12948] <... exit_group resumed>) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12949, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] umount2("./1527", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 12952] <... bpf resumed>) = 6 [pid 12951] <... bpf resumed>) = 6 [pid 12950] +++ exited with 0 +++ [pid 12948] +++ exited with 0 +++ [pid 12952] exit_group(0 [pid 12951] exit_group(0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12948, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12950, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] openat(AT_FDCWD, "./1527", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12952] <... exit_group resumed>) = ? [pid 12951] <... exit_group resumed>) = ? [pid 5066] <... openat resumed>) = 3 [pid 5068] umount2("./1571", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1551", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./1571", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1551", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12952] +++ exited with 0 +++ [pid 12951] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12952, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12951, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] newfstatat(3, "", [pid 5067] newfstatat(3, "", [pid 5066] umount2("./1527/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1609", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1594", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 5066] newfstatat(AT_FDCWD, "./1527/binderfs", [pid 5071] openat(AT_FDCWD, "./1609", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 5069] openat(AT_FDCWD, "./1594", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./1571/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] unlink("./1527/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./1551/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5071] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] newfstatat(AT_FDCWD, "./1571/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./1551/binderfs", [pid 5071] umount2("./1609/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] unlink("./1571/binderfs" [pid 5071] newfstatat(AT_FDCWD, "./1609/binderfs", [pid 5069] getdents64(3, [pid 5067] unlink("./1551/binderfs" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] close(3 [pid 5071] unlink("./1609/binderfs" [pid 5066] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] rmdir("./1527" [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(3, [pid 5069] umount2("./1594/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1594/binderfs", [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5068] close(3 [pid 5067] rmdir("./1551" [pid 5068] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] rmdir("./1571" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] mkdir("./1528", 0777 [pid 5071] rmdir("./1609") = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] mkdir("./1552", 0777 [pid 5068] mkdir("./1572", 0777 [pid 5071] mkdir("./1610", 0777 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] unlink("./1594/binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... unlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] getdents64(3, ./strace-static-x86_64: Process 12954 attached ./strace-static-x86_64: Process 12953 attached [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12955 ./strace-static-x86_64: Process 12956 attached ./strace-static-x86_64: Process 12955 attached [pid 12954] set_robust_list(0x5555686ec660, 24 [pid 12953] set_robust_list(0x5555686ec660, 24 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12953 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12954 [pid 12956] set_robust_list(0x5555686ec660, 24 [pid 12955] set_robust_list(0x5555686ec660, 24 [pid 12954] <... set_robust_list resumed>) = 0 [pid 12953] <... set_robust_list resumed>) = 0 [pid 12956] <... set_robust_list resumed>) = 0 [pid 12955] <... set_robust_list resumed>) = 0 [pid 5069] close(3 [pid 12956] chdir("./1572" [pid 12955] chdir("./1610" [pid 12954] chdir("./1528" [pid 5069] <... close resumed>) = 0 [pid 12956] <... chdir resumed>) = 0 [pid 12955] <... chdir resumed>) = 0 [pid 12954] <... chdir resumed>) = 0 [pid 12953] chdir("./1552" [pid 5069] rmdir("./1594" [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12956 [pid 12956] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12955] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12953] <... chdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 12953] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12954] <... prctl resumed>) = 0 [pid 12953] <... prctl resumed>) = 0 [pid 12956] <... prctl resumed>) = 0 [pid 12955] <... prctl resumed>) = 0 [pid 12954] setpgid(0, 0 [pid 5069] mkdir("./1595", 0777 [pid 12956] setpgid(0, 0 [pid 12955] setpgid(0, 0 [pid 12954] <... setpgid resumed>) = 0 [pid 12953] setpgid(0, 0 [pid 5069] <... mkdir resumed>) = 0 [pid 12956] <... setpgid resumed>) = 0 [pid 12955] <... setpgid resumed>) = 0 [pid 12954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12953] <... setpgid resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12954] <... openat resumed>) = 3 [pid 12953] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 12957 attached [pid 12956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12955] <... openat resumed>) = 3 [pid 12954] write(3, "1000", 4 [pid 12953] <... openat resumed>) = 3 [pid 12957] set_robust_list(0x5555686ec660, 24 [pid 12955] write(3, "1000", 4 [pid 12954] <... write resumed>) = 4 [pid 12953] write(3, "1000", 4 [pid 12957] <... set_robust_list resumed>) = 0 [pid 12956] <... openat resumed>) = 3 [pid 12955] <... write resumed>) = 4 [pid 12954] close(3 [pid 12953] <... write resumed>) = 4 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12957 [pid 12957] chdir("./1595" [pid 12956] write(3, "1000", 4 [pid 12955] close(3 [pid 12954] <... close resumed>) = 0 [pid 12953] close(3 [pid 12957] <... chdir resumed>) = 0 [pid 12956] <... write resumed>) = 4 [pid 12955] <... close resumed>) = 0 [pid 12954] symlink("/dev/binderfs", "./binderfs" [pid 12953] <... close resumed>) = 0 [pid 12957] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12956] close(3 [pid 12955] symlink("/dev/binderfs", "./binderfs" [pid 12954] <... symlink resumed>) = 0 [pid 12953] symlink("/dev/binderfs", "./binderfs" [pid 12957] <... prctl resumed>) = 0 [pid 12956] <... close resumed>) = 0 [pid 12953] <... symlink resumed>) = 0 [pid 12957] setpgid(0, 0 [pid 12956] symlink("/dev/binderfs", "./binderfs" [pid 12955] <... symlink resumed>) = 0 [pid 12954] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12953] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12957] <... setpgid resumed>) = 0 [pid 12956] <... symlink resumed>) = 0 [pid 12955] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12956] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12954] <... bpf resumed>) = 3 [pid 12953] <... bpf resumed>) = 3 [pid 12955] <... bpf resumed>) = 3 [pid 12953] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12957] <... openat resumed>) = 3 [pid 12956] <... bpf resumed>) = 3 [pid 12955] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12954] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12953] <... bpf resumed>) = 4 [pid 12957] write(3, "1000", 4 [pid 12956] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12955] <... bpf resumed>) = 4 [pid 12954] <... bpf resumed>) = 4 [pid 12953] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12957] <... write resumed>) = 4 [pid 12954] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12956] <... bpf resumed>) = 4 [pid 12954] <... bpf resumed>) = 5 [pid 12953] <... bpf resumed>) = 5 [pid 12957] close(3 [pid 12956] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12955] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12957] <... close resumed>) = 0 [pid 12954] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12953] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12955] <... bpf resumed>) = 5 [pid 12957] symlink("/dev/binderfs", "./binderfs" [pid 12954] <... bpf resumed>) = 6 [pid 12956] <... bpf resumed>) = 5 [pid 12953] <... bpf resumed>) = 6 [pid 12957] <... symlink resumed>) = 0 [pid 12957] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12955] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12954] exit_group(0 [pid 12957] <... bpf resumed>) = 3 [pid 12956] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12955] <... bpf resumed>) = 6 [pid 12954] <... exit_group resumed>) = ? [pid 12953] exit_group(0 [pid 12957] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12953] <... exit_group resumed>) = ? [pid 12955] exit_group(0 [pid 12956] <... bpf resumed>) = 6 [pid 12954] +++ exited with 0 +++ [pid 12956] exit_group(0 [pid 12953] +++ exited with 0 +++ [pid 12957] <... bpf resumed>) = 4 [pid 12956] <... exit_group resumed>) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12954, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12955] <... exit_group resumed>) = ? [pid 12957] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] umount2("./1528", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12953, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12957] <... bpf resumed>) = 5 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1528", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12957] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./1552", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5067] openat(AT_FDCWD, "./1552", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./1528/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(AT_FDCWD, "./1528/binderfs", [pid 5067] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] unlink("./1528/binderfs" [pid 5067] umount2("./1552/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12956] +++ exited with 0 +++ [pid 12955] +++ exited with 0 +++ [pid 5067] newfstatat(AT_FDCWD, "./1552/binderfs", [pid 5066] getdents64(3, [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12955, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12956, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] close(3 [pid 5068] umount2("./1572", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./1552/binderfs" [pid 5066] <... close resumed>) = 0 [pid 5071] umount2("./1610", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5066] rmdir("./1528" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1610", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] openat(AT_FDCWD, "./1572", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(3, "", [pid 5068] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5068] newfstatat(3, "", [pid 5067] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5068] getdents64(3, [pid 5066] mkdir("./1529", 0777 [pid 5067] <... close resumed>) = 0 [pid 5071] umount2("./1610/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] rmdir("./1552" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1610/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5071] unlink("./1610/binderfs" [pid 12957] <... bpf resumed>) = 6 [pid 5068] umount2("./1572/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./1553", 0777 [pid 5068] newfstatat(AT_FDCWD, "./1572/binderfs", [pid 12957] exit_group(0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12958 attached [pid 12957] <... exit_group resumed>) = ? [pid 5071] close(3 [pid 5068] unlink("./1572/binderfs" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./1610" [pid 5068] <... unlink resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] mkdir("./1611", 0777./strace-static-x86_64: Process 12959 attached [pid 12958] set_robust_list(0x5555686ec660, 24 [pid 12957] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12958 [pid 12959] set_robust_list(0x5555686ec660, 24 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12957, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12959] <... set_robust_list resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12959 [pid 12959] chdir("./1553") = 0 [pid 12958] <... set_robust_list resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12959] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12958] chdir("./1529" [pid 5069] umount2("./1595", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] close(3 [pid 12959] <... prctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12959] setpgid(0, 0 [pid 5068] <... close resumed>) = 0 [pid 12959] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 12960 attached [pid 12959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12958] <... chdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./1595", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] rmdir("./1572" [pid 12958] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12959] <... openat resumed>) = 3 [pid 12960] set_robust_list(0x5555686ec660, 24 [pid 12958] <... prctl resumed>) = 0 [pid 12960] <... set_robust_list resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 12958] setpgid(0, 0 [pid 12959] write(3, "1000", 4 [pid 12960] chdir("./1611" [pid 12958] <... setpgid resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12960 [pid 5069] newfstatat(3, "", [pid 5068] <... rmdir resumed>) = 0 [pid 12959] <... write resumed>) = 4 [pid 5068] mkdir("./1573", 0777 [pid 12960] <... chdir resumed>) = 0 [pid 12959] close(3 [pid 12958] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12959] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5069] getdents64(3, [pid 12960] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12959] symlink("/dev/binderfs", "./binderfs" [pid 12960] <... prctl resumed>) = 0 [pid 12959] <... symlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12960] setpgid(0, 0 [pid 12959] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12958] <... openat resumed>) = 3 [pid 5069] umount2("./1595/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12961 attached [pid 12960] <... setpgid resumed>) = 0 [pid 12959] <... bpf resumed>) = 3 [pid 12958] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12961 [pid 12961] set_robust_list(0x5555686ec660, 24 [pid 12960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12959] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12958] <... write resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1595/binderfs", [pid 12961] <... set_robust_list resumed>) = 0 [pid 12960] <... openat resumed>) = 3 [pid 12958] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12961] chdir("./1573" [pid 12960] write(3, "1000", 4 [pid 12959] <... bpf resumed>) = 4 [pid 12958] <... close resumed>) = 0 [pid 5069] unlink("./1595/binderfs" [pid 12961] <... chdir resumed>) = 0 [pid 12960] <... write resumed>) = 4 [pid 12961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12960] close(3 [pid 12958] symlink("/dev/binderfs", "./binderfs" [pid 12961] <... prctl resumed>) = 0 [pid 12959] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... unlink resumed>) = 0 [pid 12960] <... close resumed>) = 0 [pid 12961] setpgid(0, 0 [pid 12958] <... symlink resumed>) = 0 [pid 12961] <... setpgid resumed>) = 0 [pid 12961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12959] <... bpf resumed>) = 5 [pid 12960] symlink("/dev/binderfs", "./binderfs" [pid 12961] <... openat resumed>) = 3 [pid 12961] write(3, "1000", 4) = 4 [pid 12961] close(3) = 0 [pid 12961] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] getdents64(3, [pid 12958] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12960] <... symlink resumed>) = 0 [pid 12959] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12958] <... bpf resumed>) = 3 [pid 5069] close(3 [pid 12961] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12960] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12958] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... close resumed>) = 0 [pid 12961] <... bpf resumed>) = 3 [pid 12960] <... bpf resumed>) = 3 [pid 12959] <... bpf resumed>) = 6 [pid 12961] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] rmdir("./1595" [pid 12961] <... bpf resumed>) = 4 [pid 12960] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12959] exit_group(0 [pid 12958] <... bpf resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 12961] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12960] <... bpf resumed>) = 4 [pid 12959] <... exit_group resumed>) = ? [pid 12958] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] mkdir("./1596", 0777 [pid 12961] <... bpf resumed>) = 5 [pid 12961] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16) = 6 [pid 5069] <... mkdir resumed>) = 0 [pid 12961] exit_group(0 [pid 12958] <... bpf resumed>) = 5 [pid 12961] <... exit_group resumed>) = ? [pid 12960] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12958] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12960] <... bpf resumed>) = 5 [pid 12960] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16./strace-static-x86_64: Process 12962 attached [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12962 [pid 12962] set_robust_list(0x5555686ec660, 24) = 0 [pid 12962] chdir("./1596") = 0 [pid 12962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12962] setpgid(0, 0) = 0 [pid 12962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12962] write(3, "1000", 4) = 4 [pid 12962] close(3) = 0 [pid 12962] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12962] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12961] +++ exited with 0 +++ [pid 12959] +++ exited with 0 +++ [pid 12962] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12961, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12959, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12962] <... bpf resumed>) = 4 [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12962] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] umount2("./1553", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12962] <... bpf resumed>) = 5 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12962] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] umount2("./1573", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./1553", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12958] <... bpf resumed>) = 6 [pid 5068] openat(AT_FDCWD, "./1573", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 12960] <... bpf resumed>) = 6 [pid 12958] exit_group(0) = ? [pid 5068] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 12960] exit_group(0 [pid 12962] <... bpf resumed>) = 6 [pid 5068] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12962] exit_group(0 [pid 12960] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12962] <... exit_group resumed>) = ? [pid 12958] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12958, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1553/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1573/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1553/binderfs", [pid 5068] newfstatat(AT_FDCWD, "./1573/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./1573/binderfs" [pid 5067] unlink("./1553/binderfs" [pid 5066] umount2("./1529", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5067] getdents64(3, [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5067] close(3 [pid 5068] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5068] rmdir("./1573" [pid 12962] +++ exited with 0 +++ [pid 12960] +++ exited with 0 +++ [pid 5067] rmdir("./1553" [pid 5066] openat(AT_FDCWD, "./1529", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12960, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12962, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 5067] <... rmdir resumed>) = 0 [pid 5068] mkdir("./1574", 0777 [pid 5067] mkdir("./1554", 0777 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./1611", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] openat(AT_FDCWD, "./1611", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./1529/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12964 attached ./strace-static-x86_64: Process 12963 attached [pid 5071] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./1596", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1529/binderfs", [pid 5071] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5069] openat(AT_FDCWD, "./1596", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] unlink("./1529/binderfs" [pid 12964] set_robust_list(0x5555686ec660, 24 [pid 12963] set_robust_list(0x5555686ec660, 24 [pid 5071] umount2("./1611/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12964 [pid 5066] <... unlink resumed>) = 0 [pid 12964] <... set_robust_list resumed>) = 0 [pid 12963] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(3, "", [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12963 [pid 12963] chdir("./1574" [pid 5071] newfstatat(AT_FDCWD, "./1611/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 12964] chdir("./1554" [pid 12963] <... chdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12964] <... chdir resumed>) = 0 [pid 12963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] unlink("./1611/binderfs" [pid 5069] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12964] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12963] <... prctl resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] close(3 [pid 12964] <... prctl resumed>) = 0 [pid 12963] setpgid(0, 0 [pid 5071] getdents64(3, [pid 5069] umount2("./1596/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./1529" [pid 12964] setpgid(0, 0 [pid 12963] <... setpgid resumed>) = 0 [pid 5071] close(3 [pid 5069] newfstatat(AT_FDCWD, "./1596/binderfs", [pid 5066] <... rmdir resumed>) = 0 [pid 12964] <... setpgid resumed>) = 0 [pid 12963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] rmdir("./1611" [pid 12964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... rmdir resumed>) = 0 [pid 5069] unlink("./1596/binderfs" [pid 12963] <... openat resumed>) = 3 [pid 5066] mkdir("./1530", 0777 [pid 12964] <... openat resumed>) = 3 [pid 12963] write(3, "1000", 4 [pid 5071] mkdir("./1612", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 12964] write(3, "1000", 4 [pid 12963] <... write resumed>) = 4 [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 12963] close(3 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12964] <... write resumed>) = 4 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12964] close(3 [pid 12963] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] close(3 [pid 12964] <... close resumed>) = 0 [pid 12963] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12965 attached [pid 12964] symlink("/dev/binderfs", "./binderfs" [pid 12963] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12965 [pid 12965] set_robust_list(0x5555686ec660, 24 [pid 12964] <... symlink resumed>) = 0 [pid 12963] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] rmdir("./1596"./strace-static-x86_64: Process 12966 attached [pid 12965] <... set_robust_list resumed>) = 0 [pid 12964] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12963] <... bpf resumed>) = 3 [pid 12964] <... bpf resumed>) = 3 [pid 12963] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... rmdir resumed>) = 0 [pid 12966] set_robust_list(0x5555686ec660, 24 [pid 12964] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12966] <... set_robust_list resumed>) = 0 [pid 12965] chdir("./1530" [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12966 [pid 12966] chdir("./1612" [pid 12965] <... chdir resumed>) = 0 [pid 12964] <... bpf resumed>) = 4 [pid 12963] <... bpf resumed>) = 4 [pid 12966] <... chdir resumed>) = 0 [pid 12965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12964] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] mkdir("./1597", 0777 [pid 12966] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12965] <... prctl resumed>) = 0 [pid 12963] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12966] <... prctl resumed>) = 0 [pid 12965] setpgid(0, 0 [pid 12964] <... bpf resumed>) = 5 [pid 12966] setpgid(0, 0) = 0 [pid 12965] <... setpgid resumed>) = 0 [pid 12964] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... mkdir resumed>) = 0 [pid 12963] <... bpf resumed>) = 5 [pid 12963] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12966] <... openat resumed>) = 3 [pid 12965] <... openat resumed>) = 3 [pid 12964] <... bpf resumed>) = 6 [pid 12963] <... bpf resumed>) = 6 ./strace-static-x86_64: Process 12967 attached [pid 12965] write(3, "1000", 4 [pid 12966] write(3, "1000", 4 [pid 12965] <... write resumed>) = 4 [pid 12964] exit_group(0 [pid 12963] exit_group(0 [pid 12966] <... write resumed>) = 4 [pid 12965] close(3 [pid 12966] close(3 [pid 12965] <... close resumed>) = 0 [pid 12964] <... exit_group resumed>) = ? [pid 12967] set_robust_list(0x5555686ec660, 24 [pid 12966] <... close resumed>) = 0 [pid 12965] symlink("/dev/binderfs", "./binderfs" [pid 12963] <... exit_group resumed>) = ? [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12967 [pid 12967] <... set_robust_list resumed>) = 0 [pid 12966] symlink("/dev/binderfs", "./binderfs" [pid 12967] chdir("./1597" [pid 12965] <... symlink resumed>) = 0 [pid 12967] <... chdir resumed>) = 0 [pid 12967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12967] setpgid(0, 0) = 0 [pid 12965] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12966] <... symlink resumed>) = 0 [pid 12967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12966] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12965] <... bpf resumed>) = 3 [pid 12966] <... bpf resumed>) = 3 [pid 12967] <... openat resumed>) = 3 [pid 12966] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12965] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12967] write(3, "1000", 4 [pid 12966] <... bpf resumed>) = 4 [pid 12967] <... write resumed>) = 4 [pid 12966] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12965] <... bpf resumed>) = 4 [pid 12967] close(3) = 0 [pid 12966] <... bpf resumed>) = 5 [pid 12965] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12966] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12965] <... bpf resumed>) = 5 [pid 12967] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 12965] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12967] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 4 [pid 12967] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 5 [pid 12967] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12964] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12964, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 12963] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12963, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] umount2("./1554", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12967] <... bpf resumed>) = 6 [pid 12966] <... bpf resumed>) = 6 [pid 12965] <... bpf resumed>) = 6 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12967] exit_group(0 [pid 12966] exit_group(0 [pid 12965] exit_group(0 [pid 5067] openat(AT_FDCWD, "./1554", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12967] <... exit_group resumed>) = ? [pid 12966] <... exit_group resumed>) = ? [pid 12965] <... exit_group resumed>) = ? [pid 5068] umount2("./1574", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 12966] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] openat(AT_FDCWD, "./1574", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12966, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] getdents64(3, [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5067] umount2("./1554/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5067] newfstatat(AT_FDCWD, "./1554/binderfs", [pid 5071] umount2("./1612", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./1554/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1612", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./1574/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5068] newfstatat(AT_FDCWD, "./1574/binderfs", [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./1554" [pid 5071] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] unlink("./1574/binderfs" [pid 5067] mkdir("./1555", 0777 [pid 12967] +++ exited with 0 +++ [pid 12965] +++ exited with 0 +++ [pid 5071] umount2("./1612/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12967, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12965, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] newfstatat(AT_FDCWD, "./1612/binderfs", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12968 attached [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5071] unlink("./1612/binderfs" [pid 5068] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12968 [pid 5066] <... restart_syscall resumed>) = 0 [pid 12968] set_robust_list(0x5555686ec660, 24 [pid 5068] <... close resumed>) = 0 [pid 12968] <... set_robust_list resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] rmdir("./1574" [pid 12968] chdir("./1555" [pid 5069] umount2("./1597", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12968] <... chdir resumed>) = 0 [pid 12968] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5069] openat(AT_FDCWD, "./1597", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./1530", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 12968] <... prctl resumed>) = 0 [pid 5071] close(3 [pid 5069] <... openat resumed>) = 3 [pid 5068] mkdir("./1575", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12968] setpgid(0, 0 [pid 5071] <... close resumed>) = 0 [pid 12968] <... setpgid resumed>) = 0 [pid 5071] rmdir("./1612" [pid 5069] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./1530", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... mkdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 12968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... openat resumed>) = 3 [pid 5069] getdents64(3, 0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12969 attached [pid 12968] <... openat resumed>) = 3 [pid 5071] mkdir("./1613", 0777 [pid 5066] newfstatat(3, "", [pid 12969] set_robust_list(0x5555686ec660, 24 [pid 12968] write(3, "1000", 4 [pid 5069] umount2("./1597/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12969 [pid 12968] <... write resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./1597/binderfs", [pid 5066] getdents64(3, [pid 12969] <... set_robust_list resumed>) = 0 [pid 12968] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12969] chdir("./1575" [pid 12968] <... close resumed>) = 0 [pid 5066] umount2("./1530/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12969] <... chdir resumed>) = 0 [pid 12968] symlink("/dev/binderfs", "./binderfs" [pid 5069] unlink("./1597/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12969] setpgid(0, 0) = 0 [pid 12969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] newfstatat(AT_FDCWD, "./1530/binderfs", ./strace-static-x86_64: Process 12970 attached [pid 12968] <... symlink resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 12970] set_robust_list(0x5555686ec660, 24 [pid 12969] write(3, "1000", 4 [pid 5069] getdents64(3, [pid 12970] <... set_robust_list resumed>) = 0 [pid 12969] <... write resumed>) = 4 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12970] chdir("./1613" [pid 12969] close(3 [pid 12968] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12970 [pid 5069] close(3 [pid 5066] unlink("./1530/binderfs" [pid 12970] <... chdir resumed>) = 0 [pid 12969] <... close resumed>) = 0 [pid 12968] <... bpf resumed>) = 3 [pid 12970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12969] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... close resumed>) = 0 [pid 12970] <... prctl resumed>) = 0 [pid 12969] <... symlink resumed>) = 0 [pid 12968] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... unlink resumed>) = 0 [pid 12970] setpgid(0, 0 [pid 12969] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12968] <... bpf resumed>) = 4 [pid 5069] rmdir("./1597" [pid 12970] <... setpgid resumed>) = 0 [pid 5066] getdents64(3, [pid 12968] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12969] <... bpf resumed>) = 3 [pid 12968] <... bpf resumed>) = 5 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12968] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12970] <... openat resumed>) = 3 [pid 12969] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12968] <... bpf resumed>) = 6 [pid 5069] mkdir("./1598", 0777 [pid 5066] close(3 [pid 12970] write(3, "1000", 4 [pid 5066] <... close resumed>) = 0 [pid 12970] <... write resumed>) = 4 [pid 12969] <... bpf resumed>) = 4 [pid 5069] <... mkdir resumed>) = 0 [pid 12968] exit_group(0 [pid 5066] rmdir("./1530" [pid 12968] <... exit_group resumed>) = ? [pid 12969] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12970] close(3) = 0 [pid 12969] <... bpf resumed>) = 5 [pid 12968] +++ exited with 0 +++ [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... rmdir resumed>) = 0 [pid 12970] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12968, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5066] mkdir("./1531", 0777./strace-static-x86_64: Process 12971 attached [pid 12970] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12969] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] umount2("./1555", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12971] set_robust_list(0x5555686ec660, 24 [pid 12970] <... bpf resumed>) = 3 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12971 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12971] <... set_robust_list resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./1555", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 12970] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] newfstatat(3, "", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12971] chdir("./1598" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12971] <... chdir resumed>) = 0 [pid 12971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12971] setpgid(0, 0 [pid 12970] <... bpf resumed>) = 4 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 12972 attached [pid 12972] set_robust_list(0x5555686ec660, 24 [pid 12971] <... setpgid resumed>) = 0 [pid 12970] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12972 [pid 12972] <... set_robust_list resumed>) = 0 [pid 12971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12969] <... bpf resumed>) = 6 [pid 5067] umount2("./1555/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12972] chdir("./1531" [pid 12971] <... openat resumed>) = 3 [pid 12970] <... bpf resumed>) = 5 [pid 12969] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12972] <... chdir resumed>) = 0 [pid 12970] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12971] write(3, "1000", 4 [pid 12969] <... exit_group resumed>) = ? [pid 5067] newfstatat(AT_FDCWD, "./1555/binderfs", [pid 12972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12970] <... bpf resumed>) = 6 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12972] <... prctl resumed>) = 0 [pid 5067] unlink("./1555/binderfs" [pid 12972] setpgid(0, 0 [pid 12971] <... write resumed>) = 4 [pid 12970] exit_group(0 [pid 12971] close(3) = 0 [pid 12971] symlink("/dev/binderfs", "./binderfs" [pid 12972] <... setpgid resumed>) = 0 [pid 12971] <... symlink resumed>) = 0 [pid 12970] <... exit_group resumed>) = ? [pid 5067] <... unlink resumed>) = 0 [pid 12972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] getdents64(3, [pid 12972] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12972] write(3, "1000", 4) = 4 [pid 12971] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12972] close(3 [pid 12971] <... bpf resumed>) = 3 [pid 5067] close(3 [pid 12972] <... close resumed>) = 0 [pid 12971] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... close resumed>) = 0 [pid 12972] symlink("/dev/binderfs", "./binderfs" [pid 12971] <... bpf resumed>) = 4 [pid 5067] rmdir("./1555" [pid 12971] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... rmdir resumed>) = 0 [pid 12972] <... symlink resumed>) = 0 [pid 12972] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] mkdir("./1556", 0777 [pid 12972] <... bpf resumed>) = 3 [pid 12971] <... bpf resumed>) = 5 [pid 12972] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12971] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... mkdir resumed>) = 0 [pid 12972] <... bpf resumed>) = 4 [pid 12972] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12970] +++ exited with 0 +++ [pid 12969] +++ exited with 0 +++ [pid 12972] <... bpf resumed>) = 5 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12970, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12969, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12972] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] umount2("./1575", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 12973 attached ) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./1613", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12973] set_robust_list(0x5555686ec660, 24 [pid 12972] <... bpf resumed>) = 6 [pid 12971] <... bpf resumed>) = 6 [pid 5068] openat(AT_FDCWD, "./1575", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12973 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12973] <... set_robust_list resumed>) = 0 [pid 12972] exit_group(0 [pid 12971] exit_group(0 [pid 12973] chdir("./1556" [pid 12971] <... exit_group resumed>) = ? [pid 12973] <... chdir resumed>) = 0 [pid 12972] <... exit_group resumed>) = ? [pid 5071] openat(AT_FDCWD, "./1613", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... openat resumed>) = 3 [pid 12973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 12973] <... prctl resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12973] setpgid(0, 0 [pid 5071] getdents64(3, [pid 5068] getdents64(3, [pid 12973] <... setpgid resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./1575/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1613/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12973] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./1613/binderfs", [pid 5068] newfstatat(AT_FDCWD, "./1575/binderfs", [pid 12973] write(3, "1000", 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12973] <... write resumed>) = 4 [pid 5068] unlink("./1575/binderfs" [pid 12973] close(3) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12972] +++ exited with 0 +++ [pid 12971] +++ exited with 0 +++ [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] getdents64(3, [pid 12973] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12971, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] unlink("./1613/binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12973] <... bpf resumed>) = 3 [pid 5068] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12972, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 12973] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... close resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 12973] <... bpf resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 5068] rmdir("./1575" [pid 5066] <... restart_syscall resumed>) = 0 [pid 5071] getdents64(3, [pid 12973] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5069] umount2("./1598", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] rmdir("./1613" [pid 5069] openat(AT_FDCWD, "./1598", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./1576", 0777 [pid 5066] umount2("./1531", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12973] <... bpf resumed>) = 5 [pid 5071] mkdir("./1614", 0777 [pid 5069] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./1531", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12973] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... openat resumed>) = 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] getdents64(3, [pid 5066] getdents64(3, [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 ./strace-static-x86_64: Process 12974 attached [pid 5069] umount2("./1598/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./1531/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12974] set_robust_list(0x5555686ec660, 24 [pid 5069] newfstatat(AT_FDCWD, "./1598/binderfs", [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12974 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 12975 attached [pid 12974] <... set_robust_list resumed>) = 0 [pid 12973] <... bpf resumed>) = 6 [pid 5069] unlink("./1598/binderfs" [pid 5066] newfstatat(AT_FDCWD, "./1531/binderfs", [pid 12975] set_robust_list(0x5555686ec660, 24 [pid 12974] chdir("./1576" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12975] <... set_robust_list resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12975 [pid 12975] chdir("./1614" [pid 12974] <... chdir resumed>) = 0 [pid 12973] exit_group(0 [pid 5069] <... unlink resumed>) = 0 [pid 5066] unlink("./1531/binderfs" [pid 12975] <... chdir resumed>) = 0 [pid 12974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12973] <... exit_group resumed>) = ? [pid 12975] setpgid(0, 0 [pid 12974] <... prctl resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 12975] <... setpgid resumed>) = 0 [pid 12975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12975] write(3, "1000", 4 [pid 12974] setpgid(0, 0 [pid 12973] +++ exited with 0 +++ [pid 5069] getdents64(3, [pid 5066] getdents64(3, [pid 12974] <... setpgid resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12975] <... write resumed>) = 4 [pid 12974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12973, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] close(3 [pid 12975] close(3 [pid 12974] <... openat resumed>) = 3 [pid 5069] close(3 [pid 5066] <... close resumed>) = 0 [pid 12975] <... close resumed>) = 0 [pid 5066] rmdir("./1531" [pid 12975] symlink("/dev/binderfs", "./binderfs" [pid 12974] write(3, "1000", 4 [pid 5069] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12975] <... symlink resumed>) = 0 [pid 12974] <... write resumed>) = 4 [pid 5069] rmdir("./1598" [pid 5067] umount2("./1556", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./1532", 0777 [pid 12974] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1556", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12974] <... close resumed>) = 0 [pid 12975] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5066] <... mkdir resumed>) = 0 [pid 12975] <... bpf resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12975] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12974] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... rmdir resumed>) = 0 [pid 5067] newfstatat(3, "", ./strace-static-x86_64: Process 12976 attached [pid 12975] <... bpf resumed>) = 4 [pid 12974] <... symlink resumed>) = 0 [pid 12976] set_robust_list(0x5555686ec660, 24) = 0 [pid 12975] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12976 [pid 12976] chdir("./1532" [pid 12975] <... bpf resumed>) = 5 [pid 12974] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] mkdir("./1599", 0777 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12976] <... chdir resumed>) = 0 [pid 12976] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12975] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12976] <... prctl resumed>) = 0 [pid 12974] <... bpf resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 12976] setpgid(0, 0) = 0 [pid 12974] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12976] <... openat resumed>) = 3 [pid 12975] <... bpf resumed>) = 6 [pid 12974] <... bpf resumed>) = 4 [pid 12975] exit_group(0 [pid 12976] write(3, "1000", 4 [pid 12975] <... exit_group resumed>) = ? [pid 12976] <... write resumed>) = 4 [pid 12975] +++ exited with 0 +++ [pid 12974] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] umount2("./1556/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12975, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- ./strace-static-x86_64: Process 12977 attached [pid 12976] close(3 [pid 12977] set_robust_list(0x5555686ec660, 24 [pid 12976] <... close resumed>) = 0 [pid 12977] <... set_robust_list resumed>) = 0 [pid 12976] symlink("/dev/binderfs", "./binderfs" [pid 12977] chdir("./1599" [pid 12976] <... symlink resumed>) = 0 [pid 12977] <... chdir resumed>) = 0 [pid 12976] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12974] <... bpf resumed>) = 5 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12977 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12977] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12976] <... bpf resumed>) = 3 [pid 5067] newfstatat(AT_FDCWD, "./1556/binderfs", [pid 12977] <... prctl resumed>) = 0 [pid 12976] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12974] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12977] setpgid(0, 0 [pid 12976] <... bpf resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12977] <... setpgid resumed>) = 0 [pid 5067] unlink("./1556/binderfs" [pid 12977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12976] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1614", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12977] <... openat resumed>) = 3 [pid 12976] <... bpf resumed>) = 5 [pid 5067] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 12977] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "./1614", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12977] <... write resumed>) = 4 [pid 12976] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12977] close(3 [pid 5067] close(3 [pid 12977] <... close resumed>) = 0 [pid 12977] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5067] rmdir("./1556" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12977] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = 3 [pid 5071] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 12977] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12977] <... bpf resumed>) = 4 [pid 5067] mkdir("./1557", 0777 [pid 12977] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] umount2("./1614/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12974] <... bpf resumed>) = 6 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 12976] <... bpf resumed>) = 6 [pid 12976] exit_group(0 [pid 12977] <... bpf resumed>) = 5 [pid 12974] exit_group(0 [pid 5071] newfstatat(AT_FDCWD, "./1614/binderfs", [pid 12974] <... exit_group resumed>) = ? [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12977] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12976] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12977] <... bpf resumed>) = 6 [pid 12976] +++ exited with 0 +++ [pid 12977] exit_group(0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12976, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12977] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 12978 attached [pid 5071] unlink("./1614/binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12978 [pid 12978] set_robust_list(0x5555686ec660, 24 [pid 5071] <... unlink resumed>) = 0 [pid 5066] umount2("./1532", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12978] <... set_robust_list resumed>) = 0 [pid 5071] getdents64(3, [pid 12978] chdir("./1557" [pid 12974] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12978] <... chdir resumed>) = 0 [pid 5071] close(3 [pid 12978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12974, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5066] openat(AT_FDCWD, "./1532", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./1576", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 12978] <... prctl resumed>) = 0 [pid 12977] +++ exited with 0 +++ [pid 5071] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 12978] setpgid(0, 0 [pid 5071] rmdir("./1614" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12977, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5068] openat(AT_FDCWD, "./1576", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12978] <... setpgid resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5066] umount2("./1532/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12978] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./1599", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./1576/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./1532/binderfs", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1576/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./1532/binderfs" [pid 12978] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5071] mkdir("./1615", 0777 [pid 12978] <... write resumed>) = 4 [pid 5069] openat(AT_FDCWD, "./1599", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] unlink("./1576/binderfs" [pid 5066] getdents64(3, [pid 12978] close(3 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12978] <... close resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] close(3 [pid 12978] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5066] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] rmdir("./1532" [pid 5069] newfstatat(3, "", [pid 5068] rmdir("./1576" [pid 5066] <... rmdir resumed>) = 0 [pid 12978] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 12978] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] getdents64(3, [pid 5068] mkdir("./1577", 0777 [pid 5066] mkdir("./1533", 0777 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12980 attached ./strace-static-x86_64: Process 12979 attached [pid 12978] <... bpf resumed>) = 3 [pid 5069] umount2("./1599/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12980] set_robust_list(0x5555686ec660, 24 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12979] set_robust_list(0x5555686ec660, 24 [pid 12978] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12980] <... set_robust_list resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12979 [pid 5069] newfstatat(AT_FDCWD, "./1599/binderfs", [pid 12980] chdir("./1577" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12980] <... chdir resumed>) = 0 [pid 12979] <... set_robust_list resumed>) = 0 [pid 5069] unlink("./1599/binderfs"./strace-static-x86_64: Process 12981 attached [pid 12980] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12979] chdir("./1615" [pid 12978] <... bpf resumed>) = 4 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12980 [pid 12980] <... prctl resumed>) = 0 [pid 12979] <... chdir resumed>) = 0 [pid 12978] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12981] set_robust_list(0x5555686ec660, 24 [pid 12980] setpgid(0, 0 [pid 12979] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12981 [pid 12980] <... setpgid resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12979] <... prctl resumed>) = 0 [pid 12978] <... bpf resumed>) = 5 [pid 12981] <... set_robust_list resumed>) = 0 [pid 12981] chdir("./1533" [pid 12980] <... openat resumed>) = 3 [pid 12979] setpgid(0, 0 [pid 5069] close(3 [pid 12981] <... chdir resumed>) = 0 [pid 12979] <... setpgid resumed>) = 0 [pid 12978] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] <... close resumed>) = 0 [pid 12981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12980] write(3, "1000", 4 [pid 5069] rmdir("./1599" [pid 12981] <... prctl resumed>) = 0 [pid 12980] <... write resumed>) = 4 [pid 12979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12978] <... bpf resumed>) = 6 [pid 12981] setpgid(0, 0 [pid 12980] close(3 [pid 5069] <... rmdir resumed>) = 0 [pid 12981] <... setpgid resumed>) = 0 [pid 12980] <... close resumed>) = 0 [pid 12981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 12978] exit_group(0 [pid 5069] mkdir("./1600", 0777 [pid 12979] <... openat resumed>) = 3 [pid 12981] <... openat resumed>) = 3 [pid 12978] <... exit_group resumed>) = ? [pid 12980] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... mkdir resumed>) = 0 [pid 12981] write(3, "1000", 4 [pid 12980] <... bpf resumed>) = 3 [pid 12979] write(3, "1000", 4 [pid 12981] <... write resumed>) = 4 [pid 12979] <... write resumed>) = 4 [pid 12980] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12981] close(3 [pid 12980] <... bpf resumed>) = 4 [pid 12979] close(3 [pid 12978] +++ exited with 0 +++ [pid 12981] <... close resumed>) = 0 [pid 12979] <... close resumed>) = 0 [pid 12981] symlink("/dev/binderfs", "./binderfs" [pid 12979] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 12982 attached [pid 12980] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12981] <... symlink resumed>) = 0 [pid 12982] set_robust_list(0x5555686ec660, 24 [pid 12979] <... symlink resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12982 [pid 12982] <... set_robust_list resumed>) = 0 [pid 12981] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12980] <... bpf resumed>) = 5 [pid 12979] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12978, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12982] chdir("./1600" [pid 12980] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12982] <... chdir resumed>) = 0 [pid 12981] <... bpf resumed>) = 3 [pid 12979] <... bpf resumed>) = 3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12981] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12979] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12982] <... prctl resumed>) = 0 [pid 5067] umount2("./1557", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12982] setpgid(0, 0 [pid 12979] <... bpf resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12981] <... bpf resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./1557", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12982] <... setpgid resumed>) = 0 [pid 12981] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12979] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] <... openat resumed>) = 3 [pid 12982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 12981] <... bpf resumed>) = 5 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] umount2("./1557/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12982] <... openat resumed>) = 3 [pid 12981] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12980] <... bpf resumed>) = 6 [pid 12979] <... bpf resumed>) = 5 [pid 12982] write(3, "1000", 4 [pid 12981] <... bpf resumed>) = 6 [pid 12980] exit_group(0 [pid 12979] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12982] <... write resumed>) = 4 [pid 12981] exit_group(0 [pid 12980] <... exit_group resumed>) = ? [pid 12979] <... bpf resumed>) = 6 [pid 5067] newfstatat(AT_FDCWD, "./1557/binderfs", [pid 12982] close(3 [pid 12981] <... exit_group resumed>) = ? [pid 12979] exit_group(0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12982] <... close resumed>) = 0 [pid 12979] <... exit_group resumed>) = ? [pid 5067] unlink("./1557/binderfs") = 0 [pid 12979] +++ exited with 0 +++ [pid 12982] symlink("/dev/binderfs", "./binderfs" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12979, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5067] getdents64(3, [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 12981] +++ exited with 0 +++ [pid 5067] rmdir("./1557" [pid 12982] <... symlink resumed>) = 0 [pid 12980] +++ exited with 0 +++ [pid 5067] <... rmdir resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12981, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] umount2("./1615", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1615", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12980, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5071] newfstatat(3, "", [pid 12982] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12982] <... bpf resumed>) = 3 [pid 5071] getdents64(3, [pid 5067] mkdir("./1558", 0777 [pid 12982] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1533", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./1615/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1615/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12982] <... bpf resumed>) = 4 [pid 5071] unlink("./1615/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12982] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5068] umount2("./1577", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... mkdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1533", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 5068] openat(AT_FDCWD, "./1577", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(3) = 0 [pid 5071] rmdir("./1615"./strace-static-x86_64: Process 12983 attached [pid 12982] <... bpf resumed>) = 5 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] getdents64(3, [pid 12983] set_robust_list(0x5555686ec660, 24 [pid 5071] mkdir("./1616", 0777 [pid 12983] <... set_robust_list resumed>) = 0 [pid 12982] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12983 [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12983] chdir("./1558" [pid 5068] getdents64(3, [pid 12983] <... chdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] umount2("./1533/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12983] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... mkdir resumed>) = 0 [pid 5068] umount2("./1577/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12982] <... bpf resumed>) = 6 [pid 12983] <... prctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12983] setpgid(0, 0 [pid 12982] exit_group(0 [pid 5068] newfstatat(AT_FDCWD, "./1577/binderfs", [pid 5066] newfstatat(AT_FDCWD, "./1533/binderfs", [pid 12983] <... setpgid resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12983] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] unlink("./1577/binderfs"./strace-static-x86_64: Process 12984 attached [pid 12982] <... exit_group resumed>) = ? [pid 5068] <... unlink resumed>) = 0 [pid 5066] unlink("./1533/binderfs" [pid 12983] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 5068] getdents64(3, 0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5066] getdents64(3, [pid 5068] rmdir("./1577" [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12982] +++ exited with 0 +++ [pid 5068] <... rmdir resumed>) = 0 [pid 5066] close(3) = 0 [pid 12984] set_robust_list(0x5555686ec660, 24 [pid 12983] write(3, "1000", 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12984 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12982, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5068] mkdir("./1578", 0777 [pid 5066] rmdir("./1533" [pid 12984] <... set_robust_list resumed>) = 0 [pid 12983] <... write resumed>) = 4 [pid 5069] umount2("./1600", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12984] chdir("./1616" [pid 12983] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 12983] <... close resumed>) = 0 [pid 12984] <... chdir resumed>) = 0 [pid 12983] symlink("/dev/binderfs", "./binderfs" [pid 5069] openat(AT_FDCWD, "./1600", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12983] <... symlink resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5066] mkdir("./1534", 0777./strace-static-x86_64: Process 12985 attached [pid 12984] <... prctl resumed>) = 0 [pid 12983] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] newfstatat(3, "", [pid 12985] set_robust_list(0x5555686ec660, 24 [pid 12984] setpgid(0, 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12985] <... set_robust_list resumed>) = 0 [pid 12985] chdir("./1578" [pid 5069] getdents64(3, [pid 12985] <... chdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12983] <... bpf resumed>) = 3 [pid 12985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] umount2("./1600/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 12985] <... prctl resumed>) = 0 [pid 12984] <... setpgid resumed>) = 0 [pid 12983] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12985 [pid 12985] setpgid(0, 0 [pid 12984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] newfstatat(AT_FDCWD, "./1600/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12985] <... setpgid resumed>) = 0 [pid 12983] <... bpf resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12984] <... openat resumed>) = 3 [pid 12983] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] unlink("./1600/binderfs" [pid 12985] <... openat resumed>) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 12985] write(3, "1000", 4) = 4 [pid 12985] close(3 [pid 5069] getdents64(3, [pid 12985] <... close resumed>) = 0 [pid 12985] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 12986 attached [pid 12985] <... symlink resumed>) = 0 [pid 5069] close(3 [pid 12986] set_robust_list(0x5555686ec660, 24 [pid 12984] write(3, "1000", 4 [pid 12983] <... bpf resumed>) = 5 [pid 12984] <... write resumed>) = 4 [pid 12986] <... set_robust_list resumed>) = 0 [pid 12985] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12984] close(3 [pid 5069] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12986 [pid 12983] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12986] chdir("./1534" [pid 12985] <... bpf resumed>) = 3 [pid 12984] <... close resumed>) = 0 [pid 5069] rmdir("./1600" [pid 12986] <... chdir resumed>) = 0 [pid 12985] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12984] symlink("/dev/binderfs", "./binderfs" [pid 12983] <... bpf resumed>) = 6 [pid 12986] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12985] <... bpf resumed>) = 4 [pid 12983] exit_group(0 [pid 5069] <... rmdir resumed>) = 0 [pid 12984] <... symlink resumed>) = 0 [pid 12986] <... prctl resumed>) = 0 [pid 12983] <... exit_group resumed>) = ? [pid 12986] setpgid(0, 0 [pid 12985] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12984] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] mkdir("./1601", 0777 [pid 12986] <... setpgid resumed>) = 0 [pid 12986] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12984] <... bpf resumed>) = 3 [pid 12983] +++ exited with 0 +++ [pid 5069] <... mkdir resumed>) = 0 [pid 12985] <... bpf resumed>) = 5 [pid 12984] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12986] <... openat resumed>) = 3 [pid 12985] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12984] <... bpf resumed>) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 12987 attached [pid 12986] write(3, "1000", 4 [pid 12984] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12983, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12986] <... write resumed>) = 4 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 12987] set_robust_list(0x5555686ec660, 24 [pid 12986] close(3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 12987] <... set_robust_list resumed>) = 0 [pid 12986] <... close resumed>) = 0 [pid 12987] chdir("./1601" [pid 12986] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12987 [pid 12987] <... chdir resumed>) = 0 [pid 12986] <... symlink resumed>) = 0 [pid 12984] <... bpf resumed>) = 5 [pid 12987] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12984] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12987] <... prctl resumed>) = 0 [pid 5067] umount2("./1558", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12987] setpgid(0, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12987] <... setpgid resumed>) = 0 [pid 12986] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] openat(AT_FDCWD, "./1558", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12986] <... bpf resumed>) = 3 [pid 12985] <... bpf resumed>) = 6 [pid 12984] <... bpf resumed>) = 6 [pid 5067] <... openat resumed>) = 3 [pid 12987] <... openat resumed>) = 3 [pid 12986] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12985] exit_group(0 [pid 12984] exit_group(0 [pid 12987] write(3, "1000", 4 [pid 5067] newfstatat(3, "", [pid 12987] <... write resumed>) = 4 [pid 12986] <... bpf resumed>) = 4 [pid 12985] <... exit_group resumed>) = ? [pid 12984] <... exit_group resumed>) = ? [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12987] close(3 [pid 5067] getdents64(3, [pid 12987] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12987] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./1558/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12987] <... symlink resumed>) = 0 [pid 12984] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./1558/binderfs", [pid 12987] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12984, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12987] <... bpf resumed>) = 3 [pid 5067] unlink("./1558/binderfs" [pid 12987] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12986] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12985] +++ exited with 0 +++ [pid 5067] <... unlink resumed>) = 0 [pid 5071] umount2("./1616", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./1616", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(3, [pid 5071] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12986] <... bpf resumed>) = 5 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12985, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5071] newfstatat(3, "", [pid 5067] close(3 [pid 12987] <... bpf resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... close resumed>) = 0 [pid 12987] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5071] getdents64(3, [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] rmdir("./1558" [pid 12987] <... bpf resumed>) = 5 [pid 12986] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5067] <... rmdir resumed>) = 0 [pid 5071] umount2("./1616/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./1616/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./1578", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./1559", 0777 [pid 12987] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./1616/binderfs" [pid 5068] openat(AT_FDCWD, "./1578", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... unlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5071] close(3./strace-static-x86_64: Process 12988 attached [pid 12987] <... bpf resumed>) = 6 [pid 12986] <... bpf resumed>) = 6 [pid 5071] <... close resumed>) = 0 [pid 5068] umount2("./1578/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12986] exit_group(0 [pid 5067] <... clone resumed>, child_tidptr=0x5555686ec650) = 12988 [pid 12986] <... exit_group resumed>) = ? [pid 12988] set_robust_list(0x5555686ec660, 24) = 0 [pid 12987] exit_group(0 [pid 5071] rmdir("./1616" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12988] chdir("./1559" [pid 12987] <... exit_group resumed>) = ? [pid 12988] <... chdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./1578/binderfs", [pid 5071] mkdir("./1617", 0777 [pid 12988] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12988] <... prctl resumed>) = 0 [pid 12988] setpgid(0, 0 [pid 5068] unlink("./1578/binderfs" [pid 12988] <... setpgid resumed>) = 0 [pid 12988] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 12986] +++ exited with 0 +++ [pid 12988] <... openat resumed>) = 3 [pid 12987] +++ exited with 0 +++ [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] getdents64(3, [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12986, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12988] write(3, "1000", 4) = 4 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12987, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12988] close(3 [pid 5069] umount2("./1601", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12988] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12988] symlink("/dev/binderfs", "./binderfs" [pid 5069] openat(AT_FDCWD, "./1601", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12988] <... symlink resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 12989 attached [pid 12988] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5068] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12989] set_robust_list(0x5555686ec660, 24 [pid 12988] <... bpf resumed>) = 3 [pid 5069] getdents64(3, [pid 5068] close(3 [pid 5066] umount2("./1534", MNT_DETACH|UMOUNT_NOFOLLOW [pid 12988] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5068] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12989] <... set_robust_list resumed>) = 0 [pid 12988] <... bpf resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555686ec650) = 12989 [pid 5069] umount2("./1601/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./1578" [pid 5066] openat(AT_FDCWD, "./1534", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 12989] chdir("./1617" [pid 12988] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 12989] <... chdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./1601/binderfs", [pid 12989] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12988] <... bpf resumed>) = 5 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] mkdir("./1579", 0777 [pid 5066] newfstatat(3, "", [pid 12989] <... prctl resumed>) = 0 [pid 12988] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5069] unlink("./1601/binderfs" [pid 12989] setpgid(0, 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 12989] <... setpgid resumed>) = 0 [pid 12989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12988] <... bpf resumed>) = 6 [pid 5069] <... unlink resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(3, ./strace-static-x86_64: Process 12990 attached [pid 12989] <... openat resumed>) = 3 [pid 12988] exit_group(0 [pid 5069] getdents64(3, [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 12990] set_robust_list(0x5555686ec660, 24 [pid 12989] write(3, "1000", 4 [pid 12988] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x5555686ec650) = 12990 [pid 5066] umount2("./1534/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 12990] <... set_robust_list resumed>) = 0 [pid 12989] <... write resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12990] chdir("./1579" [pid 12989] close(3 [pid 5069] rmdir("./1601" [pid 5066] newfstatat(AT_FDCWD, "./1534/binderfs", [pid 12988] +++ exited with 0 +++ [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12990] <... chdir resumed>) = 0 [pid 12990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12990] setpgid(0, 0) = 0 [pid 12989] <... close resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5066] unlink("./1534/binderfs" [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12988, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 12990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12989] symlink("/dev/binderfs", "./binderfs" [pid 5069] mkdir("./1602", 0777 [pid 5066] <... unlink resumed>) = 0 [pid 12990] <... openat resumed>) = 3 [pid 12989] <... symlink resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 12990] write(3, "1000", 4) = 4 [pid 12990] close(3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./1559", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12990] <... close resumed>) = 0 [pid 12989] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 12990] symlink("/dev/binderfs", "./binderfs" [pid 12989] <... bpf resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./1559", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 12991 attached [pid 12990] <... symlink resumed>) = 0 [pid 12989] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 12991] set_robust_list(0x5555686ec660, 24 [pid 5069] <... clone resumed>, child_tidptr=0x5555686ec650) = 12991 [pid 5067] newfstatat(3, "", [pid 5066] rmdir("./1534" [pid 12991] <... set_robust_list resumed>) = 0 [pid 12990] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 12989] <... bpf resumed>) = 4 [pid 5066] <... rmdir resumed>) = 0 [pid 12991] chdir("./1602" [pid 12990] <... bpf resumed>) = 3 [pid 12989] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12991] <... chdir resumed>) = 0 [pid 12990] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_RINGBUF, key_size=0, value_size=0, max_entries=32768, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./1535", 0777 [pid 12991] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 12990] <... bpf resumed>) = 4 [pid 12989] <... bpf resumed>) = 5 [pid 5067] getdents64(3, [pid 12991] <... prctl resumed>) = 0 [pid 12990] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT, insn_cnt=16, insns=0x20000280, license="syzkaller", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144 [pid 12989] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 12991] setpgid(0, 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 3 entries */, 32768) = 80 [pid 5066] <... mkdir resumed>) = 0 [pid 12991] <... setpgid resumed>) = 0 [pid 12990] <... bpf resumed>) = 5 [pid 12989] <... bpf resumed>) = 6 [pid 5067] umount2("./1559/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 12991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 12990] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="kfree", prog_fd=5}}, 16 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 12989] exit_group(0 [pid 5067] newfstatat(AT_FDCWD, "./1559/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 12991] <... openat resumed>) = 3 [pid 12990] <... bpf resumed>) = 6 [pid 12989] <... exit_group resumed>) = ? [pid 5067] unlink("./1559/binderfs"./strace-static-x86_64: Process 12992 attached [pid 12991] write(3, "1000", 4 [pid 12990] exit_group(0 [pid 12992] set_robust_list(0x5555686ec660, 24 [pid 5066] <... clone resumed>, child_tidptr=0x5555686ec650) = 12992 [pid 5067] <... unlink resumed>) = 0 [pid 12992] <... set_robust_list resumed>) = 0 [pid 12991] <... write resumed>) = 4 [pid 12990] <... exit_group resumed>) = ? [pid 5067] getdents64(3, [pid 12992] chdir("./1535" [pid 12991] close(3 [pid 12992] <... chdir resumed>) = 0 [pid 12991] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555686ed6f0 /* 0 entries */, 32768) = 0 [pid 12992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 12992] setpgid(0, 0 [pid 5067] close(3 [pid 12992] <... setpgid resumed>) = 0 [pid 12992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 12991] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... close resumed>) = 0 [pid 12992] write(3, "1000", 4 [pid 12991] <... symlink resumed>) = 0 [pid 12992] <... write resumed>) = 4 [pid 5067] rmdir("./1559" [pid 12992] close(3) = 0 [pid 12992] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 12991] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_SOCKHASH, key_size=5, value_size=8, max_entries=12, map_flags=0, inner_map_fd=-1, map_name="", map_ifindex=0, btf_fd=-1, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [ 245.554654][ T5062] ================================================================== [ 245.563543][ T5062] BUG: KASAN: slab-use-after-free in bpf_trace_run2+0x17b/0x530 [ 245.571721][ T5062] Read of size 8 at addr ffff88802b8b5f70 by task strace-static-x/5062 [ 245.581132][ T5062] [ 245.583453][ T5062] CPU: 1 PID: 5062 Comm: strace-static-x Not tainted 6.8.0-syzkaller-05243-g14bb1e8c8d4a #0 [ 245.593970][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 245.604658][ T5062] Call Trace: [ 245.608317][ T5062] [ 245.611293][ T5062] dump_stack_lvl+0x1e7/0x2e0 [ 245.616113][ T5062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.621316][ T5062] ? __pfx__printk+0x10/0x10 [ 245.625991][ T5062] ? _printk+0xd5/0x120 [ 245.630143][ T5062] ? __virt_addr_valid+0x183/0x520 [ 245.635280][ T5062] ? __virt_addr_valid+0x183/0x520 [ 245.640442][ T5062] print_report+0x169/0x550 [ 245.644991][ T5062] ? __virt_addr_valid+0x183/0x520 [ 245.650178][ T5062] ? __virt_addr_valid+0x183/0x520 [ 245.655392][ T5062] ? __virt_addr_valid+0x44e/0x520 [ 245.660592][ T5062] ? __phys_addr+0xba/0x170 [ 245.665105][ T5062] ? bpf_trace_run2+0x17b/0x530 [ 245.669964][ T5062] kasan_report+0x143/0x180 [ 245.674476][ T5062] ? bpf_trace_run2+0x17b/0x530 [ 245.679343][ T5062] bpf_trace_run2+0x17b/0x530 [ 245.684032][ T5062] ? __pfx_bpf_trace_run2+0x10/0x10 [ 245.689246][ T5062] ? lockdep_hardirqs_on+0x99/0x150 [ 245.694733][ T5062] ? ref_tracker_free+0x4ef/0x7e0 [ 245.700105][ T5062] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 245.706043][ T5062] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 245.712732][ T5062] ? ref_tracker_free+0x4ef/0x7e0 [ 245.717751][ T5062] kfree+0x291/0x380 [ 245.721660][ T5062] ref_tracker_free+0x4ef/0x7e0 [ 245.726505][ T5062] ? __pfx_ref_tracker_free+0x10/0x10 [ 245.731866][ T5062] ? __sk_destruct+0x37d/0x5f0 [ 245.736690][ T5062] ? unix_release_sock+0xa90/0xd20 [ 245.742112][ T5062] ? unix_release+0x91/0xc0 [ 245.746605][ T5062] ? sock_close+0xbc/0x240 [ 245.751038][ T5062] ? __fput+0x429/0x8a0 [ 245.755199][ T5062] ? __x64_sys_close+0x7f/0x110 [ 245.760041][ T5062] ? do_syscall_64+0xfb/0x240 [ 245.764795][ T5062] ? entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 245.772152][ T5062] ? bpf_sk_storage_free+0x1c/0x280 [ 245.777852][ T5062] __sk_destruct+0x37d/0x5f0 [ 245.782445][ T5062] unix_release_sock+0xa90/0xd20 [ 245.787383][ T5062] ? __pfx_unix_release_sock+0x10/0x10 [ 245.792833][ T5062] ? __down_write_common+0x162/0x200 [ 245.798147][ T5062] ? __pfx___down_write_common+0x10/0x10 [ 245.803774][ T5062] unix_release+0x91/0xc0 [ 245.808095][ T5062] sock_close+0xbc/0x240 [ 245.812374][ T5062] ? __pfx_sock_close+0x10/0x10 [ 245.817321][ T5062] __fput+0x429/0x8a0 [ 245.821399][ T5062] __x64_sys_close+0x7f/0x110 [ 245.826071][ T5062] do_syscall_64+0xfb/0x240 [ 245.830661][ T5062] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 245.836731][ T5062] RIP: 0033:0x4e91a7 [ 245.840749][ T5062] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 245.860699][ T5062] RSP: 002b:00007ffd11b1ae88 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 245.869290][ T5062] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000004e91a7 [ 245.877534][ T5062] RDX: ffffffffffffffa8 RSI: 0000000000008910 RDI: 0000000000000003 [ 245.886474][ T5062] RBP: 0000000000000003 R08: 00000000ffffffff R09: 0000000000000000 [ 245.894614][ T5062] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd11b1aef0 [ 245.902663][ T5062] R13: 00007ffd11b1ae90 R14: 0000000000000048 R15: 000000000054fd62 [ 245.910642][ T5062] [ 245.913656][ T5062] [ 245.915965][ T5062] Allocated by task 12990: [ 245.920400][ T5062] kasan_save_track+0x3f/0x80 [ 245.925071][ T5062] __kasan_kmalloc+0x98/0xb0 [ 245.929651][ T5062] kmalloc_trace+0x1d9/0x360 [ 245.934234][ T5062] bpf_raw_tp_link_attach+0x2a0/0x6e0 [ 245.942826][ T5062] bpf_raw_tracepoint_open+0x1c2/0x240 [ 245.948298][ T5062] __sys_bpf+0x3c0/0x810 [ 245.952925][ T5062] __x64_sys_bpf+0x7c/0x90 [ 245.958284][ T5062] do_syscall_64+0xfb/0x240 [ 245.962901][ T5062] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 245.968960][ T5062] [ 245.971306][ T5062] Freed by task 12990: [ 245.975369][ T5062] kasan_save_track+0x3f/0x80 [ 245.980038][ T5062] kasan_save_free_info+0x40/0x50 [ 245.985053][ T5062] poison_slab_object+0xa6/0xe0 [ 245.989985][ T5062] __kasan_slab_free+0x37/0x60 [ 245.994736][ T5062] kfree+0x14a/0x380 [ 245.998637][ T5062] bpf_link_release+0x3b/0x50 [ 246.003302][ T5062] __fput+0x429/0x8a0 [ 246.007274][ T5062] task_work_run+0x24f/0x310 [ 246.011893][ T5062] do_exit+0xa1b/0x27e0 [ 246.016038][ T5062] do_group_exit+0x207/0x2c0 [ 246.020618][ T5062] __x64_sys_exit_group+0x3f/0x40 [ 246.025630][ T5062] do_syscall_64+0xfb/0x240 [ 246.030120][ T5062] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 246.036094][ T5062] [ 246.038507][ T5062] The buggy address belongs to the object at ffff88802b8b5f00 [ 246.038507][ T5062] which belongs to the cache kmalloc-128 of size 128 [ 246.053238][ T5062] The buggy address is located 112 bytes inside of [ 246.053238][ T5062] freed 128-byte region [ffff88802b8b5f00, ffff88802b8b5f80) [ 246.067552][ T5062] [ 246.069865][ T5062] The buggy address belongs to the physical page: [ 246.076367][ T5062] page:ffffea0000ae2d40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b8b5 [ 246.086606][ T5062] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 246.094149][ T5062] page_type: 0xffffffff() [ 246.098640][ T5062] raw: 00fff00000000800 ffff888014c418c0 dead000000000122 0000000000000000 [ 246.107217][ T5062] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 246.115979][ T5062] page dumped because: kasan: bad access detected [ 246.122461][ T5062] page_owner tracks the page as allocated [ 246.128172][ T5062] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 12986, tgid 12986 (syz-executor387), ts 245415352829, free_ts 245409757643 [ 246.147430][ T5062] post_alloc_hook+0x1ea/0x210 [ 246.152276][ T5062] get_page_from_freelist+0x33ea/0x3580 [ 246.158357][ T5062] __alloc_pages+0x256/0x680 [ 246.162941][ T5062] alloc_slab_page+0x5f/0x160 [ 246.167620][ T5062] new_slab+0x84/0x2f0 [ 246.171852][ T5062] ___slab_alloc+0xd1b/0x13e0 [ 246.176516][ T5062] __kmalloc_node+0x2d9/0x4e0 [ 246.181185][ T5062] kvmalloc_node+0x72/0x190 [ 246.185704][ T5062] bpf_check+0xd82/0x190c0 [ 246.190109][ T5062] bpf_prog_load+0x1667/0x20f0 [ 246.194864][ T5062] __sys_bpf+0x4ee/0x810 [ 246.199093][ T5062] __x64_sys_bpf+0x7c/0x90 [ 246.203496][ T5062] do_syscall_64+0xfb/0x240 [ 246.207989][ T5062] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 246.213875][ T5062] page last free pid 12984 tgid 12984 stack trace: [ 246.220359][ T5062] free_unref_page_prepare+0x968/0xa90 [ 246.225896][ T5062] free_unref_page_list+0x5a3/0x850 [ 246.231085][ T5062] release_pages+0x2744/0x2a80 [ 246.235839][ T5062] tlb_flush_mmu+0x34d/0x4e0 [ 246.241547][ T5062] tlb_finish_mmu+0xd4/0x200 [ 246.246125][ T5062] exit_mmap+0x4b6/0xd40 [ 246.250361][ T5062] __mmput+0x115/0x3c0 [ 246.254419][ T5062] exit_mm+0x220/0x310 [ 246.258566][ T5062] do_exit+0x99e/0x27e0 [ 246.262711][ T5062] do_group_exit+0x207/0x2c0 [ 246.267313][ T5062] __x64_sys_exit_group+0x3f/0x40 [ 246.272429][ T5062] do_syscall_64+0xfb/0x240 [ 246.276936][ T5062] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 246.283059][ T5062] [ 246.285403][ T5062] Memory state around the buggy address: [ 246.291193][ T5062] ffff88802b8b5e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.299242][ T5062] ffff88802b8b5e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.307338][ T5062] >ffff88802b8b5f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.315390][ T5062] ^ [ 246.323090][ T5062] ffff88802b8b5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.331156][ T5062] ffff88802b8b6000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.339378][ T5062] ================================================================== [ 246.347955][ T5062] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 246.355252][ T5062] CPU: 1 PID: 5062 Comm: strace-static-x Not tainted 6.8.0-syzkaller-05243-g14bb1e8c8d4a #0 [ 246.365491][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 246.375798][ T5062] Call Trace: [ 246.379079][ T5062] [ 246.381999][ T5062] dump_stack_lvl+0x1e7/0x2e0 [ 246.386683][ T5062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.391890][ T5062] ? __pfx__printk+0x10/0x10 [ 246.396539][ T5062] ? vscnprintf+0x5d/0x90 [ 246.400906][ T5062] panic+0x349/0x860 [ 246.405143][ T5062] ? check_panic_on_warn+0x21/0xb0 [ 246.410257][ T5062] ? __pfx_panic+0x10/0x10 [ 246.414661][ T5062] ? mark_lock+0x9a/0x350 [ 246.418985][ T5062] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 246.424871][ T5062] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 246.430842][ T5062] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 246.437161][ T5062] ? print_report+0x502/0x550 [ 246.441853][ T5062] check_panic_on_warn+0x86/0xb0 [ 246.447132][ T5062] ? bpf_trace_run2+0x17b/0x530 [ 246.452262][ T5062] end_report+0x6e/0x140 [ 246.457283][ T5062] kasan_report+0x154/0x180 [ 246.461778][ T5062] ? bpf_trace_run2+0x17b/0x530 [ 246.466619][ T5062] bpf_trace_run2+0x17b/0x530 [ 246.471303][ T5062] ? __pfx_bpf_trace_run2+0x10/0x10 [ 246.476489][ T5062] ? lockdep_hardirqs_on+0x99/0x150 [ 246.481761][ T5062] ? ref_tracker_free+0x4ef/0x7e0 [ 246.486789][ T5062] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 246.492688][ T5062] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 246.499037][ T5062] ? ref_tracker_free+0x4ef/0x7e0 [ 246.504065][ T5062] kfree+0x291/0x380 [ 246.507982][ T5062] ref_tracker_free+0x4ef/0x7e0 [ 246.512892][ T5062] ? __pfx_ref_tracker_free+0x10/0x10 [ 246.518351][ T5062] ? __sk_destruct+0x37d/0x5f0 [ 246.523315][ T5062] ? unix_release_sock+0xa90/0xd20 [ 246.528463][ T5062] ? unix_release+0x91/0xc0 [ 246.532969][ T5062] ? sock_close+0xbc/0x240 [ 246.537383][ T5062] ? __fput+0x429/0x8a0 [ 246.541530][ T5062] ? __x64_sys_close+0x7f/0x110 [ 246.546382][ T5062] ? do_syscall_64+0xfb/0x240 [ 246.551071][ T5062] ? entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 246.557323][ T5062] ? bpf_sk_storage_free+0x1c/0x280 [ 246.562664][ T5062] __sk_destruct+0x37d/0x5f0 [ 246.567280][ T5062] unix_release_sock+0xa90/0xd20 [ 246.572223][ T5062] ? __pfx_unix_release_sock+0x10/0x10 [ 246.577767][ T5062] ? __down_write_common+0x162/0x200 [ 246.583078][ T5062] ? __pfx___down_write_common+0x10/0x10 [ 246.588821][ T5062] unix_release+0x91/0xc0 [ 246.593157][ T5062] sock_close+0xbc/0x240 [ 246.597403][ T5062] ? __pfx_sock_close+0x10/0x10 [ 246.602555][ T5062] __fput+0x429/0x8a0 [ 246.606549][ T5062] __x64_sys_close+0x7f/0x110 [ 246.611309][ T5062] do_syscall_64+0xfb/0x240 [ 246.615808][ T5062] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 246.625008][ T5062] RIP: 0033:0x4e91a7 [ 246.628894][ T5062] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 246.648536][ T5062] RSP: 002b:00007ffd11b1ae88 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 246.656959][ T5062] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000004e91a7 [ 246.665538][ T5062] RDX: ffffffffffffffa8 RSI: 0000000000008910 RDI: 0000000000000003 [ 246.673601][ T5062] RBP: 0000000000000003 R08: 00000000ffffffff R09: 0000000000000000 [ 246.681827][ T5062] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd11b1aef0 [ 246.689801][ T5062] R13: 00007ffd11b1ae90 R14: 0000000000000048 R15: 000000000054fd62 [ 246.697781][ T5062] [ 246.700984][ T5062] Kernel Offset: disabled [ 246.705299][ T5062] Rebooting in 86400 seconds..